Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
File: tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft (raw, json)
Hash identifier: D3H64/inu5GKnfblqfVBD8ji+rX+jUVN8MpfATg66QA=
Subject key identifier: F7:BA:58:30:46:F4:34:60:F7:F2:BF:A6:80:11:E0:B2:5C:C2:7F:F6
Authority key identifier: B5:39:83:18:35:C8:7C:75:01:F6:C3:7C:B4:8E:60:A7:95:A3:94:BB
Certificate issuer: /CN=b539831835c87c7501f6c37cb48e60a795a394bb
Certificate serial: 01A18864F717C1456E6209F70FD7678596CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
Manifest number: 1ACA
Signing time: Thu 29 Oct 2026 16:01:20 +0000
Manifest this update: Thu 29 Oct 2026 16:01:20 +0000
Manifest next update: Fri 30 Oct 2026 16:01:20 +0000
Files and hashes: 1: SXqmp5RLfEZyA8P9uCzH5CgbQUA.asa (hash: h4SDtU0VDA6Kn7INYcKrGuZ7EVqBrSakqgFgTW1ueEc=)
2: tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl (hash: 1o1xYJkeyQuGZ/eXI3w9gH0bL367eejCLKtVFGQohJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 16:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:64:f7:17:c1:45:6e:62:09:f7:0f:d7:67:85:96:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b539831835c87c7501f6c37cb48e60a795a394bb
Validity
Not Before: Oct 29 16:01:20 2026 GMT
Not After : Oct 30 16:01:20 2026 GMT
Subject: CN=f7ba583046f43460f7f2bfa68011e0b25cc27ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3a:a0:a4:1b:3a:d8:5f:cd:ac:d9:e9:f1:6b:
38:b8:69:d7:b1:48:3d:ad:28:0e:e0:11:75:43:4e:
42:7d:3f:f7:cf:ec:c3:21:24:35:7a:3c:8f:17:de:
89:b9:1d:aa:5d:40:22:53:c2:b8:cd:00:66:9a:b5:
62:da:dc:45:40:6c:74:00:3b:8c:41:6f:0e:06:74:
6e:03:e7:92:a3:ca:c2:52:2b:da:8d:01:75:4b:60:
2e:01:8a:09:af:c5:5a:ae:5d:70:75:9a:6e:1c:98:
48:7b:f2:ef:21:76:84:11:d9:c6:a0:cf:28:25:5f:
a8:af:6e:f7:15:8f:a8:47:a2:3b:92:10:24:9a:9d:
89:6a:69:00:34:e7:1c:77:48:37:ab:68:b1:53:a7:
6a:a1:a9:4e:66:6e:93:79:c5:c4:48:94:90:55:5e:
f4:c7:9a:7c:86:e8:90:97:6f:c4:a0:aa:2b:be:ec:
14:ad:c3:b2:dd:53:3b:cf:fe:50:69:01:38:9f:b7:
8a:c9:33:d2:36:27:da:aa:09:c8:0b:70:a3:e0:24:
c1:37:e8:4f:b2:64:a2:64:a6:a4:c0:19:f1:15:82:
9c:e2:3a:e8:34:c6:3a:c9:32:26:af:cb:61:d1:11:
ab:33:91:b1:b5:0b:d7:82:f0:39:f3:f4:57:03:18:
48:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BA:58:30:46:F4:34:60:F7:F2:BF:A6:80:11:E0:B2:5C:C2:7F:F6
X509v3 Authority Key Identifier:
keyid:B5:39:83:18:35:C8:7C:75:01:F6:C3:7C:B4:8E:60:A7:95:A3:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f2:f0:89:8c:62:cf:fe:5c:96:29:67:9f:4b:ec:2d:e9:3a:
b1:30:ad:4d:b5:d0:41:c9:c8:e7:c3:2c:12:2d:7b:16:58:b5:
43:d4:9b:e4:b8:41:e2:eb:63:b5:be:7d:4b:80:c9:bb:07:27:
7b:30:a3:f1:e9:a6:ce:2b:3a:ce:8a:8c:8d:26:d4:cb:f9:90:
2c:b2:ec:96:ed:ba:d3:91:b2:a0:9e:c5:e8:26:a5:da:69:89:
2d:8a:85:64:e6:3e:55:ed:18:d6:55:48:71:4d:8c:d6:c5:80:
39:95:5c:88:03:ff:3e:ed:e7:0d:1c:92:1f:a6:6f:a5:2f:bd:
50:43:c7:53:98:0d:19:4b:e8:57:f7:eb:94:e9:7e:7b:7e:40:
0f:e7:17:5f:11:aa:c4:03:80:54:ba:8a:cb:1b:63:8f:e8:03:
29:d3:62:2c:87:53:6b:f9:a3:9a:02:55:69:32:3b:70:1e:49:
02:73:f8:e9:56:04:b3:12:db:0c:1d:1d:bf:8f:ab:50:78:29:
bb:f6:8a:5f:62:4e:d3:a2:bb:0a:31:58:11:f5:10:10:35:c1:
1a:08:5d:48:af:03:ac:f0:64:4f:b5:2d:55:2f:3c:90:d6:36:
36:71:1d:9c:f5:14:a7:4a:b8:4c:6c:4d:e8:67:19:b0:6d:19:
24:38:e6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 02:46:37 2026 by rpki-client