Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
File: tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft (raw, json)
Hash identifier: uHyJRrhLbKJepzUuqQk/zgjOtu5wgkT+vEf77p8mQKo=
Subject key identifier: 24:A0:C2:ED:BD:0A:FB:9F:27:64:B1:85:97:F8:AF:48:65:32:77:A7
Authority key identifier: B4:50:D3:13:2D:E1:BC:2D:D2:65:D6:E1:AF:C6:FB:16:B6:EC:1B:08
Certificate issuer: /CN=b450d3132de1bc2dd265d6e1afc6fb16b6ec1b08
Certificate serial: 01A06792D61B3C2D6F2BA4E383B2AA0D3193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
Manifest number: 01DC
Signing time: Thu 03 Sep 2026 14:01:11 +0000
Manifest this update: Thu 03 Sep 2026 14:01:11 +0000
Manifest next update: Fri 04 Sep 2026 14:01:11 +0000
Files and hashes: 1: tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl (hash: uwgtKLhmfvnwKj2QzshqIqo8UFt3Lj99QUvq1nxD/h0=)
2: vqtiNCqmFTgZhluRAF9PxU_CVW0.roa (hash: SZBzR5bl2Fh4kMVH7fOKYHImik+Vj2jtIZ9kmUmZ24o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:92:d6:1b:3c:2d:6f:2b:a4:e3:83:b2:aa:0d:31:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b450d3132de1bc2dd265d6e1afc6fb16b6ec1b08
Validity
Not Before: Sep 3 14:01:11 2026 GMT
Not After : Sep 4 14:01:11 2026 GMT
Subject: CN=24a0c2edbd0afb9f2764b18597f8af48653277a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:77:79:d0:b2:79:c1:05:7f:4a:c9:b8:99:37:
54:a8:1a:ae:69:39:b8:3d:94:22:55:a7:b4:4e:40:
da:e4:88:a1:2c:40:33:89:83:26:4c:a6:7d:0b:27:
fa:35:6c:23:f3:2a:1f:ce:28:7a:8c:d3:f9:b9:cc:
58:50:4e:20:d9:8b:18:d2:12:5b:a8:d9:f3:cb:7b:
6b:77:6c:30:1b:bb:2e:29:7f:14:92:2a:a9:10:32:
20:13:af:13:03:38:3f:27:5a:9f:cd:21:cc:a2:d2:
8b:64:e6:5c:c8:ab:e0:91:d9:d8:d6:89:3c:b8:93:
3e:be:9e:12:fb:6a:c5:79:f2:2a:65:79:f9:f5:29:
68:b4:24:2f:19:bc:54:ab:b2:90:0b:ac:6d:4f:78:
e9:91:d6:27:6d:ce:82:ee:a7:d6:21:0b:c0:78:c9:
8a:8a:ce:1a:22:fe:c4:be:1b:44:71:6d:6e:02:49:
3e:ff:58:b3:3b:9a:94:be:cc:b0:a7:f1:4b:75:e0:
3b:03:6f:be:6d:c3:59:bb:c9:a3:9c:92:fd:35:64:
c9:a6:62:1f:58:df:9b:77:ae:1f:98:17:a4:29:52:
dc:eb:7d:6d:ae:27:4a:33:9e:07:59:b6:41:e0:2d:
ac:0c:24:0d:6a:81:6e:79:36:43:7c:4e:b2:d6:8d:
b9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A0:C2:ED:BD:0A:FB:9F:27:64:B1:85:97:F8:AF:48:65:32:77:A7
X509v3 Authority Key Identifier:
keyid:B4:50:D3:13:2D:E1:BC:2D:D2:65:D6:E1:AF:C6:FB:16:B6:EC:1B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a1:f3:2b:57:b2:87:6d:f5:75:7d:30:28:66:80:b0:46:4b:
16:32:d8:d9:fe:29:ba:bd:24:c3:32:bc:a3:e7:b7:b7:a4:a5:
f5:f6:a5:78:86:f6:9e:1b:1b:79:f1:db:4d:17:13:cb:16:73:
2f:b6:6b:0b:1c:88:fc:7d:8e:d0:0d:3a:bb:3d:17:8e:ff:ae:
c1:e2:97:e6:ef:52:eb:76:d7:25:8d:7f:19:60:ee:f4:b2:a9:
61:e9:d2:c7:84:6c:72:89:65:ef:48:37:5f:c9:eb:71:e6:aa:
c4:0c:14:fb:41:86:94:4a:cd:f4:1b:c7:bc:47:cd:8c:4e:2a:
a9:31:ff:e0:4a:31:a3:f5:b5:d8:d6:d4:5c:b9:f5:c5:9c:19:
d8:03:15:a6:cc:0f:f6:74:16:d7:7e:fd:64:6e:96:b1:c9:c1:
a3:af:af:81:83:a6:00:b8:f8:c8:29:c1:16:c9:97:25:b1:94:
04:4a:68:69:62:f4:35:f5:82:eb:bd:6b:e1:7d:6d:31:47:58:
37:4f:90:29:d2:37:3d:6f:a2:df:96:04:31:46:d4:52:7b:79:
ed:be:74:b8:f0:90:b6:bc:ae:43:5d:ac:7f:49:bb:fd:29:01:
41:07:68:4a:e6:35:39:de:2a:9d:ab:43:b4:73:2a:67:50:a0:
dc:c3:1f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 00:18:27 2026 by rpki-client