Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
File: tpJFTBZpZIbPBx7Rjnl240BJCfs.mft (raw, json)
Hash identifier: WCU1BnvTdLquPKmbMHXJPu4St7nzyIpt34FKtxte/Sc=
Subject key identifier: 65:E1:5D:6F:93:B7:8D:65:8F:1D:54:6F:35:B4:3F:D9:1E:E5:B0:7F
Authority key identifier: B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
Certificate issuer: /CN=b692454c16696486cf071ed18e7976e3404909fb
Certificate serial: 01A18F42CCA0A56B83A9E9D1381025AEC275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
Manifest number: 0F1D
Signing time: Sat 31 Oct 2026 00:01:21 +0000
Manifest this update: Sat 31 Oct 2026 00:01:21 +0000
Manifest next update: Sun 01 Nov 2026 00:01:21 +0000
Files and hashes: 1: MXpmWhbVyPq4rmweRCFwVrTv_-A.roa (hash: 7v8WygVCKT2B/KZ8B8RmDLY2b/Xhyo57To56E6VXxLc=)
2: tpJFTBZpZIbPBx7Rjnl240BJCfs.crl (hash: adbB0yy4DHOVr1zabI6Vgw7bQB7zJ9XyqCilcCMLagg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:42:cc:a0:a5:6b:83:a9:e9:d1:38:10:25:ae:c2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b692454c16696486cf071ed18e7976e3404909fb
Validity
Not Before: Oct 31 00:01:21 2026 GMT
Not After : Nov 1 00:01:21 2026 GMT
Subject: CN=65e15d6f93b78d658f1d546f35b43fd91ee5b07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:fd:69:bb:af:5d:58:f5:d7:ec:ea:62:b8:
6e:75:7b:b5:fe:97:3a:85:28:5e:f1:54:f8:38:af:
b1:87:74:d0:a6:5c:b6:4a:96:f0:18:18:5e:88:ce:
73:85:0e:4d:c8:83:2f:ff:06:41:26:c0:3e:1f:15:
d6:9f:36:2b:c3:8e:46:ec:aa:0a:ae:79:21:32:54:
c2:c4:63:1d:c7:6b:66:6c:05:d4:66:48:8a:3e:de:
08:f3:de:46:f7:ac:5f:f8:ff:11:19:26:e0:a6:43:
9f:8c:00:fe:2b:4c:8c:84:63:ad:ff:b8:a7:46:e9:
1f:2b:05:93:50:12:51:2a:93:20:35:b6:f0:9c:87:
1f:78:98:18:52:62:c8:f5:15:f9:12:44:f8:33:6f:
20:97:cf:2c:ba:d0:50:5f:23:58:9b:b0:a4:87:76:
63:5f:ba:fb:7d:d3:e3:0a:6f:ba:de:4f:2b:34:00:
f0:b0:95:ca:6b:b0:3c:11:54:5e:09:30:87:48:6c:
cc:7c:e2:41:13:7c:f5:75:f2:ca:2a:a3:37:27:85:
6f:11:a4:5f:a5:1a:65:75:94:57:0c:27:93:54:61:
8f:cf:bd:49:9d:b3:6a:fd:bc:c4:6c:b7:ed:6c:05:
b4:a9:7d:e7:d3:67:ec:ae:b9:b7:df:60:fa:6a:78:
69:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E1:5D:6F:93:B7:8D:65:8F:1D:54:6F:35:B4:3F:D9:1E:E5:B0:7F
X509v3 Authority Key Identifier:
keyid:B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a8:06:71:63:f2:eb:cc:ca:fa:95:68:64:81:28:d1:64:18:
53:e7:f1:6d:7b:12:6c:fd:fe:5e:8c:63:89:93:e9:f5:cf:47:
da:19:14:8f:e4:dc:34:59:63:60:2e:d9:52:db:77:ed:7a:fa:
63:76:8d:55:27:38:34:85:56:6a:0e:02:aa:7b:3c:3b:eb:e7:
73:44:cd:6e:3f:39:4f:55:78:ba:d9:68:f0:e9:0d:93:50:d3:
8b:11:1c:bd:a8:c2:18:17:29:41:f0:bb:c1:54:74:4e:b9:2f:
97:ed:17:06:34:7f:9b:16:1e:9a:ac:7e:1f:57:63:1e:d6:40:
be:fa:ab:af:35:52:07:d5:67:63:df:ea:a3:bc:69:73:32:43:
f7:3f:ef:be:b1:85:7b:42:4f:72:33:d8:9e:7f:25:62:13:43:
a8:3f:10:58:16:e8:1a:a2:58:98:a3:ec:49:96:14:3e:17:67:
ac:92:74:51:ba:77:18:b3:f1:44:04:1d:41:66:04:0d:42:ce:
d4:5d:80:fd:be:d2:ca:8f:b6:48:4c:e0:eb:a3:3b:28:b5:4b:
54:5a:25:c8:36:2d:23:7f:2a:b3:38:8a:e8:3a:11:29:1c:83:
bb:f7:8f:91:a8:ba:d6:bf:f8:91:b9:93:92:50:8a:31:b2:0c:
ce:54:d3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:21:34 2026 by rpki-client