Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
File: tyDzzrDmtZejgUXFp0M2nH9JZuA.mft (raw, json)
Hash identifier: LgloeCT39MFf3eO/N0E8iHxTnMDIsgB8fUiKbdQehN0=
Subject key identifier: E0:26:E6:F1:37:1D:D3:E2:4B:4F:F0:7E:34:7B:25:04:6F:8A:64:3B
Authority key identifier: B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
Certificate issuer: /CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Certificate serial: 01A12C8D8DF502638348F6B8B1ED872B6C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
Manifest number: 14D8
Signing time: Sun 11 Oct 2026 20:00:36 +0000
Manifest this update: Sun 11 Oct 2026 20:00:36 +0000
Manifest next update: Mon 12 Oct 2026 20:00:36 +0000
Files and hashes: 1: 5S5p1A69IpQT_81jOo3SJqobCIE.roa (hash: 1vieN4Wv6S8/BM0aKo61+XBIoswJKgLdB3MXca2J5eM=)
2: Kng8WN3TArrnNPoyNaNDEEsmxbw.roa (hash: zHx9dAEAvR3nmTiDNacQD/5h5khoJ8N9qawCWG7hAtw=)
3: tyDzzrDmtZejgUXFp0M2nH9JZuA.crl (hash: jgKHYCLCZbP/R5xIZ4UWLbz2LOc7xZKwIAYAZRBMehk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:8d:8d:f5:02:63:83:48:f6:b8:b1:ed:87:2b:6c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Validity
Not Before: Oct 11 20:00:36 2026 GMT
Not After : Oct 12 20:00:36 2026 GMT
Subject: CN=e026e6f1371dd3e24b4ff07e347b25046f8a643b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4b:fb:3f:c9:1f:95:c1:93:10:1b:eb:8c:5f:
07:33:ca:e9:9b:67:49:db:93:00:a7:00:b5:dc:83:
34:d4:c7:47:56:04:e6:9f:e2:a9:c3:79:a1:05:57:
f9:20:5f:78:33:ec:ea:a5:ac:42:24:3f:81:cb:e5:
a5:82:b6:af:0a:23:cc:1e:20:36:1c:5d:e4:0a:b9:
d6:45:f0:b6:34:f0:2e:53:6b:d6:62:e9:3d:04:1f:
a3:4b:47:5f:79:87:56:b3:79:a0:21:f3:2e:83:d0:
83:69:32:42:fd:d8:bb:d6:01:45:e9:41:35:0f:eb:
49:5c:b6:18:12:9d:4d:d4:fc:ef:85:87:b3:f2:db:
ac:4d:59:e2:48:b0:0f:3a:a0:81:dc:d9:a1:a7:4b:
c2:1d:e8:8a:75:68:07:13:d7:6b:1b:ed:2d:93:0c:
4f:33:ab:f3:d7:fa:b0:3b:b7:04:31:d2:01:ba:1a:
c0:3b:be:f3:53:eb:a1:d3:bf:04:fb:8f:5c:94:dd:
96:c9:11:08:3e:71:7d:0d:78:ad:42:a4:3d:34:d1:
6c:26:2f:60:c9:df:b9:5e:1a:c9:34:43:14:3d:90:
a1:8a:c7:08:43:7b:28:52:d3:40:0e:bb:21:8e:f5:
0a:ea:25:4f:01:fb:ef:80:43:49:5a:c4:66:90:83:
cc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:26:E6:F1:37:1D:D3:E2:4B:4F:F0:7E:34:7B:25:04:6F:8A:64:3B
X509v3 Authority Key Identifier:
keyid:B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2d:c6:be:78:65:94:d6:ed:48:61:47:8d:ec:3d:ff:7e:7c:
c7:ce:1c:41:a6:63:bd:2b:00:82:71:58:3e:c2:e2:8e:86:00:
a1:f3:09:65:ce:ad:19:42:d2:f9:43:e6:4a:85:9b:35:36:a1:
1e:28:a9:8b:2a:2f:25:98:65:ce:1b:35:9b:de:e9:2e:8e:70:
cd:ea:a5:51:e5:91:43:31:33:b4:2a:b0:01:d5:e5:e2:71:98:
8a:8a:cf:99:33:e7:de:1c:d5:32:1e:83:94:f1:68:1c:ac:ce:
05:55:c7:73:16:85:29:1f:c7:d7:3d:b5:0c:66:8a:7b:8d:3c:
c4:06:de:8f:ad:08:46:73:c7:42:7a:c1:bb:2d:c6:da:46:98:
b6:3b:a8:b6:21:24:32:b1:2d:e5:75:f9:9a:73:2b:14:91:28:
21:44:38:c7:46:99:3f:93:05:a9:bb:bc:cc:9b:38:3c:68:34:
84:21:3f:e2:07:8d:fb:6d:20:9e:62:49:ef:16:03:90:f6:52:
57:a6:de:f8:8b:99:fa:96:37:24:3c:55:3a:8b:0d:d6:16:be:
63:4c:37:11:f7:43:f4:0d:6a:f6:0b:5a:f9:12:05:39:30:ec:
49:24:7a:da:6b:10:55:bc:c1:71:52:70:4b:d8:ef:15:58:ed:
ae:83:71:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:38:46 2026 by rpki-client