Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
File: tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft (raw, json)
Hash identifier: Y0yZGk3sb4x+gXCmZz9iOBZ/wpHOUowv1T8PEHa+riQ=
Subject key identifier: B8:43:90:22:47:A0:9C:EC:50:39:F0:45:D4:6C:D8:8C:7F:6B:CC:43
Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
Certificate issuer: /CN=b573d2dda93e420409163da59e7414ee91a2eef2
Certificate serial: 01A08A8C635BA64BE0E193771A2B164C20AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
Manifest number: 04E5
Signing time: Thu 10 Sep 2026 09:00:51 +0000
Manifest this update: Thu 10 Sep 2026 09:00:51 +0000
Manifest next update: Fri 11 Sep 2026 09:00:51 +0000
Files and hashes: 1: 0mP1ztpahebUSVqYXstfQVo6lU8.roa (hash: ROTZ3HoBIhGjMRa1VghM4xscpCElB4RFAaHFDBzcBcc=)
2: tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl (hash: 8b+5PUwpbXFxS/GCx48rqfUo46PLgzY7i9HmxGUgETA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:63:5b:a6:4b:e0:e1:93:77:1a:2b:16:4c:20:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2
Validity
Not Before: Sep 10 09:00:51 2026 GMT
Not After : Sep 11 09:00:51 2026 GMT
Subject: CN=b843902247a09cec5039f045d46cd88c7f6bcc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c2:84:cf:3d:d6:1d:0a:22:36:e9:86:c9:b5:
5e:f2:05:62:fd:2b:c2:94:4b:5f:73:07:54:64:7b:
b8:67:53:7d:81:74:de:34:da:73:7b:2e:f3:83:c3:
15:e1:d4:dc:0c:d8:c7:31:5a:d3:98:b2:c7:bf:54:
6b:48:9f:ec:fe:05:58:31:32:73:f0:cd:14:5b:14:
10:a3:30:3d:90:2e:69:1a:2e:3b:67:31:ab:25:22:
c3:0d:a6:c8:d5:8a:0c:15:df:dc:b1:25:a4:c4:7c:
1b:7a:2c:77:c4:34:8c:a4:a6:fb:2c:28:53:c2:64:
e8:98:81:64:51:ef:8a:db:e9:54:73:db:65:e5:80:
09:eb:9d:62:b4:f0:ce:30:2c:e1:79:c2:10:a2:62:
13:6f:cd:d4:16:62:a2:72:b6:97:01:d7:2b:8a:42:
65:5b:8d:43:08:33:21:9f:4b:49:0b:ee:2f:b0:ff:
71:a0:8d:fd:c8:b1:67:dd:92:bb:3e:e8:55:76:4a:
34:d7:3f:93:15:d4:ae:f6:cf:14:2c:dd:71:35:8e:
ff:68:74:2f:23:52:31:cb:29:4c:ba:0f:d6:ff:ab:
1c:e4:d3:aa:65:71:cf:9b:0a:4c:16:2c:01:78:32:
25:2e:70:e7:83:cf:ab:3f:f7:05:db:4d:99:42:3a:
50:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:43:90:22:47:A0:9C:EC:50:39:F0:45:D4:6C:D8:8C:7F:6B:CC:43
X509v3 Authority Key Identifier:
keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f0:59:09:0e:ca:eb:85:17:22:cf:f6:72:db:e1:42:6d:7a:
53:fb:d4:dc:d1:5d:39:70:b5:05:eb:4a:34:57:4e:13:78:85:
60:b2:14:50:b2:e0:9f:ca:e3:b0:89:e5:e1:88:e2:04:0d:c0:
bc:5f:45:03:52:6c:1f:0e:67:66:ee:7b:04:d3:b1:a4:d2:98:
a6:98:c1:d1:47:90:87:19:64:5a:20:8d:c8:a7:21:ad:aa:2f:
8f:32:fc:29:15:ff:fe:41:fe:65:7d:52:b5:2e:9c:d1:ad:b6:
22:0c:16:37:fa:82:17:53:06:3c:15:d2:dc:39:96:e9:bc:37:
d0:6e:65:eb:46:76:f5:33:99:ac:47:93:3a:11:19:8c:59:d5:
a0:20:69:7a:59:d6:d1:4b:98:0b:7e:eb:5a:93:7d:90:51:f9:
a7:8f:28:70:0e:59:d4:a2:62:68:b1:b0:83:20:c8:69:2b:2d:
ec:d9:bf:dc:c6:c7:c2:88:7a:13:b6:e0:ff:6c:08:3b:9f:a7:
f1:f7:63:9a:31:06:3a:9d:4d:b2:97:89:62:cc:2d:37:da:63:
54:dc:30:13:55:6f:c1:cd:42:f7:1c:67:cf:44:fc:82:59:5a:
a0:0e:28:52:4f:f1:be:59:eb:07:74:09:52:28:af:59:95:79:
53:10:ae:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:18:20 2026 by rpki-client