Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
File: tkslytxMSBZvqbvV3oZxwiBBW2c.mft (raw, json)
Hash identifier: GAjDd7J+ZmKOCiBfuEQwe65ps9IakOu1uVNMJXxsyxI=
Subject key identifier: 20:25:BC:4B:60:34:01:E7:FF:C2:69:5A:70:69:89:D7:8C:E6:CF:91
Authority key identifier: B6:4B:25:CA:DC:4C:48:16:6F:A9:BB:D5:DE:86:71:C2:20:41:5B:67
Certificate issuer: /CN=b64b25cadc4c48166fa9bbd5de8671c220415b67
Certificate serial: 01A08A558CE37435961A2DBED0EDC08AC3D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 08:00:57 +0000
Manifest this update: Thu 10 Sep 2026 08:00:57 +0000
Manifest next update: Fri 11 Sep 2026 08:00:57 +0000
Files and hashes: 1: tkslytxMSBZvqbvV3oZxwiBBW2c.crl (hash: uxl9ulOoSZk+d0xkx1fAlzVIbbImRNZL2jWvkIJErT4=)
2: wjfeNIT2f9SQVrYh283P4LAEn3I.roa (hash: xyRve1H3yBDvVaJ3b/2Cr7b0uxIWJOpGM6Hi6WICalY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:8c:e3:74:35:96:1a:2d:be:d0:ed:c0:8a:c3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64b25cadc4c48166fa9bbd5de8671c220415b67
Validity
Not Before: Sep 10 08:00:57 2026 GMT
Not After : Sep 11 08:00:57 2026 GMT
Subject: CN=2025bc4b603401e7ffc2695a706989d78ce6cf91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6a:f6:40:35:66:33:65:8c:8e:f3:8b:29:06:
ea:0d:68:fa:fa:e2:da:57:29:3f:10:6e:c1:6e:69:
bf:99:56:e9:83:51:60:99:b6:ae:87:c7:d0:d9:ed:
00:96:af:e5:ce:f7:6c:77:74:c2:b6:9c:59:51:87:
76:21:4b:fb:18:f2:a3:99:4b:54:5e:92:8d:b0:67:
c1:58:21:34:e2:87:43:db:ac:69:54:97:56:51:37:
8a:f4:77:10:6d:cf:dd:d4:36:fd:ad:5c:b9:30:ae:
62:b0:04:3e:9a:e7:fe:24:dc:ec:ea:f1:1b:3c:f8:
40:b1:a3:75:ac:28:5d:6b:f9:ba:92:17:a5:3d:87:
3b:b1:43:95:36:e2:00:72:bc:a4:28:9c:3f:b7:54:
c5:8d:f0:b3:a4:7f:b7:91:3d:cc:77:38:e0:71:82:
0b:9a:4d:69:b0:b7:6b:d1:15:b8:b7:a4:96:00:bc:
ba:45:94:ac:94:b5:dd:27:b0:b6:5e:b6:08:d8:92:
39:ac:2f:47:c2:49:6d:7a:02:10:0f:55:9e:6f:82:
85:7f:82:e6:6a:a3:24:1e:9e:7a:4e:96:06:a6:e9:
33:47:28:48:b6:da:10:c9:ce:2c:c6:79:73:53:29:
68:e4:df:08:d8:0e:5c:08:a7:e2:ee:39:f8:f6:3c:
fb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:25:BC:4B:60:34:01:E7:FF:C2:69:5A:70:69:89:D7:8C:E6:CF:91
X509v3 Authority Key Identifier:
keyid:B6:4B:25:CA:DC:4C:48:16:6F:A9:BB:D5:DE:86:71:C2:20:41:5B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f3:7d:58:57:c1:77:52:10:0f:5f:b4:4c:c2:57:15:ac:da:
84:b8:55:b0:59:9e:f8:1c:8a:27:49:c2:ba:a7:4e:71:e5:92:
3f:c4:e9:45:21:72:09:fe:76:e1:4f:42:20:d2:04:51:ee:68:
31:73:59:dc:b6:c1:f3:8b:b1:0a:a5:b7:d5:48:7a:93:df:da:
18:b6:be:32:2a:fc:c2:04:9d:74:82:ef:6d:d0:73:f3:1c:28:
3b:c8:26:cc:cf:0c:4c:a3:75:35:6f:2e:b2:68:fe:1d:d9:8b:
2f:2f:6f:7c:11:91:e5:f4:97:d8:d0:71:a2:35:ad:91:1b:fc:
f7:b0:a0:3f:86:54:6f:55:4c:91:de:bf:98:79:4e:92:48:63:
1c:cd:7a:08:05:fd:0e:f4:89:e1:48:93:db:3d:c3:cd:de:91:
b7:61:ca:bf:46:8d:d6:e5:06:f2:f5:ab:a1:4e:72:99:55:35:
68:52:38:27:5f:75:bf:1f:95:be:e2:b4:0b:43:41:aa:e2:a1:
23:2d:c4:20:59:aa:04:60:32:1e:74:3e:c8:f8:66:66:6c:e5:
05:07:26:34:4c:74:c8:ff:99:5a:46:c3:ca:b9:a6:78:2c:f8:
0b:44:39:fd:5d:d4:e5:0e:ee:be:6a:67:27:0a:07:79:c0:ed:
01:b2:7f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:11:46 2026 by rpki-client