Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/5adb71-10ac-4223-b36b-e5b9d6e6e47d/1/TinfFJUjsDxG7tiggh1C8414SEE.mft
File: TinfFJUjsDxG7tiggh1C8414SEE.mft (raw, json)
Hash identifier: 0OgeV1ZmVQ7vS+SKEIri/ROODX0siMMym8E+s7mhoPE=
Subject key identifier: BD:58:F7:82:A3:AD:A0:7D:0C:D2:21:10:8E:A2:39:C3:8A:73:B9:32
Authority key identifier: 4E:29:DF:14:95:23:B0:3C:46:EE:D8:A0:82:1D:42:F3:8D:78:48:41
Certificate issuer: /CN=4e29df149523b03c46eed8a0821d42f38d784841
Certificate serial: 01A15AB053FE630F59D8BFFA771B70BBD3C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TinfFJUjsDxG7tiggh1C8414SEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/5adb71-10ac-4223-b36b-e5b9d6e6e47d/1/TinfFJUjsDxG7tiggh1C8414SEE.mft
Manifest number: 0F
Signing time: Tue 20 Oct 2026 19:01:07 +0000
Manifest this update: Tue 20 Oct 2026 19:01:07 +0000
Manifest next update: Wed 21 Oct 2026 19:01:07 +0000
Files and hashes: 1: 8Msd1ZHE0DOIIulysEXH4yuO8po.asa (hash: FM08oR7PbEdMNmMfav/M1fjQXjWC4rKDBLIAFH39Wu4=)
2: TinfFJUjsDxG7tiggh1C8414SEE.crl (hash: Dg65yWqN29Cs4JgiTIWVIMEkbXQojSYrsR4dduqrVus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/5adb71-10ac-4223-b36b-e5b9d6e6e47d/1/TinfFJUjsDxG7tiggh1C8414SEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/5adb71-10ac-4223-b36b-e5b9d6e6e47d/1/TinfFJUjsDxG7tiggh1C8414SEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TinfFJUjsDxG7tiggh1C8414SEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:b0:53:fe:63:0f:59:d8:bf:fa:77:1b:70:bb:d3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e29df149523b03c46eed8a0821d42f38d784841
Validity
Not Before: Oct 20 19:01:07 2026 GMT
Not After : Oct 21 19:01:07 2026 GMT
Subject: CN=bd58f782a3ada07d0cd221108ea239c38a73b932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:02:85:5e:55:2c:92:df:88:4b:36:62:d7:10:
72:d8:2c:35:58:3d:e4:10:5e:8f:0a:db:4d:96:14:
4e:ca:8b:9d:c9:cf:b2:f8:f3:85:4e:3d:91:96:94:
77:8a:2c:68:64:3f:ab:6e:b4:b4:7e:65:43:e2:6d:
91:6f:18:a1:a6:1f:15:35:5e:7d:5d:1f:dd:cc:07:
c6:8d:ca:fc:a6:6f:ab:aa:12:60:29:15:01:cd:1f:
70:bc:3b:a6:cd:84:f6:d8:6c:90:2c:8c:45:75:40:
45:c9:01:dc:e3:b0:2d:70:67:5d:a5:0d:d7:22:5a:
55:69:11:af:c4:3d:b2:15:6e:d0:88:f4:a7:7a:f7:
78:83:c0:61:cd:7b:a3:83:8d:28:14:26:00:8a:af:
77:e2:96:e7:70:24:92:3c:3c:3b:43:4c:78:89:ef:
69:1d:63:2f:18:2b:70:15:5f:d5:93:fa:32:59:43:
18:78:22:b1:8d:43:00:cb:b2:f6:1f:f3:89:e3:ba:
51:08:a2:dd:29:8f:12:be:ae:66:0b:b8:1a:ac:af:
32:a7:98:09:59:af:0f:b8:65:05:78:c8:24:37:0c:
2c:f6:f0:15:df:e1:c8:74:dc:70:9d:57:e4:68:29:
33:ae:53:c9:4d:b4:da:d0:04:dd:32:22:87:21:c8:
ee:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:58:F7:82:A3:AD:A0:7D:0C:D2:21:10:8E:A2:39:C3:8A:73:B9:32
X509v3 Authority Key Identifier:
keyid:4E:29:DF:14:95:23:B0:3C:46:EE:D8:A0:82:1D:42:F3:8D:78:48:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TinfFJUjsDxG7tiggh1C8414SEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/5adb71-10ac-4223-b36b-e5b9d6e6e47d/1/TinfFJUjsDxG7tiggh1C8414SEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/5adb71-10ac-4223-b36b-e5b9d6e6e47d/1/TinfFJUjsDxG7tiggh1C8414SEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2c:3c:84:b4:aa:02:11:ee:83:7b:53:14:26:92:81:74:15:
2e:e8:f7:14:23:73:76:05:f7:99:cc:c5:54:cc:1b:1e:8e:04:
63:86:a4:6a:27:7a:b6:16:87:6d:4c:a9:84:f2:d8:b9:e0:5f:
d4:e2:38:3e:e3:99:a9:ef:42:6e:5f:af:8d:d4:f8:e8:05:ba:
57:27:c5:ff:f7:08:1a:b4:23:9c:d5:72:b6:a6:6d:ed:3a:6b:
0e:6d:7d:70:aa:fa:fd:31:90:93:30:01:b9:8a:b4:ad:23:7d:
a8:85:a5:72:c3:29:44:e1:6e:7b:7f:54:f6:82:f8:7a:33:1c:
30:11:86:ea:5b:48:ff:f1:d1:54:d8:26:0d:b9:85:5f:a1:75:
28:ff:bc:ff:bc:cc:73:70:3c:64:62:81:22:59:a9:c6:f7:77:
f7:06:c2:f6:48:a6:cb:20:8f:b8:9f:99:a6:99:a1:76:96:0a:
d6:72:04:ca:50:ae:ba:74:c4:af:40:d3:3d:b4:0e:0d:b8:63:
3c:66:8f:13:51:58:97:5c:a6:de:c5:65:40:0e:34:40:a5:34:
b4:eb:ca:5a:72:06:bb:8a:4c:83:d5:3f:44:57:fe:53:6e:8e:
e1:68:b9:55:c1:38:61:05:f3:79:9e:dc:a9:8d:c7:17:e3:fc:
aa:2c:a3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:20:28 2026 by rpki-client