Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
File: tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft (raw, json)
Hash identifier: G9QMqiW+vKMLZqpvVDr7GP/x8VWwJYzZODAkMAfx3TU=
Subject key identifier: 33:F1:21:6B:25:7C:E0:EE:E7:43:7A:FB:A0:85:A3:58:E0:1C:EB:C4
Authority key identifier: B5:5C:FE:77:1C:F2:84:FE:E8:D0:C2:7B:BC:F1:1D:E1:87:9C:CC:41
Certificate issuer: /CN=b55cfe771cf284fee8d0c27bbcf11de1879ccc41
Certificate serial: 01A0F6444F772FBA46B0F07E25FE4538FFDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
Manifest number: 1267
Signing time: Thu 01 Oct 2026 07:01:06 +0000
Manifest this update: Thu 01 Oct 2026 07:01:06 +0000
Manifest next update: Fri 02 Oct 2026 07:01:06 +0000
Files and hashes: 1: tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl (hash: bYh5/68NbAIJBL/oKnTvdJXCQ8quyTTWV9kt1mTo5Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:44:4f:77:2f:ba:46:b0:f0:7e:25:fe:45:38:ff:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55cfe771cf284fee8d0c27bbcf11de1879ccc41
Validity
Not Before: Oct 1 07:01:06 2026 GMT
Not After : Oct 2 07:01:06 2026 GMT
Subject: CN=33f1216b257ce0eee7437afba085a358e01cebc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:72:dd:ef:f5:e1:21:ca:ce:cd:29:b2:90:
cc:bd:0e:89:b5:bc:2e:dc:ec:3b:42:31:90:e9:c4:
fd:41:ec:31:b8:88:83:14:1d:ff:a8:ff:98:f7:fe:
ca:81:d1:a8:fe:13:85:6e:11:64:f7:2c:90:0f:59:
a4:94:4c:03:7a:88:b1:bf:6c:8a:29:ea:0e:91:68:
d1:05:1b:dd:48:67:ff:74:6b:73:86:26:94:aa:60:
88:60:ed:10:5c:53:15:67:0f:8e:9c:30:68:6e:1f:
48:7f:3e:77:13:80:81:82:28:00:a4:4a:0d:fe:fa:
a2:b5:ff:27:44:5a:f4:e0:e8:eb:4a:84:53:c6:98:
a0:8d:8b:f4:0a:14:3c:63:f5:d5:5d:e3:6a:f4:3e:
d8:f1:95:e2:84:b6:e6:5a:fd:e4:36:f5:b7:3b:c7:
2a:a3:0a:d6:d6:ae:5a:a9:2b:91:d9:99:c4:df:7c:
20:77:79:b2:7a:c5:0c:89:a4:a1:4d:1a:75:78:68:
c9:da:cb:84:04:18:29:48:ee:26:19:9e:df:ad:8a:
0a:a1:42:17:5a:cf:3d:f1:20:f9:a5:f7:f5:b7:14:
f8:2b:16:09:68:07:a8:89:4c:dd:7f:eb:74:67:c7:
6e:13:7e:9d:15:c5:9b:d6:e2:d5:62:ad:1e:6a:79:
ee:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F1:21:6B:25:7C:E0:EE:E7:43:7A:FB:A0:85:A3:58:E0:1C:EB:C4
X509v3 Authority Key Identifier:
keyid:B5:5C:FE:77:1C:F2:84:FE:E8:D0:C2:7B:BC:F1:1D:E1:87:9C:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a0:1f:d8:91:05:77:95:3d:4f:35:44:19:7f:45:b6:7e:5d:
60:f9:8c:db:53:94:15:10:5e:bd:48:34:a8:dd:0d:5a:e0:07:
1e:51:41:92:3c:2e:57:5c:12:ff:7a:86:89:33:3f:e6:8f:b3:
87:f4:d3:87:84:b2:36:18:00:f2:ed:1b:8a:c5:0b:39:97:2b:
3b:25:a5:86:9d:dc:60:e0:7f:94:01:4b:b8:17:bd:05:9c:97:
01:07:48:1e:55:24:8d:ca:a6:5c:e5:44:3b:05:14:a6:28:a1:
fe:40:b6:e2:59:48:82:65:0e:61:c2:a7:1e:21:b8:f1:e0:0d:
92:4c:d7:86:dc:57:db:4e:44:67:9c:8a:0c:03:ea:3f:92:c2:
ff:35:02:cc:75:1c:e2:eb:63:95:e1:ce:b8:a7:5c:e6:d6:a6:
69:d7:b0:55:a2:95:94:47:32:c8:2e:9f:21:75:7b:c0:9a:65:
37:15:05:37:16:f2:29:6c:b5:53:ff:a9:cd:b1:8b:b4:d0:d2:
9f:15:2d:1e:5a:e7:75:8b:e8:85:59:ca:a6:23:05:b1:53:4d:
d1:1d:62:8a:c3:d3:32:ce:63:24:c3:27:2c:4e:ab:8b:eb:74:
2c:99:04:7b:98:65:b2:3b:5d:bf:89:83:bc:12:1d:2c:15:80:
2d:47:d0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:58:08 2026 by rpki-client