Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
File: tj8U3_NUhamVlBKGMDe4XfqfE9g.mft (raw, json)
Hash identifier: qe84tLBNZJ8mTm7W0T6XQie87AsaQhvv0DaEG3Xyuhw=
Subject key identifier: 8A:17:0E:CB:EC:66:9A:BA:B5:79:77:EB:65:4F:2C:37:AA:B8:BD:8B
Authority key identifier: B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8
Certificate issuer: /CN=b63f14dff35485a9959412863037b85dfa9f13d8
Certificate serial: 019FF835A53EFC6D7CEED568A8D4CD06B935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
Manifest number: 0931
Signing time: Wed 12 Aug 2026 23:01:32 +0000
Manifest this update: Wed 12 Aug 2026 23:01:32 +0000
Manifest next update: Thu 13 Aug 2026 23:01:32 +0000
Files and hashes: 1: gEvPQohUnuc28gSU_LnB2n8byio.asa (hash: Fubnzf0xJmvbucD3B1n2PG0e9xPoaWRyPDCkp6ZRe2c=)
2: tj8U3_NUhamVlBKGMDe4XfqfE9g.crl (hash: S0SPnsSk/DScsv43Fiic3bt/uq6f7+MOG+V1zQr2Nl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:35:a5:3e:fc:6d:7c:ee:d5:68:a8:d4:cd:06:b9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63f14dff35485a9959412863037b85dfa9f13d8
Validity
Not Before: Aug 12 23:01:32 2026 GMT
Not After : Aug 13 23:01:32 2026 GMT
Subject: CN=8a170ecbec669abab57977eb654f2c37aab8bd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:45:cf:8f:8f:93:1f:24:8d:8e:0d:72:fd:
dc:dc:77:26:c8:6d:28:cd:82:4b:b0:d2:7a:01:cf:
3e:91:e9:35:6f:9b:c7:3c:bd:5d:28:5c:76:29:f3:
a4:1c:72:04:bc:fe:4d:90:dd:fd:40:e1:e5:82:0f:
59:f9:71:7d:51:15:40:e5:8a:a7:07:26:35:84:be:
fa:5e:1b:fd:92:37:a8:39:0a:86:55:ae:69:57:15:
0b:e1:59:65:2d:f8:b7:68:9b:76:c3:84:40:74:b5:
f6:b6:5a:e0:a2:c5:2c:0a:9b:39:6d:a3:b7:26:45:
fa:e9:c0:11:64:69:d9:08:7c:00:7d:27:dd:ef:fa:
ee:6e:49:63:1e:3a:81:c8:ad:d3:c6:50:fb:c9:0b:
fc:bc:03:29:6d:b5:c1:ba:ea:50:05:4f:16:03:34:
60:3a:cb:9f:da:10:13:0e:ff:5e:1b:57:c3:be:a9:
fb:ec:50:ac:0f:14:d2:f3:a8:6c:c7:f2:9e:e0:6f:
59:75:68:e4:64:bb:56:6e:b8:8c:5d:8e:ff:61:f4:
ff:76:85:fd:2c:da:74:db:06:d6:49:79:00:7c:19:
49:b4:5f:a3:f8:2e:d5:99:30:bf:aa:bf:59:cc:54:
39:d6:c8:3b:5c:f4:92:08:5c:f1:56:00:6a:aa:eb:
ff:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:17:0E:CB:EC:66:9A:BA:B5:79:77:EB:65:4F:2C:37:AA:B8:BD:8B
X509v3 Authority Key Identifier:
keyid:B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:cd:af:72:c9:3d:6b:d5:85:28:9d:b2:c9:b3:ca:51:fb:84:
46:2c:34:97:b4:9c:00:dd:30:25:81:f1:24:1c:ab:29:72:09:
6a:57:70:d4:2a:08:2d:fd:f0:e8:4d:ec:1f:4a:3f:06:12:1e:
9b:fa:f0:ec:8f:d5:e2:a3:c8:fa:d0:4e:10:9a:6c:44:48:ce:
79:83:4e:5e:31:2f:3c:f9:b0:68:a9:f1:0a:bf:99:0e:2e:b2:
79:98:65:26:44:7d:48:17:07:03:09:85:19:ff:33:93:00:80:
e2:2f:c7:b0:3d:9c:dd:4c:58:9a:c9:99:e4:25:a0:1f:bc:78:
df:b9:66:c6:38:98:bd:f7:48:f7:b5:c9:ad:22:15:d7:6d:e1:
cd:78:94:a0:7d:b0:7a:19:28:02:5b:c1:b5:c1:b3:80:fc:ca:
89:03:a3:0c:bf:b5:a3:1f:02:03:b3:7f:48:46:94:7b:48:d0:
a1:61:26:2c:29:1f:2a:15:bf:4d:26:2c:e5:5e:3c:dd:e1:44:
db:1d:0e:8f:b6:8f:7b:55:a9:21:09:1e:b3:cc:3b:5e:5b:c2:
39:fd:bd:ff:a1:0f:0a:93:78:54:80:85:58:af:d5:61:c8:b4:
22:6e:c9:ed:18:2e:35:c8:01:34:1c:fa:f2:1a:04:c0:10:f9:
2a:15:1f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:02:34 2026 by rpki-client