Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
File: Tchxtd3wdAsxfR4042smgQu5gCY.mft (raw, json)
Hash identifier: SHxo5T5JvinzVLZffJN3tA2VzUhjHoKQwcvKL7R8Cl4=
Subject key identifier: A9:82:07:1C:43:EE:5C:D1:21:C7:39:4C:7D:15:46:62:92:3A:93:0E
Authority key identifier: 4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
Certificate issuer: /CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
Certificate serial: 01A08C7AC4C00789CCD68A69AB6AD1416FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
Manifest number: 0D1A
Signing time: Thu 10 Sep 2026 18:00:50 +0000
Manifest this update: Thu 10 Sep 2026 18:00:50 +0000
Manifest next update: Fri 11 Sep 2026 18:00:50 +0000
Files and hashes: 1: Tchxtd3wdAsxfR4042smgQu5gCY.crl (hash: KtW8X5zbtNJgXtcryZLHoRpdbLKqVaZRSkYUAMJ8g+g=)
2: jXwSEoxbq6KdrBrzSTnO_RMriMk.roa (hash: BbP0L4fPspJ9Y6QO7cR0z5Mqnlzrld3QNlzO8Lk3/gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:c4:c0:07:89:cc:d6:8a:69:ab:6a:d1:41:6f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
Validity
Not Before: Sep 10 18:00:50 2026 GMT
Not After : Sep 11 18:00:50 2026 GMT
Subject: CN=a982071c43ee5cd121c7394c7d154662923a930e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6c:75:8f:8d:40:a1:82:e3:69:f6:d4:73:9c:
a9:be:ff:0e:fd:27:4b:46:c9:41:f4:6e:0f:ed:3d:
11:90:3b:67:f0:6c:ab:79:27:bd:69:97:2a:e7:fe:
76:59:0e:e0:d8:55:24:42:1e:4f:d3:cd:47:c2:5d:
01:83:40:b9:19:a8:ab:41:67:cd:2b:58:8b:a2:e7:
1a:39:b3:11:2f:2c:89:14:81:59:ee:51:2b:cb:25:
b5:0c:2d:f5:39:b5:e9:8b:2c:b0:a9:f9:57:c7:76:
e4:ca:6f:99:34:91:e3:5a:1b:20:e0:a6:84:f3:0b:
90:4c:0b:f0:ad:ce:dc:84:90:3b:7a:3d:a0:56:4c:
06:45:14:fe:c0:da:54:31:08:aa:3c:d5:b9:16:fc:
3e:68:a4:87:31:01:07:44:f5:4d:88:cd:2c:74:f3:
94:aa:e8:1d:b1:3c:e4:42:be:b6:70:d6:7d:1b:ca:
26:04:af:8e:4d:15:0c:4e:71:68:2e:99:aa:ad:5c:
e8:ca:bd:a4:33:43:19:19:24:1b:ba:f8:33:e9:1d:
0b:f5:e4:8f:b1:fa:3f:c5:22:c8:17:10:f9:33:be:
ab:17:75:bf:20:fa:6b:11:a4:e1:a0:f7:d6:56:3b:
9e:2c:45:8f:82:0e:f8:d2:70:97:94:d8:0c:2e:6c:
ee:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:82:07:1C:43:EE:5C:D1:21:C7:39:4C:7D:15:46:62:92:3A:93:0E
X509v3 Authority Key Identifier:
keyid:4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e9:5c:0a:9e:53:d9:1c:52:49:a4:fd:5a:6f:ee:f3:f3:b4:
74:04:ee:69:2c:8a:46:58:64:69:d2:05:36:93:7a:3a:42:61:
81:fd:4d:f9:59:4e:85:37:ee:5e:27:93:1a:91:31:09:24:ec:
9b:b2:b4:10:b0:61:f6:da:8a:5b:94:59:c4:3c:2c:76:29:16:
39:f2:bc:0e:22:01:89:bd:9d:45:ad:64:67:ce:2c:66:d1:47:
ba:02:ad:ce:7d:26:03:4f:a0:bb:cc:ba:1c:8e:bc:50:3d:1f:
cd:ac:5b:b4:30:49:48:8f:a0:ff:14:38:3e:9e:a0:69:45:09:
ca:c1:a8:ca:81:4a:60:62:80:58:b0:21:c0:5e:7d:7a:39:b4:
fd:9d:e6:dd:30:d3:4f:39:03:c0:9f:13:b0:75:3e:87:06:cb:
71:d2:8d:db:71:96:6b:17:0c:59:d6:07:d6:b2:a7:4e:16:11:
e1:3b:c5:d7:2a:a0:0c:4c:55:33:a7:53:03:67:b9:85:90:bd:
30:ca:6e:7b:70:44:d4:1d:99:69:f0:ac:0d:d5:3c:61:21:00:
42:20:eb:36:09:fb:9e:3c:b3:82:51:8c:f3:d6:cb:5f:12:48:
a7:fe:d5:cc:0b:fd:77:4d:03:b1:dd:2e:f9:02:64:34:1a:b1:
2f:b1:da:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:41:32 2026 by rpki-client