Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
File: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft (raw, json)
Hash identifier: /9mddgNd0zPPS4s218EiJMccHkIfRFToFmnMeBGDOTM=
Subject key identifier: EA:2A:50:BF:F2:C6:2F:B5:3E:B4:42:6A:44:79:97:C7:07:D6:AC:CE
Authority key identifier: B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
Certificate issuer: /CN=b53b0a45f060e10eccf126b6f667589b80328c95
Certificate serial: 01A17C5FBA55AE71ADE8E42DCB22F7126585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
Manifest number: 14C1
Signing time: Tue 27 Oct 2026 08:00:10 +0000
Manifest this update: Tue 27 Oct 2026 08:00:10 +0000
Manifest next update: Wed 28 Oct 2026 08:00:10 +0000
Files and hashes: 1: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl (hash: DD/pNnDPvDQQn9fQvrznIB9srsYo/WH9pvbJZ0XfVi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:5f:ba:55:ae:71:ad:e8:e4:2d:cb:22:f7:12:65:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53b0a45f060e10eccf126b6f667589b80328c95
Validity
Not Before: Oct 27 08:00:10 2026 GMT
Not After : Oct 28 08:00:10 2026 GMT
Subject: CN=ea2a50bff2c62fb53eb4426a447997c707d6acce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5b:83:cb:d7:b7:e2:ca:78:1b:dd:5f:c8:81:
39:3c:f0:e4:2c:6c:6c:cb:29:6b:d9:ae:ae:f0:5b:
0d:67:e3:7d:e9:c5:e7:0a:40:8e:18:ca:8d:ab:99:
df:a6:ac:25:56:52:09:9a:5e:f5:01:82:b4:80:64:
31:8a:2a:d0:8b:08:62:ce:16:bd:33:93:bd:8e:20:
04:63:57:fa:89:bf:a8:db:7e:df:a9:99:83:46:49:
73:e3:0e:8a:ab:ae:8f:46:ad:bd:70:37:9d:3a:10:
c5:75:a0:ca:9b:10:2b:d7:90:d7:13:e7:94:c6:d0:
d4:9d:1d:49:13:e9:ba:ae:fd:e3:58:61:7c:2a:89:
00:12:cf:0c:dd:85:5c:50:28:5f:5f:a4:f7:96:2b:
74:8b:73:98:ee:55:8b:9e:40:f5:0f:57:5c:68:84:
73:bb:1d:e5:44:28:81:af:d6:61:de:f1:b4:8e:28:
33:d6:d5:d6:bb:e3:b2:b4:83:61:e8:a5:a0:f1:d2:
67:69:9a:ab:ac:96:00:cb:03:3f:a7:e7:75:92:6e:
86:5b:a7:63:b6:8f:f6:3e:3d:70:0b:f4:66:9a:88:
07:0e:54:ed:8e:8d:c9:92:06:85:cb:37:7d:04:dd:
a1:59:f9:9a:94:c5:f6:51:26:1b:65:0a:b4:73:4d:
71:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2A:50:BF:F2:C6:2F:B5:3E:B4:42:6A:44:79:97:C7:07:D6:AC:CE
X509v3 Authority Key Identifier:
keyid:B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8e:f2:64:fc:40:da:6b:bd:71:1a:d3:c9:01:fa:54:7a:e6:
45:1d:ad:50:a6:8f:c8:51:82:c6:ac:95:c6:8a:af:ed:11:d5:
97:61:77:6b:fa:2d:4f:80:ed:5b:89:c0:92:f0:50:ad:86:75:
9d:de:e4:95:7d:40:75:64:8a:84:94:15:f3:16:af:f9:fe:cb:
50:f4:dc:93:4b:0c:d3:3f:36:49:16:4a:86:77:82:d5:8f:f4:
fb:94:63:72:b2:b6:d5:fa:db:15:5e:54:7a:4c:bc:51:d2:79:
e6:e8:7d:23:be:4f:dc:b6:dd:b3:c1:af:f3:11:cb:ad:2a:f5:
ba:c8:cd:c2:92:59:84:f9:b9:4c:03:c0:fc:11:72:e2:5a:09:
96:1f:cb:42:45:d0:63:88:71:56:fa:35:67:a2:b4:dd:49:a0:
a5:95:39:1f:b3:4d:ae:39:4c:07:29:25:ff:1c:5f:3b:14:1f:
73:6b:33:c5:5b:62:e4:b5:ea:3f:01:0a:87:cc:de:f5:bd:04:
ef:31:60:9d:c7:e6:2b:32:8c:30:f8:44:65:77:d7:ef:00:81:
6a:a1:70:61:71:d0:bc:aa:85:ce:b0:f9:c9:d6:6c:5a:44:24:
db:19:68:a3:6a:c5:db:3d:0d:e5:fa:86:9a:37:11:2b:a5:eb:
6b:5b:d1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:40:29 2026 by rpki-client