
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft
File: Tle6dst9bSrsBSA89BuOZxbufqA.mft (raw, json)
Hash identifier: wgaMSBKUg1HzYp9FUPUnLlrQffFniQqxRJ3kp81mGn4=
Subject key identifier: F1:09:A1:B4:94:54:08:D6:D6:ED:E6:DC:B7:2E:87:A2:4F:51:81:94
Authority key identifier: 4E:57:BA:76:CB:7D:6D:2A:EC:05:20:3C:F4:1B:8E:67:16:EE:7E:A0
Certificate issuer: /CN=4e57ba76cb7d6d2aec05203cf41b8e6716ee7ea0
Certificate serial: 01A1871B68DA01EEBEAC76EB67DAA9C4D4B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tle6dst9bSrsBSA89BuOZxbufqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft
Manifest number: 13EF
Signing time: Thu 29 Oct 2026 10:01:22 +0000
Manifest this update: Thu 29 Oct 2026 10:01:22 +0000
Manifest next update: Fri 30 Oct 2026 10:01:22 +0000
Files and hashes: 1: Tle6dst9bSrsBSA89BuOZxbufqA.crl (hash: MdxRlK5QCYic4D+TaOv/1CNLzTChrjLthhyG/RULJjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tle6dst9bSrsBSA89BuOZxbufqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:1b:68:da:01:ee:be:ac:76:eb:67:da:a9:c4:d4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e57ba76cb7d6d2aec05203cf41b8e6716ee7ea0
Validity
Not Before: Oct 29 10:01:22 2026 GMT
Not After : Oct 30 10:01:22 2026 GMT
Subject: CN=f109a1b4945408d6d6ede6dcb72e87a24f518194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fb:2b:3f:a3:d7:31:14:a6:55:94:a7:9d:44:
96:02:eb:4f:74:a7:67:bc:bc:e8:22:3b:1d:ee:23:
e7:e3:72:bb:fd:5b:b0:16:9a:c0:53:cd:71:d8:f7:
d4:4a:8e:1c:5c:37:e0:4f:11:fa:54:75:2a:e7:15:
3d:39:61:1e:71:60:29:8c:62:2b:d2:0e:2e:fd:2f:
27:ef:ee:f7:c7:f3:15:d3:c6:2c:4a:7e:b9:2c:10:
ea:85:0a:99:3a:99:fe:f5:b2:97:9a:17:e2:db:db:
cb:be:b7:a7:81:b2:f4:27:af:6f:05:6c:e3:d1:42:
d7:71:38:5d:09:89:6b:ef:f9:25:3b:65:dd:1e:89:
af:24:e2:c4:5f:8b:2a:2f:70:82:24:6f:03:ad:8d:
4d:43:7c:df:65:85:f8:f8:34:73:b2:ea:96:a6:61:
f8:01:c2:22:de:0b:42:c6:a3:f0:24:46:da:c0:0c:
b8:94:50:c1:d9:93:9a:0e:3b:8b:ba:61:52:b7:6c:
c7:bc:d3:29:dd:0b:c6:60:77:10:8a:59:fe:d7:6a:
20:37:15:ac:0b:90:43:0f:ea:56:b5:d0:05:8a:6d:
27:45:9b:40:87:be:7d:04:8a:b7:ff:9e:e7:40:4d:
fb:2c:32:91:a5:d0:98:ce:cc:28:f5:29:20:8e:ee:
55:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:09:A1:B4:94:54:08:D6:D6:ED:E6:DC:B7:2E:87:A2:4F:51:81:94
X509v3 Authority Key Identifier:
keyid:4E:57:BA:76:CB:7D:6D:2A:EC:05:20:3C:F4:1B:8E:67:16:EE:7E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tle6dst9bSrsBSA89BuOZxbufqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ad:57:73:59:c2:b7:bc:bf:07:5e:c6:11:fc:a0:2f:5c:6e:
0d:28:bb:b1:82:d6:b5:e1:66:f7:ab:72:09:7e:85:5c:cc:59:
28:83:c3:c6:63:5f:42:a5:2d:54:c7:0c:44:37:99:68:de:54:
9d:b9:b0:cb:08:00:38:22:f2:45:60:36:f6:aa:58:b4:9b:fd:
5b:7e:1d:ad:60:64:1e:64:36:91:af:ad:4b:d8:97:b4:18:8d:
1a:a8:68:10:7b:96:ca:6f:aa:a7:74:3b:4a:79:70:4c:65:bd:
28:5d:69:1b:0c:73:94:e9:ae:95:98:96:26:2b:29:67:ef:6c:
97:7a:44:e3:85:a9:eb:ed:d9:5a:6e:2d:c6:1d:31:34:bb:8e:
ad:0b:cd:68:77:2a:be:21:47:85:52:f4:39:df:fe:20:c7:b7:
ff:78:51:68:a8:87:d5:6e:3a:b4:d5:34:09:04:31:3c:d6:e9:
55:39:3c:82:61:a1:f5:09:c9:55:76:81:41:8b:4d:96:91:47:
bd:89:a9:6f:dd:ba:12:07:17:fc:ec:67:a5:e4:af:c2:ac:ec:
ea:3e:13:61:76:3c:1f:2f:4d:b6:48:85:48:14:92:ef:5d:22:
9a:1a:33:89:2c:a9:ec:95:1d:ec:3d:43:78:f1:72:70:65:83:
f7:8d:45:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:57:40 2026 by rpki-client