Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json)
Hash identifier: l6NVMxNznvioWxlBQy8yfrHuotwpQOW64B23yognUEg=
Subject key identifier: 58:5A:8E:87:70:ED:79:97:26:ED:76:9A:23:26:B5:7E:38:7F:C6:7E
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial: 01A06E0335FD448559236F21160A356B68D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
Manifest number: 1A3B
Signing time: Fri 04 Sep 2026 20:01:38 +0000
Manifest this update: Fri 04 Sep 2026 20:01:38 +0000
Manifest next update: Sat 05 Sep 2026 20:01:38 +0000
Files and hashes: 1: MvE_ASHksIA5Hihl4HjNkYFAKXs.roa (hash: R5hIaQTFtxbBLPslX/5K15uRVo3wvIX5E+vyZLpZGOk=)
2: sTa2ruH12AN1447UXDyFG4sK58o.roa (hash: QQfIB8V26GpvkAguN7nqO2FkvauGQGA+m32WWNo/GsE=)
3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: WXnFbgndPZdobvos7UFin8BCJY5nxW0z4zj+GPAMfnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:03:35:fd:44:85:59:23:6f:21:16:0a:35:6b:68:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
Validity
Not Before: Sep 4 20:01:38 2026 GMT
Not After : Sep 5 20:01:38 2026 GMT
Subject: CN=585a8e8770ed799726ed769a2326b57e387fc67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b5:bc:a6:c6:6a:5b:f9:73:75:08:20:a2:30:
67:1a:fd:7e:4d:72:9a:9b:06:fe:cc:e4:49:31:53:
d9:bc:18:86:ff:1e:16:82:d7:0a:e7:08:06:cc:85:
a2:6a:f1:0a:db:42:58:55:86:0b:2a:12:0c:0d:0c:
56:ac:fe:fc:3b:4a:a3:a6:30:be:ea:2e:d9:2b:78:
4e:56:fd:a3:50:a7:38:23:b7:98:a8:31:4c:3d:7f:
5f:33:3c:4e:90:1a:ab:0b:e8:05:e5:63:f2:8b:0f:
66:9f:ec:33:af:9a:1c:90:41:81:02:f2:15:3c:52:
46:3d:d0:64:f0:fb:91:ce:90:e7:9a:4f:15:bf:0a:
43:09:5f:11:aa:a7:ec:cb:ab:41:b8:f7:0f:b7:94:
de:9f:e1:c7:61:b5:56:d6:fa:6c:be:60:1a:2e:c7:
95:8a:82:32:fd:a9:b4:02:67:25:71:4e:f4:a6:83:
08:0d:6a:b8:f1:ae:85:4d:82:05:30:85:72:9c:fe:
b4:ed:fb:a1:34:1e:b0:88:12:d8:80:d6:9d:06:76:
0f:b3:dc:b9:a6:bf:30:39:14:0b:56:48:5c:e0:75:
8c:f4:6b:7b:04:81:85:70:07:26:69:42:22:01:db:
e5:2e:a4:24:0d:05:2e:3b:d7:b6:2b:85:77:5d:0d:
3b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5A:8E:87:70:ED:79:97:26:ED:76:9A:23:26:B5:7E:38:7F:C6:7E
X509v3 Authority Key Identifier:
keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:fc:d1:b3:0b:f3:b3:88:ad:e8:75:94:39:a7:c5:48:e2:0a:
9d:39:78:1a:cf:df:c3:96:b5:6c:4b:d4:10:61:11:70:72:1a:
fb:b0:1b:f3:24:68:4f:7c:e3:7b:6b:05:dc:77:19:be:d3:21:
f5:d5:73:57:d3:3c:af:86:1f:2f:dd:7d:19:29:cc:82:02:ba:
4c:7c:d5:47:9b:4d:92:1f:c7:5a:4c:21:69:29:a1:ae:7b:a0:
c2:0e:c1:0f:0d:b2:ef:6b:28:0d:86:29:6a:12:af:97:a8:1d:
1d:da:fe:02:a0:f3:86:8f:fa:6d:00:3b:d2:a3:7c:a9:6c:63:
92:e2:c9:79:56:d7:00:04:20:41:03:c6:2f:5e:ee:f6:ba:95:
11:d8:fd:c2:d0:e5:6d:5d:26:ac:98:e6:9c:76:ab:a8:3d:58:
ed:97:54:75:62:23:e8:d0:30:ff:1f:41:68:48:ca:4d:13:f2:
4b:ce:6d:14:75:de:aa:9e:25:e7:f5:45:9f:28:2d:5b:14:6f:
5e:e8:3e:ee:41:ff:5c:44:3e:af:84:1d:b0:3e:9c:ea:6b:79:
cd:ac:28:89:be:2d:e7:a8:b3:6c:bf:ae:23:db:86:e8:ba:d5:
c7:ae:93:81:49:9e:52:e3:28:20:90:73:5d:02:20:98:ab:f4:
94:14:15:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:15:52 2026 by rpki-client