Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
File: tj8U3_NUhamVlBKGMDe4XfqfE9g.mft (raw, json)
Hash identifier: QO50Qfr8ffpimivO/qDt5GkesVBc1L48UHQP+Nv/wPs=
Subject key identifier: 7C:AE:91:BF:02:D4:55:D2:7F:15:2B:B6:28:69:E2:33:B2:79:85:B0
Authority key identifier: B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8
Certificate issuer: /CN=b63f14dff35485a9959412863037b85dfa9f13d8
Certificate serial: 01A1336BFFE9B960C55609497B384C82C8F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
Manifest number: 09D5
Signing time: Tue 13 Oct 2026 04:01:18 +0000
Manifest this update: Tue 13 Oct 2026 04:01:18 +0000
Manifest next update: Wed 14 Oct 2026 04:01:18 +0000
Files and hashes: 1: peQzSQauXfwCnj1XOoxXNpModLw.asa (hash: aU+6Zd5A23QFKgJ/5iTQvPKb5QHkcwusyV0JPmRTkOw=)
2: tj8U3_NUhamVlBKGMDe4XfqfE9g.crl (hash: mTg99aawL0RcEFvYvjY0EUyv9QTddkt1Mlms3gXjkHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:6b:ff:e9:b9:60:c5:56:09:49:7b:38:4c:82:c8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63f14dff35485a9959412863037b85dfa9f13d8
Validity
Not Before: Oct 13 04:01:18 2026 GMT
Not After : Oct 14 04:01:18 2026 GMT
Subject: CN=7cae91bf02d455d27f152bb62869e233b27985b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2c:9b:25:02:79:cf:7c:90:76:94:0e:11:7a:
10:e2:fc:27:4e:d3:48:73:89:4f:b4:91:94:1a:0f:
ea:5c:8b:63:6d:0d:ac:44:b1:d0:09:39:75:29:ad:
dc:96:52:e1:99:e0:45:60:45:2f:9b:52:ab:27:e1:
f2:34:84:4c:55:e3:ec:b2:a1:aa:3b:1c:ca:5c:0d:
8c:b9:3d:71:5a:55:32:a0:85:21:f1:e1:04:0e:31:
42:a3:c6:d1:96:f8:19:c1:c0:45:95:b2:5e:b2:ad:
5a:c8:7f:05:88:ce:3e:db:ff:e4:ad:1d:10:23:81:
ec:f3:aa:61:fe:5a:fe:6c:1a:77:30:fc:f9:cb:17:
09:e5:f4:96:4d:b5:72:30:a0:9f:f5:ac:b3:ca:29:
6c:49:97:93:e4:a5:a6:2c:1f:af:0f:2e:c6:9b:7b:
e7:e9:4e:fa:62:0a:a6:b4:c5:ea:99:02:e1:d1:79:
8d:35:4a:ae:a0:43:0d:f9:9c:43:d6:27:02:cb:48:
32:27:32:33:91:fb:fd:05:7d:9f:70:79:f3:4f:d2:
36:38:f1:55:14:44:48:e1:45:ca:b4:05:7d:9e:e5:
2d:c8:75:7f:7c:dc:13:81:75:19:f7:62:26:42:65:
49:85:d5:57:36:d6:43:ed:86:89:de:2c:a0:99:d1:
e6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AE:91:BF:02:D4:55:D2:7F:15:2B:B6:28:69:E2:33:B2:79:85:B0
X509v3 Authority Key Identifier:
keyid:B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d5:62:e9:17:0c:36:54:bd:76:82:94:d8:93:83:88:2b:e4:
a8:11:b2:8c:4b:6f:1a:09:21:ad:54:a1:04:70:04:ec:46:ee:
d1:c6:25:63:ac:ef:50:53:9d:5f:2a:49:04:39:a0:79:ef:da:
e1:66:03:f1:70:d2:f4:a6:46:48:76:cf:d2:68:8e:d8:86:f9:
91:d6:e1:9e:85:0d:db:c1:12:11:bb:53:c0:b4:c6:9a:2d:41:
3b:a9:8b:94:33:66:69:bb:b2:75:ca:24:65:82:a6:ed:69:4b:
94:75:f6:d2:a2:0b:f0:87:c6:70:35:a9:42:a9:14:75:22:e1:
22:20:bd:cb:ec:1b:62:46:35:a0:32:ce:2c:cc:81:d5:3e:43:
6a:22:82:9b:83:b3:02:e1:64:2a:04:08:eb:ed:ea:75:be:82:
12:b2:10:30:ba:d9:c2:c1:ea:6e:ee:b0:f2:4c:52:30:33:21:
a9:d4:31:bf:c7:24:c7:cf:d5:21:7c:85:77:e1:ef:52:a5:b3:
88:fc:ad:bd:a9:f6:8e:0b:57:69:e7:20:32:fa:65:23:cf:5f:
2e:29:ee:d2:88:c7:f6:0c:29:a0:36:bc:6d:5a:35:af:df:31:
83:99:ae:fe:2b:16:f0:0d:15:2b:30:f6:47:b5:a3:a6:b5:fb:
7d:3d:85:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:11:52 2026 by rpki-client