Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
File: tFOob9MIG4A-3BDSO77akdeTICU.mft (raw, json)
Hash identifier: XIMFiCBIObbZt/zGMyGXuAp51dmsHFINTpwZnsTrprU=
Subject key identifier: F0:CD:2E:52:6C:0A:53:F1:CB:C3:2B:F7:DF:CD:6A:70:33:FF:7B:53
Authority key identifier: B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
Certificate issuer: /CN=b453a86fd3081b803edc10d23bbeda91d7932025
Certificate serial: 01A089E7862A22F83259B6C591E387085D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
Manifest number: 19DB
Signing time: Thu 10 Sep 2026 06:00:46 +0000
Manifest this update: Thu 10 Sep 2026 06:00:46 +0000
Manifest next update: Fri 11 Sep 2026 06:00:46 +0000
Files and hashes: 1: 1-yB-aN02FvvexRrc-rBff7cVXYQ.roa (hash: hfqxjUEwIBgbMLOiBaRuABJ5snVrD/mvftwY9OHnyNU=)
2: tFOob9MIG4A-3BDSO77akdeTICU.crl (hash: 73a6GVlsnBd+9Gbj82N0H/VerzWryCQKGfkK2PoaXgc=)
3: uz3G_zDw5uNl_xC9huZfw-K_ce4.roa (hash: lgXmUNKY9C0bvQMUFuOJnJImq7SU/P/bySj8SdoyC3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:86:2a:22:f8:32:59:b6:c5:91:e3:87:08:5d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a86fd3081b803edc10d23bbeda91d7932025
Validity
Not Before: Sep 10 06:00:46 2026 GMT
Not After : Sep 11 06:00:46 2026 GMT
Subject: CN=f0cd2e526c0a53f1cbc32bf7dfcd6a7033ff7b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9f:a9:96:4f:db:dd:d2:0e:0d:3a:a3:35:4f:
ea:b5:81:37:3e:65:60:f9:a4:b8:08:bc:95:e5:45:
91:dd:e6:58:b8:61:d0:79:6f:89:09:d3:33:67:4f:
ba:c7:e0:73:c5:c9:c8:d7:63:e3:46:63:30:84:e0:
4e:df:50:3d:c3:46:cb:e7:03:94:1d:07:de:45:24:
c7:00:fb:a7:a1:0b:67:1d:69:67:2e:e5:41:36:2e:
3f:e5:36:cf:39:93:0d:e2:f4:c3:d4:66:ed:64:09:
75:79:1b:0f:d2:2a:b3:82:38:05:32:ac:76:ba:db:
51:a2:81:85:5b:30:a8:35:ae:93:fb:e5:50:e2:b6:
99:b0:94:8d:0e:05:d4:8f:78:a9:b2:2b:94:26:ae:
5e:08:be:c7:5b:35:50:43:2a:ec:6b:7b:1a:5d:9f:
32:ce:87:e3:e6:9f:f2:ed:22:e4:f5:19:b2:92:14:
9d:52:27:1f:b3:5f:94:e1:a6:00:71:36:1a:03:e0:
9d:63:be:e8:cf:c8:03:76:32:af:39:c5:b9:a4:52:
e9:0f:77:6c:90:d0:f9:4a:cf:2f:24:e8:2e:88:75:
64:37:d2:8d:a4:5b:98:91:bd:b1:ae:f6:1d:11:af:
51:ef:3d:4e:f7:d4:72:fc:23:f9:35:66:e0:15:99:
db:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CD:2E:52:6C:0A:53:F1:CB:C3:2B:F7:DF:CD:6A:70:33:FF:7B:53
X509v3 Authority Key Identifier:
keyid:B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:fb:ee:a1:e8:b5:66:42:4e:e1:92:6e:27:55:29:44:f3:c4:
9f:f5:c5:ce:38:5d:1b:db:96:33:59:77:98:c3:6d:c7:1c:f7:
80:8e:8f:ea:76:97:20:07:73:3a:31:67:28:af:30:47:cb:91:
4a:10:08:50:3a:4d:1a:41:b3:f9:e8:0a:24:41:24:ac:52:50:
53:ca:35:07:39:09:c0:09:6d:93:c6:4e:6f:a7:ad:a4:65:92:
d6:91:74:61:33:95:c4:84:08:74:ac:b2:2e:ef:99:4e:c0:ec:
23:f6:a9:8c:40:5b:33:bf:71:b1:4c:2a:ee:6b:ac:3f:26:68:
33:cc:dd:57:58:f9:29:0f:68:28:92:a7:f0:1a:ba:10:c5:e2:
2f:ec:66:02:5b:d3:7c:bb:52:fc:65:e9:07:5e:7d:f6:1d:f3:
46:43:d8:20:e2:fc:9d:76:41:28:78:0a:38:60:aa:1a:6b:90:
d8:62:90:10:40:d4:9c:1f:ac:aa:aa:94:a5:cc:0e:d1:11:4f:
ea:91:be:18:23:29:9d:ac:1d:64:32:49:0a:b2:6b:b1:0e:98:
79:5f:6f:57:71:29:cd:15:ad:c6:be:b1:43:e4:43:2a:95:f0:
91:9a:7b:90:cd:95:f1:a4:c9:99:44:24:92:a9:41:c1:32:20:
72:b3:96:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:38:31 2026 by rpki-client