Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
File: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json)
Hash identifier: QhwfZJO7kPH/9IVTi+racYa8iIl8R/W+RdM+kmbGPVM=
Subject key identifier: B1:49:9D:14:AB:B3:F7:4D:C2:F9:B0:D2:8C:66:3E:7C:56:C1:4E:91
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial: 01A1118508C05C6C755EAF1891F681C42C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
Manifest number: 0DE9
Signing time: Tue 06 Oct 2026 14:01:33 +0000
Manifest this update: Tue 06 Oct 2026 14:01:33 +0000
Manifest next update: Wed 07 Oct 2026 14:01:33 +0000
Files and hashes: 1: MpV_ycO4tTz0-ilBvtKC36nuWAI.roa (hash: vSAtW4LqIhE9X5JdTxt3hPAgyiDA1mTD5qXNu6hLJVg=)
2: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: aLNQW7RlmP/vj4Em5IkiC2oUgNk+bHez6FljDRiq0bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:85:08:c0:5c:6c:75:5e:af:18:91:f6:81:c4:2c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Validity
Not Before: Oct 6 14:01:33 2026 GMT
Not After : Oct 7 14:01:33 2026 GMT
Subject: CN=b1499d14abb3f74dc2f9b0d28c663e7c56c14e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1f:c3:b7:c3:18:ad:94:cd:7b:17:db:93:13:
03:f3:15:81:ad:c3:ae:2e:3e:a9:cb:6f:f4:13:cb:
ae:10:98:03:57:10:05:c7:8b:54:a4:5f:9a:95:53:
0c:0f:59:74:15:21:3f:59:14:fe:5f:b3:3b:a0:d1:
09:58:2a:d6:f6:9d:b6:dc:18:69:66:61:9a:a5:f5:
e6:d7:5f:34:a1:88:96:5e:0f:8f:ba:03:a2:7e:bd:
f1:00:aa:9b:92:2f:87:82:54:72:f1:00:d5:77:27:
06:95:8d:03:9d:28:67:39:00:5a:63:5c:2e:c6:1f:
3b:0d:c3:3c:7c:60:74:6f:e9:5f:e8:7d:ae:ff:99:
2a:e7:fb:e0:6c:f4:1c:ff:68:5b:87:49:9d:f3:f5:
a0:34:a1:16:77:3e:ae:cf:30:8f:3e:7e:6a:09:b0:
c8:5e:29:33:e2:ee:c0:39:1f:04:cf:18:a6:6b:2a:
3b:51:76:d8:a9:a7:c0:3b:e1:fa:8b:2f:ba:e7:c6:
43:4d:29:27:79:14:fa:ad:f0:f1:78:e7:5a:dd:cf:
73:a3:e9:b9:f4:13:39:00:91:12:ec:53:a2:83:e1:
e9:28:8b:9f:1f:a5:77:ce:11:b8:40:c2:2e:71:aa:
2f:14:d9:9a:96:15:82:cd:32:4a:f1:be:1d:af:b0:
29:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:49:9D:14:AB:B3:F7:4D:C2:F9:B0:D2:8C:66:3E:7C:56:C1:4E:91
X509v3 Authority Key Identifier:
keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:10:79:e1:ec:47:d2:0f:14:0c:7f:ef:33:c6:0a:52:71:68:
d3:11:99:ec:09:0a:59:51:c6:63:87:a6:0b:1b:34:d6:a5:8c:
af:e2:d6:1a:c8:6c:ae:80:e0:4c:8f:d1:4f:d9:e5:e5:b2:86:
b7:77:60:2a:39:9f:ce:b2:f0:bc:76:83:0a:3c:5c:d4:29:18:
bf:ad:a7:38:62:83:2f:ae:51:32:da:09:3c:4d:31:cc:68:6a:
cb:ed:f8:09:26:0f:3d:79:8b:4e:b7:a7:42:03:31:31:71:7d:
92:2c:11:e1:c0:8e:2d:96:3b:a7:ba:c3:14:76:84:b2:e0:46:
d5:a1:e6:e2:33:e7:e0:ff:0a:3a:f9:17:da:c3:98:da:ee:9c:
87:bc:a9:a6:ec:ae:71:15:10:2b:b3:57:1f:e1:e2:df:05:ed:
c5:89:84:04:0d:9d:89:a6:ee:68:f2:b4:1a:da:e9:50:f8:03:
46:e6:b8:66:3a:76:46:d4:99:d7:77:37:84:a4:5f:51:6a:2f:
6e:9f:e9:79:f9:3c:a3:f1:4a:6c:79:f3:08:4d:17:90:bf:2a:
e5:95:34:10:dc:a8:62:59:aa:96:3f:16:93:cd:e8:07:99:6e:
cf:b3:02:fe:87:41:58:c0:a5:f7:9e:1c:35:45:de:df:82:8c:
30:22:41:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:59:20 2026 by rpki-client