Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
File: tOZnwFV9jneon9L2dTh4NckpkDw.mft (raw, json)
Hash identifier: mb9Bw1wUvcp6MBrpAE/vE38e468FDS0lxKC6/qUtSy8=
Subject key identifier: 09:83:CB:04:DB:90:97:AA:D3:C6:21:62:70:88:13:BE:DF:E3:0C:D8
Authority key identifier: B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C
Certificate issuer: /CN=b4e667c0557d8e77a89fd2f675387835c929903c
Certificate serial: 01A13C385108385166E4406276FCD163AD90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
Manifest number: 0308
Signing time: Wed 14 Oct 2026 21:01:26 +0000
Manifest this update: Wed 14 Oct 2026 21:01:26 +0000
Manifest next update: Thu 15 Oct 2026 21:01:26 +0000
Files and hashes: 1: iRgpkScl2E0qydvLYxmlqR43YT8.roa (hash: F9U+6PkpUBEG0XhufUjaRNeruVOGBXwm2wvsY4dTXhk=)
2: lj9BME9ANJ8XxD4qQD5tTVNccsk.asa (hash: SvpQzHiloco7sWEgcm+D+rsH9un12JiKM+fo6gxkVGQ=)
3: tOZnwFV9jneon9L2dTh4NckpkDw.crl (hash: Oe3/toSOk79PTxUjGt4JoZjkYWJGFIDwa+w2e98WuAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:38:51:08:38:51:66:e4:40:62:76:fc:d1:63:ad:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e667c0557d8e77a89fd2f675387835c929903c
Validity
Not Before: Oct 14 21:01:26 2026 GMT
Not After : Oct 15 21:01:26 2026 GMT
Subject: CN=0983cb04db9097aad3c62162708813bedfe30cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:ab:fc:1a:66:37:d4:f5:b5:6a:34:96:64:
a2:a5:d6:4e:04:2d:0a:9e:aa:d6:67:50:d1:3c:30:
2e:35:0e:f1:9b:ed:a8:be:ff:4d:c2:16:35:53:e6:
48:77:2a:fb:09:8a:c2:80:89:c8:bc:ac:39:6a:8a:
ae:9f:b1:14:17:17:1e:37:26:18:0e:91:fc:0a:7f:
81:6a:06:4a:9d:be:f5:61:45:c0:93:b9:bf:8a:8d:
3b:cc:bb:8a:46:10:a6:a4:d5:ee:ae:1e:30:f9:e8:
3b:b4:b1:e9:eb:d2:3e:25:a9:84:cf:27:60:6b:0c:
c6:a5:c8:05:a4:a1:5e:86:10:d1:c3:d9:b2:10:99:
3f:c0:85:a6:d3:d5:59:69:99:6c:cd:d2:a0:14:a3:
51:af:ee:be:6b:46:d1:94:f7:0f:a2:57:71:74:b0:
d8:07:a9:fc:0f:89:87:98:c7:f7:59:df:80:bd:ae:
77:e5:79:a1:34:17:3b:99:1c:5c:f4:d3:08:c9:9c:
25:ea:a3:39:a8:24:44:a6:7b:90:72:a5:75:60:3e:
f5:a0:6b:5c:77:a2:b2:57:21:32:3e:72:8e:d2:59:
22:ae:84:ae:94:fb:c3:6c:92:21:4d:48:94:4a:1f:
bc:16:bc:54:5c:72:b9:ed:52:97:37:a0:31:a3:d1:
45:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:83:CB:04:DB:90:97:AA:D3:C6:21:62:70:88:13:BE:DF:E3:0C:D8
X509v3 Authority Key Identifier:
keyid:B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:72:74:cc:5f:88:36:0a:af:61:b8:fb:cb:7a:55:5f:62:54:
9a:d6:84:f6:ca:0c:51:41:38:7c:8c:f4:25:05:38:ae:c3:68:
99:64:ae:5c:69:2c:39:7a:6f:76:f3:f5:6f:f8:f6:d1:fc:46:
ae:ab:47:5c:19:ae:d6:3d:3d:5e:c1:15:47:16:e5:48:11:a0:
5d:9e:01:a5:9e:aa:50:03:ac:d9:5e:25:ae:b8:38:23:72:fa:
83:65:79:95:b9:e8:32:aa:ed:9a:e4:df:a8:a8:6b:81:a6:e8:
f2:8a:66:83:3c:76:40:b9:9f:68:0b:eb:e9:1a:f3:ef:8f:3b:
41:4c:42:76:f7:6c:6d:2a:54:2b:b9:2b:f3:26:e7:a6:0a:ce:
33:47:86:3a:d4:a1:65:fc:93:40:f5:5c:f1:72:31:0f:2b:7b:
f6:61:5e:aa:3d:df:96:58:83:81:fd:7e:6e:0c:07:b3:be:d8:
14:93:6d:9b:8b:63:b8:70:a8:e6:bc:e4:c2:cf:c2:ab:1a:de:
a7:89:2d:1c:60:f2:5c:2e:48:2e:63:73:ff:e7:a3:92:ce:93:
b5:e1:68:12:9a:b2:7d:98:58:ac:e8:3d:29:17:8b:c3:8f:fb:
cc:81:87:08:9d:19:5b:9e:93:f4:a2:06:f9:e8:ce:ec:ce:e3:
da:29:6c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:55:57 2026 by rpki-client