Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
File: tXikYahZ3cmGwIqI6VEtXD0iEOY.mft (raw, json)
Hash identifier: qMxKG648iAv3tM3jqdgRYzl9dqOXlFWTeAe4947kom8=
Subject key identifier: 44:E7:F3:48:65:4A:90:36:A2:5B:49:36:59:72:2B:05:37:13:76:AF
Authority key identifier: B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
Certificate issuer: /CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Certificate serial: 01A08BD67C63E74B582AE348C24C301D7320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
Manifest number: 172A
Signing time: Thu 10 Sep 2026 15:01:24 +0000
Manifest this update: Thu 10 Sep 2026 15:01:24 +0000
Manifest next update: Fri 11 Sep 2026 15:01:24 +0000
Files and hashes: 1: dQ2JSeRkXtpAwYOMmqrJulKnPek.roa (hash: gnIi6rzRodMaHa0HwkkgHYuXAe1/OxH3oVCHWvHcN8Q=)
2: f6m0hqb0BBxiTxktGTcPrNXvB2g.roa (hash: wEO7iV67QNAygsspSwBpIYn+S9XY1EpUPceKq+Gbr8U=)
3: tXikYahZ3cmGwIqI6VEtXD0iEOY.crl (hash: BTM4ATBQKRc6OQk5i8/3yx/j2uOBuZpXNu7ucyIFUtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:7c:63:e7:4b:58:2a:e3:48:c2:4c:30:1d:73:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Validity
Not Before: Sep 10 15:01:24 2026 GMT
Not After : Sep 11 15:01:24 2026 GMT
Subject: CN=44e7f348654a9036a25b493659722b05371376af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:46:c9:b6:13:fc:3e:de:3a:e7:51:35:65:3f:
bc:bb:29:46:4f:2a:c5:4f:35:a3:45:92:fd:1c:cd:
ec:69:50:c1:e2:4a:32:99:62:43:d5:a9:1d:7a:4e:
55:6d:aa:ba:95:b4:30:e4:00:d5:d2:d6:c0:21:46:
4e:7b:31:bd:95:56:a2:8a:9d:22:ed:5e:a3:5b:de:
06:03:95:8b:99:f8:9c:36:07:7b:d3:16:71:58:5c:
1f:80:fe:7a:a9:c2:a6:2d:82:ee:bd:66:2f:96:cc:
7e:61:b6:f8:61:b6:cc:f5:98:2e:6d:5f:ce:c8:70:
2f:87:77:7a:f7:43:65:6f:22:de:f0:1e:14:c8:97:
a2:f9:9b:f5:ec:af:5c:2c:a5:b8:42:72:64:a6:75:
48:6f:d4:5b:67:02:5a:ef:71:f2:61:af:a7:ab:3a:
17:fb:a8:58:c7:7f:0f:a8:a4:ab:53:bd:0e:5b:91:
59:a8:be:87:d6:23:29:29:a6:97:25:b5:17:37:64:
ec:a9:fb:a4:e9:eb:20:9b:94:27:57:9a:3d:9d:6c:
2f:2f:75:dc:49:2a:b7:d7:76:3b:5c:2a:ce:7c:83:
9b:19:5d:be:ff:94:46:57:d0:76:5d:e6:b1:52:9b:
f9:41:a9:a4:e0:4e:30:45:8f:fd:36:3a:76:83:06:
d4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E7:F3:48:65:4A:90:36:A2:5B:49:36:59:72:2B:05:37:13:76:AF
X509v3 Authority Key Identifier:
keyid:B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:76:eb:9b:a7:63:58:7f:e6:24:8a:0b:81:cb:6c:40:fc:85:
f2:69:bd:c0:7f:2b:5a:ca:c6:e7:20:79:d6:a7:00:c6:6a:ee:
d2:5c:b8:11:f1:bf:45:4d:94:4c:d4:b5:06:3c:4f:ca:42:9d:
30:df:ac:32:d1:0f:a9:d7:a2:12:5d:63:65:74:2b:59:b1:61:
58:21:39:25:b5:50:99:26:27:d2:fc:c1:59:3f:99:95:10:a8:
a5:7c:d0:92:9a:49:04:71:00:58:d6:cd:48:c1:3b:f5:24:6d:
3a:8e:83:57:57:a4:8b:94:80:c7:24:c4:d1:a4:73:4c:bf:62:
ff:52:39:69:b0:62:ef:a6:9d:68:b3:d5:a1:e7:75:b6:d4:85:
b3:c8:37:67:4e:62:f3:eb:2e:9f:5f:97:35:14:a9:c5:4e:8c:
31:ca:a7:db:0e:77:03:29:0b:75:18:52:55:43:bd:ec:8b:2d:
fe:b5:0b:5e:58:62:99:60:db:af:4e:bb:47:40:00:26:cd:90:
13:84:36:39:45:93:e1:58:7d:f0:6e:bd:85:fb:58:34:83:ab:
1b:91:eb:a3:0e:dd:76:e1:b5:b7:65:77:2d:03:2d:12:80:3d:
3e:72:98:e1:15:85:27:90:09:ef:4c:64:0d:6c:d8:05:7a:88:
aa:8f:ec:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:42:31 2026 by rpki-client