Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
File: tTRCGKSIC1AMAzMh52vXi088Flg.mft (raw, json)
Hash identifier: AEuj9+A5RkYzmrZD6UgBxeXloa+CHvGf3IzYtN2RzEM=
Subject key identifier: 91:05:09:9F:56:55:A1:07:81:8A:0B:D0:89:4A:A8:F4:66:75:CA:EC
Authority key identifier: B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
Certificate issuer: /CN=b5344218a4880b500c033321e76bd78b4f3c1658
Certificate serial: 01A0FC10074707476958C437037A3A355F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
Manifest number: 1A88
Signing time: Fri 02 Oct 2026 10:01:43 +0000
Manifest this update: Fri 02 Oct 2026 10:01:43 +0000
Manifest next update: Sat 03 Oct 2026 10:01:43 +0000
Files and hashes: 1: 41lIrSq2rtgRzIhHQ2XtfPg_knA.roa (hash: bm4b2DvtMJCYf2Lx/TM2HmUFpxfisy7LFz41+IzHLbU=)
2: 5bGobuYTEr_grBRZ_uakRYqcaIY.roa (hash: P0xoEeW+4dWO4aX2IUeMr6lTU6DbnVfKtmhtkPhqqzE=)
3: tTRCGKSIC1AMAzMh52vXi088Flg.crl (hash: 8nIEdcA9PpBfGh1U++OQ9+JU+iqm6z5UBv6wXOnjaxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:10:07:47:07:47:69:58:c4:37:03:7a:3a:35:5f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5344218a4880b500c033321e76bd78b4f3c1658
Validity
Not Before: Oct 2 10:01:43 2026 GMT
Not After : Oct 3 10:01:43 2026 GMT
Subject: CN=9105099f5655a107818a0bd0894aa8f46675caec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f4:8f:3b:ba:b9:46:d2:a3:1c:8b:ab:cd:61:
86:d7:21:b0:48:fb:98:9f:db:9c:23:e2:a5:24:53:
4f:8f:54:2b:76:c1:9d:b7:d3:98:ed:a0:cd:4a:0a:
03:a7:69:30:3c:7f:82:c5:fa:f2:98:ba:55:2a:d0:
44:d2:e4:20:f5:f2:ff:79:7b:0c:67:9f:f4:ba:4c:
8c:94:88:35:1b:5b:37:ae:4c:24:32:83:28:82:bd:
07:ae:3e:da:bb:3c:ed:6e:39:d0:c6:9b:85:27:40:
22:2a:fb:e7:14:dc:85:04:79:21:96:b9:69:25:a5:
71:8f:b8:41:42:f6:fb:91:77:5b:44:bd:09:41:27:
bd:b0:eb:1a:21:ed:1b:ff:ce:65:6c:9e:21:0c:e3:
2f:f6:1c:6b:4f:65:61:e1:b9:cb:2e:da:31:6b:77:
bc:69:49:2d:a7:48:31:ed:0f:d2:72:c1:79:a4:df:
81:f5:e0:06:2f:27:4e:dd:3a:d8:84:d4:d0:58:cb:
cb:82:13:4e:72:5a:b5:a9:a6:15:d2:53:e9:c0:9b:
50:ac:55:17:d9:be:fe:8b:e9:52:76:71:0a:d0:a9:
9b:2b:3f:5c:9a:36:7f:cd:8b:90:b1:06:e7:ac:08:
9b:55:7a:92:3c:5c:89:58:c6:07:06:1a:fa:fc:35:
29:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:05:09:9F:56:55:A1:07:81:8A:0B:D0:89:4A:A8:F4:66:75:CA:EC
X509v3 Authority Key Identifier:
keyid:B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:be:47:3f:51:31:7b:1e:10:bb:f1:c4:fd:58:fa:ed:2d:ef:
7e:81:a3:46:a2:a8:52:1b:e9:41:c8:ef:08:82:83:b1:4c:e6:
f8:6d:66:67:be:86:1c:39:c8:73:b9:d9:97:3a:3b:50:7b:60:
25:85:f5:c7:1f:4e:13:91:33:eb:69:62:8b:dd:51:d2:cd:7c:
22:57:81:29:9d:80:08:aa:10:57:f9:e7:c1:e7:cf:e2:81:91:
3e:d2:c2:25:06:07:6b:d0:2e:6f:40:d3:24:fe:55:62:c9:08:
5d:69:a6:6f:4c:52:62:d5:03:82:72:9b:08:e5:ba:b1:88:1b:
8b:02:d7:5b:7c:9f:41:75:08:d7:58:08:e2:e4:cd:77:48:cd:
f1:58:ac:fc:64:fe:47:0d:74:d5:c7:13:d2:8e:29:17:cb:9d:
2b:12:7c:dc:62:fb:da:bb:33:79:26:d6:f6:59:36:fb:1b:00:
9d:56:0c:f0:87:dd:37:59:41:eb:94:e8:3a:c9:8a:e1:bc:87:
28:79:87:f7:3f:7e:4e:06:db:5f:27:6b:64:e0:b5:34:86:60:
51:8c:a3:84:31:a3:ad:d9:0f:3e:fb:a7:44:56:e7:98:cb:4e:
0c:d0:49:0e:cb:5a:ef:cd:05:ec:24:cc:75:ef:6b:08:c7:e4:
2c:e9:b2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 14:57:22 2026 by rpki-client