Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: d+EidYlCXWxolyfaVoPrK5Rjl1t4Nqcc+eYP66BLCbA=
Subject key identifier: 3A:44:56:1D:BB:2F:94:C6:2D:11:D6:7A:7C:13:20:CB:BE:A1:85:83
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 01A18186FEB1A80D566509C5D4EB27342280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 08:01:10 +0000
Manifest this update: Wed 28 Oct 2026 08:01:10 +0000
Manifest next update: Thu 29 Oct 2026 08:01:10 +0000
Files and hashes: 1: 1-XW1Sz2PaZ2CH23FH35lEDI1Dvg.roa (hash: OwzM/XrJoESuDpIjRWGFQ9kHnBpSBVpQxsgx+bma9vw=)
2: t8HbGCUUFDZ79HOoIDzniW_5CjE.roa (hash: bURUeHYTHQjo9pWgWM8FHgpTvl8hZ3bV5mZnZQ6g4Cs=)
3: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: pZncp2OqzPQhQHaw0MH0U6AqXwmNgSjj8TfFPJMOB68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:86:fe:b1:a8:0d:56:65:09:c5:d4:eb:27:34:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Oct 28 08:01:10 2026 GMT
Not After : Oct 29 08:01:10 2026 GMT
Subject: CN=3a44561dbb2f94c62d11d67a7c1320cbbea18583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:8b:7d:2a:05:01:52:d8:8b:66:2a:f5:4f:
82:c4:87:7b:df:68:c0:07:66:62:b7:78:bb:d9:eb:
3d:1f:24:35:a2:57:08:bf:9c:09:23:c2:34:ae:cb:
89:b9:a9:c7:dd:13:67:e0:ba:be:ff:f8:27:09:3a:
75:0d:a9:e7:17:76:73:1c:52:40:9d:d4:fc:e1:14:
3c:25:22:9b:c9:b4:07:2b:b3:b2:ae:b2:9d:7e:2f:
8a:54:79:bd:31:09:9f:a2:25:50:05:08:ee:f7:67:
ad:6b:c3:00:62:96:d0:60:52:df:3e:29:0c:33:fd:
72:33:47:8b:46:5b:dc:34:97:31:b2:4a:d4:ea:ff:
a7:b9:35:e5:dc:07:11:55:34:13:d2:3e:7f:38:e5:
df:e0:ed:d1:e4:9b:f5:7a:5d:dc:10:5b:63:81:67:
d7:f3:b1:85:28:8a:c1:2f:2b:15:1c:5e:31:41:2c:
2e:93:a0:ad:56:90:b6:41:f2:dc:34:47:6f:be:75:
11:4f:3c:37:2a:24:50:69:03:57:07:59:81:1a:10:
fa:e1:22:1f:3c:88:0b:1d:df:f9:89:00:fc:87:ad:
ed:2a:7c:66:41:b4:ce:96:de:5a:dc:5d:47:c9:2c:
12:f5:8f:e8:0e:9c:55:cc:41:eb:75:cd:ac:d1:f0:
66:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:44:56:1D:BB:2F:94:C6:2D:11:D6:7A:7C:13:20:CB:BE:A1:85:83
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:14:83:bf:b9:bf:c6:3a:f1:44:c2:ee:3b:97:47:45:d2:dd:
c0:d8:cb:f9:22:fc:df:51:ec:f9:99:19:6b:e4:0f:82:e3:61:
0b:f8:62:5f:81:3f:d6:25:7b:8f:de:54:28:cd:6e:c2:64:f6:
58:bc:0b:89:62:d3:46:5e:09:c2:38:a2:63:0b:0e:74:d6:b0:
35:da:68:5c:b7:81:cf:8b:cd:63:ae:48:fd:96:6d:99:93:24:
a8:cb:66:57:0b:80:59:17:a4:ac:01:3f:68:22:bb:0f:ac:49:
ea:26:20:8d:da:6c:9a:9b:e0:c5:5a:79:16:65:ae:6f:e9:5b:
1c:52:ce:26:bc:0b:eb:93:35:ee:41:04:81:5b:19:73:ee:59:
99:63:3b:d2:a9:42:74:70:3c:90:d0:c8:82:ed:36:01:57:e9:
29:32:a3:0b:80:55:ff:43:3e:c1:c4:e0:0c:6e:31:13:c3:a1:
5c:46:fd:d7:62:71:21:a7:14:4e:40:d3:e8:8c:11:d3:12:a5:
7b:25:fa:c3:d3:9f:f5:45:68:0d:f4:6d:fd:60:a2:f5:f3:1b:
ce:d2:d5:7d:cb:25:45:e7:7e:3c:0f:a4:76:cf:c2:8a:2b:a2:
e8:7f:d6:8a:9a:ab:00:42:16:53:82:fe:e3:f6:89:a5:c5:db:
dc:10:91:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:15:53 2026 by rpki-client