Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
File: tsAN1rE41q2498hDjdCy2Fg9xWY.mft (raw, json)
Hash identifier: XubVG8OyFZZCXyr0tOPQ3p331eRWdlPbBOVpXCpjr5U=
Subject key identifier: E0:9B:8A:6F:91:09:36:B8:3C:91:76:67:59:CC:62:99:02:C3:F5:3E
Authority key identifier: B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66
Certificate issuer: /CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
Certificate serial: 01A17C97CEA26FEFDCA8FFF956C7039CCB3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
Manifest number: 036C
Signing time: Tue 27 Oct 2026 09:01:25 +0000
Manifest this update: Tue 27 Oct 2026 09:01:25 +0000
Manifest next update: Wed 28 Oct 2026 09:01:25 +0000
Files and hashes: 1: gebinHk09-NabMXj-jq94wPZa6M.asa (hash: GQWmqZiCd4TGe+5+G38N918qHKq5ATM9kvInAFjIdFc=)
2: tsAN1rE41q2498hDjdCy2Fg9xWY.crl (hash: 03Hm0JzvARplnb7Q5RpsP/nh9jOISUdLsvhjttc0YZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:ce:a2:6f:ef:dc:a8:ff:f9:56:c7:03:9c:cb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
Validity
Not Before: Oct 27 09:01:25 2026 GMT
Not After : Oct 28 09:01:25 2026 GMT
Subject: CN=e09b8a6f910936b83c91766759cc629902c3f53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:93:a3:ea:cb:8f:a4:a5:ed:29:97:e5:09:
02:c5:56:7a:ca:0e:96:4c:25:7b:73:4e:21:9b:54:
7f:c5:96:ba:36:b9:bd:ef:96:31:59:68:fc:46:99:
66:35:65:4e:91:11:87:78:e6:ba:69:66:a5:6f:c7:
05:b0:9b:6b:a7:7b:b3:78:f6:d0:55:c7:e8:c8:02:
9d:11:9a:b1:33:f6:9a:6a:3b:e1:45:19:67:99:0e:
bc:ee:a7:51:69:b7:67:36:b5:89:23:75:61:3b:8d:
85:17:7f:37:1d:9c:f7:93:ac:d6:3a:17:42:65:f5:
e9:3e:b3:a3:e4:df:d0:db:4c:19:f3:68:9c:1f:94:
23:64:94:61:2f:bf:89:08:7e:78:48:ea:64:c2:cf:
a4:67:6b:7d:58:ef:3e:0f:17:5c:97:01:87:9c:00:
e0:3a:d2:f8:ec:ff:64:cf:ed:d3:42:e3:3c:09:1a:
a1:f1:f6:83:71:12:5a:54:f9:72:4c:73:1a:27:2d:
6c:ad:07:92:cd:64:5e:9a:17:41:d0:0b:a3:9f:52:
e8:93:61:ea:c6:c6:74:59:3a:96:eb:e1:69:e7:cd:
b7:a6:e3:ad:d9:af:9f:a4:de:d9:4d:9f:33:49:6b:
b1:69:e2:3e:ad:a3:a5:29:c3:2b:51:79:27:93:69:
1b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9B:8A:6F:91:09:36:B8:3C:91:76:67:59:CC:62:99:02:C3:F5:3E
X509v3 Authority Key Identifier:
keyid:B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:87:ee:cf:48:8f:f7:6b:4d:aa:b7:03:16:a4:86:6c:72:79:
c1:c1:29:4c:0d:4d:a8:47:18:58:f0:a1:d6:bf:65:5b:a3:4c:
db:7e:09:65:01:2d:f2:1a:7c:e8:c2:aa:0c:90:26:24:70:01:
6c:d4:68:79:ff:ad:7a:bd:1d:2a:3e:0e:72:d4:08:78:e1:89:
06:6e:70:74:f9:ad:56:2c:10:3e:4a:fb:6d:09:d4:24:f0:a8:
8d:fe:24:6e:d2:06:87:a9:45:2c:b7:88:15:1a:f7:07:be:0c:
9c:12:1b:de:b5:2d:37:42:2c:8b:55:37:9c:7a:dc:fb:7d:c4:
7d:90:82:73:75:f7:d7:a4:45:7b:16:2b:79:63:44:7d:c9:8d:
02:aa:1c:1d:3a:9b:dd:ad:cd:a2:15:f9:d1:1d:82:a7:c4:e7:
6d:ac:fe:3f:15:75:a2:4a:f1:54:12:49:51:9b:5d:78:2c:1b:
64:73:da:02:a3:5d:30:b1:bd:91:8a:87:d0:5c:13:02:47:a4:
1a:32:fc:15:36:0f:73:a4:98:71:af:bf:06:1a:88:a2:46:1b:
7d:5d:f3:a1:8b:a4:a5:0d:e1:1d:00:62:3c:41:fa:d5:38:c3:
39:b3:4f:ba:c0:49:65:f3:55:63:2a:14:b4:5d:a7:88:8e:73:
65:ef:58:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:21:42 2026 by rpki-client