Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
File: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft (raw, json)
Hash identifier: Q4ZHXPyIsV9OpMLNIdbCidS6jRQEL/DhN9mOYZ3UXM0=
Subject key identifier: E9:5B:13:D9:E1:E6:B7:35:1E:F9:3F:E3:68:68:B0:52:15:CE:CB:F5
Authority key identifier: B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
Certificate issuer: /CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Certificate serial: 01A166EBF3BC677C05524C8005CF55E4D866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
Manifest number: 1ABE
Signing time: Fri 23 Oct 2026 04:01:41 +0000
Manifest this update: Fri 23 Oct 2026 04:01:41 +0000
Manifest next update: Sat 24 Oct 2026 04:01:41 +0000
Files and hashes: 1: VIjK-dF1RkU8oL9JO5ackgQvQqk.roa (hash: EuZj5CNsImrt381xNpJVt+ICs2RyaQvBUySYpPa5Un8=)
2: tBz0by2NzKIkh_m261Gzm8WL1fA.roa (hash: HsCmK+FnFFM5EN4UPd625pAFTouSWoOu/R7Evk3aoN0=)
3: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl (hash: ra6Cukosss/GlApQm/2Pa8IReMEgGkgyMTuCAdfMSa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:eb:f3:bc:67:7c:05:52:4c:80:05:cf:55:e4:d8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Validity
Not Before: Oct 23 04:01:41 2026 GMT
Not After : Oct 24 04:01:41 2026 GMT
Subject: CN=e95b13d9e1e6b7351ef93fe36868b05215cecbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:40:c2:c8:ec:02:85:94:85:17:52:49:2b:ef:
81:e7:50:7b:6e:2f:cb:83:30:df:f6:4c:8e:6c:ae:
7b:6c:01:8e:0a:0b:09:f4:46:56:32:36:11:b9:30:
74:c6:46:10:c7:38:f7:a1:d6:b5:52:76:13:59:3c:
ba:04:9f:4b:18:ac:aa:ee:5b:70:5c:35:55:3f:a7:
24:09:b1:10:bf:00:b6:f0:02:43:b1:41:1a:4b:4f:
cc:11:7c:18:05:22:eb:d3:f4:35:94:48:aa:56:87:
1d:7e:96:19:bb:dd:90:f1:aa:2d:2a:72:26:22:a4:
b2:a4:32:6c:3d:ed:2a:60:7b:3b:b6:5f:4a:82:ed:
67:38:83:5d:94:88:85:23:3d:fa:14:d2:2d:b2:11:
98:dc:00:22:f0:40:3d:da:78:28:cf:91:dc:a1:84:
c2:41:6e:b9:3f:3d:81:ee:82:6e:ed:65:15:bd:21:
94:e8:b6:19:4f:2c:48:b5:e1:a4:47:78:0c:7d:d4:
d8:d7:83:2a:16:22:67:83:de:67:ee:86:cb:9d:25:
f2:3f:b9:f9:f6:6a:45:ce:e1:cc:11:ef:be:54:d8:
94:5f:99:3d:3e:14:c4:4a:14:9d:e7:a7:05:42:07:
5e:2c:01:c4:ab:96:16:c4:f3:16:e2:62:7c:5f:0a:
06:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5B:13:D9:E1:E6:B7:35:1E:F9:3F:E3:68:68:B0:52:15:CE:CB:F5
X509v3 Authority Key Identifier:
keyid:B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:64:dc:3a:ff:c8:b3:51:ae:0a:6b:27:82:57:fe:7f:5b:55:
7c:a1:62:b3:09:92:8d:4c:ad:5d:9d:3a:21:12:76:fe:e1:b7:
c5:d8:f4:ab:47:95:47:c5:6d:44:c3:82:e1:d3:64:a4:77:ff:
78:f5:2b:2c:e8:eb:4b:af:6f:55:0e:dc:6f:d2:b1:c7:96:47:
e9:40:78:8d:01:f1:6b:fd:3a:7a:21:48:61:28:7b:d9:ae:d6:
62:3d:61:cf:e4:37:fc:ea:f5:e7:26:d6:4b:2d:a5:b6:44:48:
18:66:72:94:10:54:c3:05:60:8b:30:b0:a8:09:bf:29:14:b0:
1e:6a:e4:7c:16:3c:1e:aa:09:49:e9:6b:71:f4:ce:4c:a5:ae:
91:bd:dc:5e:0d:d4:2b:f4:b8:b1:67:bb:90:ea:e0:a2:02:57:
83:bb:f6:0d:30:31:bf:59:dd:37:56:fa:b3:ec:1b:35:49:d9:
bb:f9:3e:de:67:31:0a:a5:2f:2f:0f:8c:40:8e:5f:e1:d0:74:
7e:76:71:06:58:e6:5c:51:86:63:7c:3b:08:99:cb:8c:df:b4:
45:74:45:f8:23:65:54:77:a8:b0:4a:63:cf:7f:bc:cb:75:10:
0f:05:74:41:7e:db:91:05:f9:df:8b:79:52:bf:30:30:7e:79:
b7:94:2b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 11:55:09 2026 by rpki-client