Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
File: TxUpALDTI9NtlFEKsLAck_RRfIk.mft (raw, json)
Hash identifier: k13ql9FQNZwPqEHtWvBOHroitqBJsBY68vc5Ff0ESJQ=
Subject key identifier: F2:0F:E8:DE:53:34:A1:BD:CE:0F:8B:06:42:96:FE:C5:12:14:B9:C1
Authority key identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
Certificate issuer: /CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Certificate serial: 01A121D377D6984F5674E43F69A69E6D34A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
Manifest number: 1A96
Signing time: Fri 09 Oct 2026 18:01:09 +0000
Manifest this update: Fri 09 Oct 2026 18:01:09 +0000
Manifest next update: Sat 10 Oct 2026 18:01:09 +0000
Files and hashes: 1: 3bsIQIUMB3wEM7UpYsUhEhh9TDM.roa (hash: JUK0LWzP12KIpgwQRI9/y3rNyJiup+Z+mcnNsCbamT4=)
2: TxUpALDTI9NtlFEKsLAck_RRfIk.crl (hash: er8LJpUn12KMErDdpD4a+t/BAoEM+p/sU2ik49Ge/LA=)
3: UBcqPXEQnKrJnYhEGTvOR6j6EUo.roa (hash: wZthjYgNfjrS6L37NpRR1qXSrJcuxPFMsxRLKIg6JX8=)
4: Z0hS5fWo-y_SX9oUly3wZoFqg80.roa (hash: QItwS85WIhN170At5hmC7mNxoC4+AyHXJZmT2uZ7v2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:d3:77:d6:98:4f:56:74:e4:3f:69:a6:9e:6d:34:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Validity
Not Before: Oct 9 18:01:09 2026 GMT
Not After : Oct 10 18:01:09 2026 GMT
Subject: CN=f20fe8de5334a1bdce0f8b064296fec51214b9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:d1:c1:0e:69:d7:59:d2:98:c0:92:34:b2:
62:a3:3c:4b:d4:98:d0:fb:24:10:a7:77:22:76:ca:
34:a1:68:11:3d:d4:3d:dd:68:9b:ae:5c:b9:4f:ae:
4f:95:24:97:a0:d6:3d:22:2a:dd:18:73:21:9a:c9:
17:e8:75:e5:0b:6f:95:60:b9:3d:a2:b8:d8:e3:47:
81:22:1b:f2:0e:b6:f4:41:23:4b:52:2c:60:85:77:
7f:fe:42:ab:59:61:48:15:f7:7a:5c:8c:53:b5:c6:
80:40:f1:54:59:68:c7:dd:64:b6:5b:14:6f:59:92:
30:9b:50:23:16:d3:ba:c2:76:be:97:1d:0c:14:84:
79:19:e0:61:d4:02:22:bd:2c:1d:c5:f9:73:25:ac:
91:b9:d4:55:7a:98:c8:7f:e3:65:a6:c4:5a:c4:c5:
cb:8d:fd:e5:ef:e0:5c:1e:b0:03:22:13:4c:1f:8c:
dd:a3:0e:cb:f6:14:a4:59:df:30:73:f7:15:d2:3c:
ed:01:4e:59:7d:97:98:b6:8f:55:11:78:56:8c:5e:
07:d4:f3:04:5f:16:da:02:1b:b2:8e:e6:d1:c3:d4:
c6:c4:8d:d6:1d:9c:fb:4f:72:14:8e:2b:f5:58:05:
9c:1f:6f:c5:61:df:22:7b:26:bf:9d:8d:07:53:f8:
4f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0F:E8:DE:53:34:A1:BD:CE:0F:8B:06:42:96:FE:C5:12:14:B9:C1
X509v3 Authority Key Identifier:
keyid:4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3c:42:a9:c0:9c:86:7f:89:3d:60:cd:5f:fb:03:7d:f1:26:
a2:f1:c1:e5:93:90:07:0f:e5:83:68:fd:45:ea:51:f4:2a:e0:
56:eb:74:65:20:d7:28:28:6c:01:62:a1:a5:57:73:d0:fd:ef:
47:fd:99:f2:4d:d0:5e:22:bb:d2:81:42:d6:ff:e7:48:22:c5:
91:f6:f5:82:ed:13:34:83:be:56:ba:bc:94:d5:c6:21:a6:a6:
59:a8:ad:53:3e:01:3c:44:9c:ec:ff:a4:38:f3:1a:bc:d0:60:
d0:a1:52:17:4c:05:ee:e6:be:da:79:a0:cd:c4:02:d8:a0:cb:
20:dd:b9:aa:0b:63:6d:e5:2b:a4:a2:19:e9:dc:87:04:4c:fe:
27:1c:ac:13:8a:4b:a5:bc:4a:2b:f6:68:c9:31:cd:9b:7e:8b:
11:91:eb:36:97:3f:18:04:09:5e:6a:b4:ca:53:81:d6:23:a8:
4d:e1:90:9c:da:13:1a:7d:b0:be:4a:63:72:df:95:98:61:ec:
73:bd:4f:97:71:54:c3:f8:f1:97:2c:7c:37:9d:80:df:f3:aa:
c3:bf:d4:85:b3:93:d9:f0:e0:4a:93:95:8d:b8:e9:00:34:82:
d6:cc:85:b6:a9:44:c3:72:4e:6b:d5:11:57:aa:e1:6b:30:d8:
04:d2:4c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:39:44 2026 by rpki-client