Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
File: tDtWqlNz6PXng0dnQkDv98KCctw.mft (raw, json)
Hash identifier: Do8HQfHUN7CakSMKH2AB2Q1slSbjK8PcaPfITx5VvJg=
Subject key identifier: EB:D8:DA:89:47:FC:2A:F8:30:06:60:03:DB:7A:5F:30:33:57:25:6E
Authority key identifier: B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC
Certificate issuer: /CN=b43b56aa5373e8f5e78347674240eff7c28272dc
Certificate serial: 01A17770FD9C9E71B8C3DF801383B2F98C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
Manifest number: 13FA
Signing time: Mon 26 Oct 2026 09:00:55 +0000
Manifest this update: Mon 26 Oct 2026 09:00:55 +0000
Manifest next update: Tue 27 Oct 2026 09:00:55 +0000
Files and hashes: 1: tDtWqlNz6PXng0dnQkDv98KCctw.crl (hash: BlSkMgGd3ItY2DQiDbHNsDvtdnRqQqHg+qdgcS4TiIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:70:fd:9c:9e:71:b8:c3:df:80:13:83:b2:f9:8c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43b56aa5373e8f5e78347674240eff7c28272dc
Validity
Not Before: Oct 26 09:00:55 2026 GMT
Not After : Oct 27 09:00:55 2026 GMT
Subject: CN=ebd8da8947fc2af830066003db7a5f303357256e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:ce:06:5c:ff:d0:cf:98:38:fa:b3:09:89:
eb:92:ee:74:bc:c5:b7:46:d4:c3:96:19:cb:bd:95:
c9:4c:74:c3:6b:41:30:fc:d7:43:47:5b:3f:a4:3a:
14:18:1e:0f:5d:d6:58:bd:85:a4:b7:2b:f8:ed:bb:
e6:5b:f5:76:62:eb:9b:1e:b1:83:64:55:34:9e:a3:
87:72:99:a0:73:23:9a:cc:e7:ae:63:b2:29:d9:88:
ff:5d:85:1c:bb:15:82:2b:66:6f:af:85:38:06:4e:
46:bc:c5:05:53:d8:ec:5c:83:e4:2e:48:de:3b:96:
1b:c1:62:d0:2e:55:87:3d:a4:4f:ef:65:6b:b4:eb:
f4:b8:2a:df:7a:b7:03:ed:56:df:d8:2b:1b:f7:2a:
cf:64:05:c3:4c:f2:98:f8:b9:ec:4b:d3:ae:c1:5f:
b0:5c:7a:ab:ff:a0:4c:63:59:19:62:4b:5a:d1:df:
6b:8f:c2:f2:03:21:bc:47:e3:37:e3:82:8c:d3:16:
58:2a:3b:5c:82:88:cd:88:67:09:21:e3:2a:bc:a3:
27:87:17:c5:a1:18:bd:c6:9a:13:2f:e9:45:f5:d0:
46:a8:53:2c:26:b3:56:85:a1:d7:9b:a7:ae:5d:2c:
c0:62:02:8c:69:0d:86:70:4b:4a:2f:a6:45:60:28:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D8:DA:89:47:FC:2A:F8:30:06:60:03:DB:7A:5F:30:33:57:25:6E
X509v3 Authority Key Identifier:
keyid:B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:96:fe:a5:bd:a1:7a:94:26:f0:ee:3a:c8:e3:21:2b:b0:94:
34:d1:9e:c4:ca:82:7f:f9:6c:da:3c:d9:9c:05:af:e9:6f:98:
d3:69:9d:9d:04:8c:2b:d6:be:37:dc:16:d7:83:e5:cc:05:f8:
e3:86:af:13:04:e3:48:1e:ba:1a:11:39:e3:50:e0:8d:97:01:
38:50:87:dc:1a:38:80:0c:02:8f:af:28:a0:27:ce:f9:97:ac:
50:ea:68:cf:08:70:c9:68:3d:74:15:59:ce:f2:a2:d9:10:35:
92:ca:fa:8d:28:f3:99:6f:f7:48:88:8e:1c:d0:6b:8e:67:2e:
26:c2:9e:c6:8b:76:1f:2b:c1:3b:8f:da:86:8c:44:5c:16:d1:
a9:92:2a:62:ca:5b:16:23:7a:f2:3d:b4:b7:53:23:29:ca:9c:
ff:57:ac:68:c7:b9:38:c9:d6:43:16:66:64:15:d3:e3:d9:25:
43:a4:cc:b7:6c:51:19:54:4d:70:2e:9d:54:8a:5a:a4:f4:1c:
2e:d4:ed:23:1a:d9:6f:ea:99:f3:25:86:af:25:a8:7b:9f:fa:
a9:52:59:00:18:fa:9e:25:57:f2:d2:12:c5:f6:22:15:43:32:
36:15:37:76:cf:a4:8d:6a:b3:f8:10:54:10:f0:41:8f:f6:08:
a5:23:23:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:56:14 2026 by rpki-client