Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
File: tZtlS0KDPTZojjeakhvrrswwd2I.mft (raw, json)
Hash identifier: eGs4fl0JlGASKdVYv9afwpaI3bKVX4BhIN/RRogU69c=
Subject key identifier: 03:80:79:98:62:40:E3:7A:FD:B0:74:3C:C2:E1:F1:03:96:FB:A4:36
Authority key identifier: B5:9B:65:4B:42:83:3D:36:68:8E:37:9A:92:1B:EB:AE:CC:30:77:62
Certificate issuer: /CN=b59b654b42833d36688e379a921bebaecc307762
Certificate serial: 01A18F425EB94B24DFF1CDF857E2B51D4E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZtlS0KDPTZojjeakhvrrswwd2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
Manifest number: 0148
Signing time: Sat 31 Oct 2026 00:00:53 +0000
Manifest this update: Sat 31 Oct 2026 00:00:53 +0000
Manifest next update: Sun 01 Nov 2026 00:00:53 +0000
Files and hashes: 1: P1tf3TOfH-5BUA4TlKHVZFLsg9E.roa (hash: Ou5jVY+Wu+51dLZB22miAYmWfU4viS5vwM+gRlM0aZU=)
2: tZtlS0KDPTZojjeakhvrrswwd2I.crl (hash: i6BKqBec93aNrBOutsNorqFnb0q5ziztjx91kpRuKF4=)
3: whrEFYh55PfP3rH9r88LFTEnY0U.roa (hash: TH01oABU19/I/IoXNBdj7bjG3uEgkQpDazrpyE0JmkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZtlS0KDPTZojjeakhvrrswwd2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:42:5e:b9:4b:24:df:f1:cd:f8:57:e2:b5:1d:4e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59b654b42833d36688e379a921bebaecc307762
Validity
Not Before: Oct 31 00:00:53 2026 GMT
Not After : Nov 1 00:00:53 2026 GMT
Subject: CN=038079986240e37afdb0743cc2e1f10396fba436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:32:c7:0f:c2:56:86:17:ff:d7:02:0f:b0:
6b:40:5e:48:11:05:04:dc:ea:08:1d:64:1c:9b:bb:
13:7d:46:9b:81:3e:b2:28:e7:09:9e:c2:f6:83:00:
70:5c:45:9e:54:b8:d7:58:43:1f:0f:73:8d:be:66:
3b:af:0e:a5:22:cd:50:5f:9b:4c:fc:a3:34:d1:bb:
e1:d1:f0:08:e2:e5:ac:dd:f6:e1:cc:63:0a:96:91:
72:2c:16:dd:61:4d:a1:e4:9d:bc:79:ec:13:68:91:
0b:79:c6:3d:ba:11:df:c4:7b:9f:7d:0d:f6:49:de:
e0:21:2c:1c:e6:97:c9:00:5e:4c:f7:a1:36:e9:67:
1e:63:8b:cf:14:ae:25:45:5f:7b:12:d2:57:10:1e:
42:54:3a:6d:66:4f:e0:7f:33:a3:4b:aa:57:dd:d9:
c2:c0:3b:d3:79:11:48:ae:fa:20:ef:27:09:e0:f1:
15:14:f0:67:2d:54:94:e6:f7:db:a8:b3:47:e2:e7:
46:b3:8f:db:c6:07:8d:17:8b:1b:d4:7d:48:cd:0c:
2d:85:4a:c0:76:b1:f6:12:45:7b:56:af:92:34:0b:
37:5a:c2:c1:c3:38:4f:90:f9:81:33:66:80:a2:7f:
98:44:8f:29:9b:79:84:6c:21:bd:46:93:36:da:2c:
84:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:80:79:98:62:40:E3:7A:FD:B0:74:3C:C2:E1:F1:03:96:FB:A4:36
X509v3 Authority Key Identifier:
keyid:B5:9B:65:4B:42:83:3D:36:68:8E:37:9A:92:1B:EB:AE:CC:30:77:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZtlS0KDPTZojjeakhvrrswwd2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:53:d7:16:a9:64:71:15:db:79:75:54:7b:58:d2:f3:c9:c7:
10:7c:47:e0:64:d9:70:f4:9a:2f:88:6f:8d:99:43:01:06:b4:
8f:b6:8c:e8:98:47:54:df:36:25:dd:63:a6:05:62:7d:42:f1:
4c:e9:73:8e:b2:bf:d2:c5:bc:9b:ca:0f:a4:e7:e5:5a:f0:15:
7d:a1:04:e7:26:ea:9e:be:ff:4b:a9:a2:a0:16:61:0e:0d:06:
d9:2d:47:b7:a2:96:83:68:ab:e0:89:e8:27:0b:00:c4:22:53:
b9:fb:9b:e2:53:37:c8:23:d2:38:e6:81:a7:5e:c9:48:30:18:
77:05:ca:82:91:27:3b:9c:dc:c8:22:bb:5c:a0:ff:be:fe:01:
9a:8c:ae:a7:ea:a7:3c:d9:41:3f:66:8a:41:93:3b:71:84:a2:
cb:2a:38:a7:c7:51:69:ef:3b:4b:7c:6e:77:d3:e1:97:c3:0e:
e7:05:ef:a8:33:98:a4:e3:37:a4:6c:65:9b:39:b8:f5:fc:a5:
7a:3f:a4:8a:21:50:a5:83:22:e7:ce:0c:3c:e9:12:95:29:fb:
5e:db:56:17:cd:dd:fc:3a:16:a7:e4:a3:0f:66:e5:be:7c:c6:
2b:ef:5d:fb:b2:45:77:dc:ca:e5:54:6f:a3:05:c5:df:8c:c8:
89:b5:12:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:43:37 2026 by rpki-client