Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
File: tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft (raw, json)
Hash identifier: PQWHlGaNGWy6xu7mjIpoJMDsZhXmfg+ZM3kD7qe4ndc=
Subject key identifier: 98:7D:09:13:85:5E:D4:D1:89:39:A4:C4:99:2E:DA:E9:3B:CE:1D:24
Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
Certificate issuer: /CN=b573d2dda93e420409163da59e7414ee91a2eef2
Certificate serial: 01A18977A80E057498128723116397B1D254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
Manifest number: 0569
Signing time: Thu 29 Oct 2026 21:01:22 +0000
Manifest this update: Thu 29 Oct 2026 21:01:22 +0000
Manifest next update: Fri 30 Oct 2026 21:01:22 +0000
Files and hashes: 1: 0mP1ztpahebUSVqYXstfQVo6lU8.roa (hash: ROTZ3HoBIhGjMRa1VghM4xscpCElB4RFAaHFDBzcBcc=)
2: tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl (hash: iuUlmmuixauOjGhOlwEujLasmN4m5kMhNex8V/6XNmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:77:a8:0e:05:74:98:12:87:23:11:63:97:b1:d2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2
Validity
Not Before: Oct 29 21:01:22 2026 GMT
Not After : Oct 30 21:01:22 2026 GMT
Subject: CN=987d0913855ed4d18939a4c4992edae93bce1d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:88:d1:c3:84:27:4b:52:33:bc:5e:e8:9a:b0:
84:78:14:08:b4:f6:0d:39:93:2f:2d:f2:56:9f:5a:
f5:e0:51:d0:c6:b3:f7:dc:41:df:ae:23:04:1a:89:
e2:e6:ac:df:af:4d:61:11:20:86:99:69:90:90:87:
44:f8:42:4f:a8:5c:5c:58:50:48:3d:64:b3:6c:5c:
c5:e5:af:68:42:a1:7c:10:74:aa:58:20:d8:9d:d6:
f8:6e:62:5c:d6:0c:d1:d0:47:a1:7a:0c:27:b6:f1:
26:70:aa:14:b8:79:90:50:cf:ee:a4:26:30:bd:76:
06:47:18:9b:cf:2c:28:ca:71:88:75:38:cd:f2:7d:
f6:c4:c7:98:b6:43:de:5d:03:3e:bd:bc:44:7b:20:
cf:d9:8b:83:63:2f:e0:68:28:e7:3f:b2:9f:80:2d:
a4:5f:42:41:03:2b:10:d7:aa:bc:b3:ab:8c:f4:da:
a2:e0:50:91:cb:d1:87:70:c0:b0:96:c5:80:43:b5:
39:bb:20:69:1d:82:ee:15:6f:be:41:51:44:c2:03:
dc:3f:b1:59:a5:16:00:b9:b6:7d:e5:c9:29:21:3e:
64:4e:f8:0c:cc:3b:ba:3b:59:1b:79:8b:24:82:92:
1e:b0:c2:15:78:a3:bc:0b:54:aa:ba:d2:ec:5f:d2:
11:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7D:09:13:85:5E:D4:D1:89:39:A4:C4:99:2E:DA:E9:3B:CE:1D:24
X509v3 Authority Key Identifier:
keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:82:59:00:bc:c2:02:09:17:32:22:86:ba:d0:3b:2b:dd:01:
d4:ee:27:63:87:7e:d3:2c:b7:79:70:ad:f3:37:ed:4d:f5:0d:
20:ce:81:2f:26:18:1d:02:50:4b:3f:4a:fa:81:7d:2f:30:01:
34:ca:59:ea:3d:31:ef:82:23:5a:f5:db:d8:ed:54:25:ad:79:
66:35:f8:13:ec:d2:fd:fb:bf:64:f3:37:c9:af:7e:5f:aa:f6:
67:d1:a7:e0:d5:84:59:d4:64:c9:08:36:fb:1f:8c:4f:fd:07:
b8:12:4b:ff:0a:43:f3:89:c9:92:97:e0:40:de:9f:e0:74:87:
69:1c:6d:84:a9:2e:e5:4a:33:8c:28:90:47:9b:bc:97:bc:38:
04:df:5b:d8:d2:6c:e4:df:66:11:b0:0e:78:00:38:20:f1:80:
f4:9c:46:8e:da:59:c7:52:a9:3a:68:60:4a:0f:8b:fd:f9:9c:
b2:99:90:9f:b8:5a:df:0a:eb:6a:a4:0d:ad:68:bd:6f:2d:1c:
02:06:20:9c:79:8e:39:59:7b:8a:b8:70:d4:54:de:a5:20:16:
32:41:54:1f:f8:07:ef:49:78:2b:05:b8:0a:9e:05:bb:80:66:
ba:03:79:88:b2:9a:02:9c:2a:fc:d4:93:56:38:b1:4b:b9:bb:
32:52:6c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:07:55 2026 by rpki-client