Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
File: tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft (raw, json)
Hash identifier: ZvfHhVadDuy3ucv32pQkVzos0GMGwL/jsWoqmQIV+o0=
Subject key identifier: 64:5B:B0:72:47:EF:7A:51:1A:7B:77:31:93:FC:66:D8:D7:46:44:87
Authority key identifier: B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40
Certificate issuer: /CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40
Certificate serial: 01A12DD7385A3E6110002543280D225FD222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
Manifest number: 07CD
Signing time: Mon 12 Oct 2026 02:00:41 +0000
Manifest this update: Mon 12 Oct 2026 02:00:41 +0000
Manifest next update: Tue 13 Oct 2026 02:00:41 +0000
Files and hashes: 1: lf0Q27_M7GFPEsgVcJVVxoAfXUM.roa (hash: sqE0Hw0Q3FI2WcAgCLh44TsVF/QN+tcFx9NnmWdf0g0=)
2: tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl (hash: TACWtlI7qEOFbihOQTKOnEOlkpihdhR2ERjESVCDWAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:d7:38:5a:3e:61:10:00:25:43:28:0d:22:5f:d2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40
Validity
Not Before: Oct 12 02:00:41 2026 GMT
Not After : Oct 13 02:00:41 2026 GMT
Subject: CN=645bb07247ef7a511a7b773193fc66d8d7464487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:3d:a1:de:96:71:a4:d2:6c:f6:9a:af:c0:
fe:11:39:83:ac:03:25:1e:58:ab:b1:ea:bd:f5:d2:
06:d4:5b:d3:e9:ad:db:6f:62:14:99:cc:bc:f1:f8:
ee:14:e1:1f:9f:76:6b:54:cb:86:d4:95:7e:dc:93:
ea:6c:bb:36:df:6d:27:f3:2f:a8:ec:26:d0:85:82:
fa:5d:50:f0:93:3b:1a:97:b9:0f:43:ed:17:19:09:
50:f0:63:4e:21:e7:ae:5d:f0:49:46:fc:da:35:cc:
a4:48:57:ea:a2:a4:4b:c3:ed:af:09:e8:61:31:9c:
73:3f:e7:87:f1:6c:60:3d:40:4b:87:79:93:3d:56:
2e:c6:81:60:d9:22:c6:d9:94:af:6d:e4:ce:a3:f1:
94:e3:52:3b:73:41:09:11:fe:f4:e9:a6:a5:a1:bc:
8b:2d:94:3b:60:2b:71:62:21:3a:f4:d6:4b:73:b7:
40:94:ee:18:65:c2:1f:6d:da:c8:f5:8d:20:d9:ac:
6d:9f:e9:af:51:04:88:8e:18:ec:ad:5b:e6:b0:84:
01:72:91:c2:22:5c:3b:19:92:a2:85:3f:54:33:4f:
3f:06:f3:0f:a5:7e:6f:3c:de:1a:bf:d6:2d:4b:4c:
ff:dd:f2:bc:12:f8:3d:7f:d5:73:9d:1b:2b:cd:0a:
64:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5B:B0:72:47:EF:7A:51:1A:7B:77:31:93:FC:66:D8:D7:46:44:87
X509v3 Authority Key Identifier:
keyid:B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:88:95:e5:7f:fb:4c:f6:aa:f5:05:fb:e3:74:37:20:c7:7f:
3d:75:76:bb:d4:5b:d5:51:b1:af:02:c8:92:79:9a:1f:62:75:
a7:32:6b:43:7e:cb:a3:70:bc:96:fa:61:bb:0d:f5:a2:97:8c:
eb:28:41:bf:88:4a:7d:68:a1:c6:75:d8:82:6e:e8:e2:b5:e9:
4e:2c:8d:5b:86:52:4d:66:67:59:49:cf:15:27:ef:66:67:11:
9a:87:e9:b9:31:40:1b:b4:40:84:38:86:ac:ec:0d:13:ed:5d:
2d:9a:fa:45:fd:12:60:9e:a9:af:f4:ae:d4:37:7a:b1:38:06:
ac:07:bf:af:58:9c:3d:1a:53:0b:b4:9a:23:8d:36:ed:6c:72:
8c:ea:d5:70:ee:4f:0a:d1:53:d8:93:25:c5:65:92:f7:4b:2c:
96:e6:01:23:b7:62:93:eb:4d:b4:da:e0:39:da:9e:2a:ab:4c:
af:31:66:e0:04:7c:f0:63:46:6a:26:dc:5e:44:79:6a:89:a7:
ba:e0:c3:42:0e:0d:63:77:ea:a3:55:a2:22:e6:09:43:56:6d:
1e:88:0e:36:fb:be:d5:52:1e:f0:78:43:c8:3a:2b:e8:3e:d1:
c7:74:f1:af:35:8b:b9:5f:5b:61:6b:68:86:8e:08:97:de:27:
95:5c:ea:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:19:55 2026 by rpki-client