
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
File: tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft (raw, json)
Hash identifier: O11XLB4UtLMhZ6P4pvN+ub/bPd2BSGCOZA71Qzo9HpU=
Subject key identifier: C2:6F:14:90:D2:55:C3:F2:AE:41:C7:62:34:07:DB:03:37:26:B7:76
Authority key identifier: B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40
Certificate issuer: /CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40
Certificate serial: 01A02732C0E85849D9EA20AB7F546EA7C68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
Manifest number: 0745
Signing time: Sat 22 Aug 2026 02:00:32 +0000
Manifest this update: Sat 22 Aug 2026 02:00:32 +0000
Manifest next update: Sun 23 Aug 2026 02:00:32 +0000
Files and hashes: 1: lf0Q27_M7GFPEsgVcJVVxoAfXUM.roa (hash: sqE0Hw0Q3FI2WcAgCLh44TsVF/QN+tcFx9NnmWdf0g0=)
2: tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl (hash: DTupxaDPzIdIbcqpy7wOENZdYxYukKiUPYXNVAD3K9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:27:32:c0:e8:58:49:d9:ea:20:ab:7f:54:6e:a7:c6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40
Validity
Not Before: Aug 22 02:00:32 2026 GMT
Not After : Aug 23 02:00:32 2026 GMT
Subject: CN=c26f1490d255c3f2ae41c7623407db033726b776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2e:82:c0:a0:7a:6e:e5:a9:20:c7:64:d8:ee:
dd:a1:35:67:d2:ad:71:c5:90:59:08:42:0c:3a:e0:
41:a2:a8:42:70:c0:9d:da:b4:ae:7d:26:8b:69:db:
a7:77:08:ab:7a:12:e6:da:9e:bd:bb:8b:41:ac:29:
79:4a:ed:96:33:80:97:de:7e:1b:59:ad:28:8f:ff:
b3:75:2d:10:40:d5:12:eb:e3:8d:4e:6b:42:6a:0a:
a0:ec:71:80:5d:e8:5a:69:41:8c:96:54:0b:c5:81:
a5:b6:e8:64:8b:76:5e:89:1f:5a:f7:32:68:d4:4f:
bb:5d:a3:ed:20:44:32:b5:d8:ce:fb:2c:a7:fb:c5:
6c:5b:8d:92:63:3a:9d:fb:77:88:51:39:79:71:46:
55:de:0a:75:ea:20:7d:03:60:48:66:7d:6f:35:05:
ab:04:ab:4e:fd:cb:f3:83:81:d3:c4:17:10:d9:48:
29:79:5f:25:b0:c5:eb:fe:fc:34:4d:06:c5:2f:59:
76:d1:04:7e:d5:b7:4d:67:f6:e2:83:6e:6a:68:b0:
21:3b:87:2f:ea:d5:20:0e:ee:a6:fa:29:4d:eb:ee:
96:4c:b1:c5:5c:87:00:02:1d:b6:14:48:77:c6:3f:
f1:f4:21:19:c1:e2:2d:db:c9:d1:32:d9:4b:3b:56:
3e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6F:14:90:D2:55:C3:F2:AE:41:C7:62:34:07:DB:03:37:26:B7:76
X509v3 Authority Key Identifier:
keyid:B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c2:18:5f:f7:75:7f:9f:01:e1:a7:ee:18:47:e3:7d:1c:f0:
d7:d2:aa:34:a8:9e:8d:b4:4c:2b:b4:45:e8:fd:43:cb:95:3f:
f6:f0:64:ec:68:51:4a:23:78:4c:4d:f3:ec:68:98:97:44:f0:
86:d6:de:d7:83:37:1f:29:49:42:06:f0:cc:61:ff:93:97:73:
bc:38:7b:46:57:36:15:ab:d0:07:b4:1b:32:32:3f:97:96:d4:
e1:9d:20:1c:a0:93:52:27:9b:b0:23:12:6e:88:b1:cb:ec:44:
dc:23:f8:dd:d3:08:60:30:a7:ba:d6:35:27:b3:90:a2:a8:2b:
b1:64:94:fd:f5:4c:5f:90:da:6b:05:83:57:0f:44:c3:1b:23:
fc:56:71:bc:d8:63:9e:a5:5a:fd:22:4c:84:4b:43:11:3d:be:
f4:c1:14:a4:eb:69:41:c4:a6:2a:96:a0:a8:65:29:25:c2:b6:
fd:d5:10:9b:58:59:3d:24:79:79:5d:6c:e4:fe:8e:99:90:fa:
a9:ab:16:ed:ea:d9:fe:21:0b:cc:11:5d:fe:7b:a0:2b:84:01:
0f:e9:2c:14:fd:c5:e7:33:d0:35:15:d1:7b:20:b3:f5:68:74:
31:6c:97:09:fa:ed:f9:6c:99:48:32:97:ae:56:e8:ea:bb:89:
3d:52:64:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:02:39 2026 by rpki-client