Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: LPcTAwwPfLqdaYjzJL2xBOlZQIxoLsuALOzVsRux2JI=
Subject key identifier: 0E:F5:A6:42:BD:A6:0D:71:A0:97:4B:D9:AF:2C:65:46:9E:C3:65:CC
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 01A08C43FE7E34FBB8B8E2DDE56FF13D71F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 17:01:01 +0000
Manifest this update: Thu 10 Sep 2026 17:01:01 +0000
Manifest next update: Fri 11 Sep 2026 17:01:01 +0000
Files and hashes: 1: 1-XW1Sz2PaZ2CH23FH35lEDI1Dvg.roa (hash: OwzM/XrJoESuDpIjRWGFQ9kHnBpSBVpQxsgx+bma9vw=)
2: t8HbGCUUFDZ79HOoIDzniW_5CjE.roa (hash: bURUeHYTHQjo9pWgWM8FHgpTvl8hZ3bV5mZnZQ6g4Cs=)
3: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: nEH9b2G/lGGK1WOZ884COKGBsPK3+OhFBSh0SR6BBV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:fe:7e:34:fb:b8:b8:e2:dd:e5:6f:f1:3d:71:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Sep 10 17:01:01 2026 GMT
Not After : Sep 11 17:01:01 2026 GMT
Subject: CN=0ef5a642bda60d71a0974bd9af2c65469ec365cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4f:60:a8:65:52:2e:f9:62:7f:13:82:e6:32:
31:0a:af:a5:d1:10:91:3c:af:60:5e:fe:2e:ce:11:
73:39:76:90:93:46:fb:84:10:d0:a5:6c:46:a5:15:
d3:8d:e1:18:c2:45:db:71:7a:f4:50:3d:49:c3:c1:
3a:ca:fc:98:de:a7:e1:8e:27:95:f0:9f:4d:05:2c:
9a:3b:fa:e6:40:df:ff:23:66:ab:7a:88:3b:e1:9f:
a0:33:f8:5d:3b:56:74:65:fb:eb:c1:27:05:55:17:
d3:be:00:d0:28:8f:b8:d6:94:9c:63:4b:13:ef:2c:
8d:c2:6f:f8:f3:b4:8a:58:0b:af:37:a9:49:9b:ba:
1c:16:34:4b:c6:bb:15:45:5f:97:b8:56:cb:f4:f7:
ec:58:74:62:0b:25:e2:12:f8:3c:b9:dc:d1:dd:d8:
10:83:e7:0f:db:32:d4:00:a6:a3:2c:30:09:a8:9f:
6b:86:53:27:f7:8b:09:58:ab:3d:ff:f2:ef:c8:1b:
49:16:b5:bc:05:ab:a3:a2:9e:ed:27:f3:c3:b7:d6:
0f:4f:90:3e:fc:70:32:33:74:e9:67:28:1e:b7:76:
f2:c9:71:01:f4:dc:c5:65:33:95:df:64:bd:9c:4f:
fc:ed:d5:fb:6e:32:8b:23:98:d2:2a:5b:7e:08:26:
6e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F5:A6:42:BD:A6:0D:71:A0:97:4B:D9:AF:2C:65:46:9E:C3:65:CC
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:77:08:c6:4a:d8:22:50:45:c6:39:a0:3e:26:39:a8:43:61:
74:7c:d7:bd:35:82:2b:4b:f0:cb:6a:98:9c:5b:3f:63:3e:e1:
5e:9c:54:15:c8:c1:21:c6:07:fe:21:65:dd:08:4c:cd:f8:1a:
2c:db:cc:8c:f2:ec:15:a5:5c:b6:0f:a5:ab:56:cb:c7:b8:08:
eb:75:f9:1d:d8:2a:d8:80:69:3b:d6:e9:9a:1a:9b:4b:6b:23:
da:11:e8:24:0f:71:1a:51:04:30:1f:c4:83:1f:90:bc:67:de:
ce:38:03:84:1c:64:52:66:81:50:f5:bf:68:7d:c2:f9:43:f0:
2c:0e:99:b5:6e:cd:74:75:66:60:5a:7f:2f:73:f5:c3:5d:b5:
ef:bf:0b:c4:0b:d8:f2:77:bf:fa:0c:1e:b9:b8:78:01:93:4b:
f3:cc:b8:7d:5c:bd:86:59:f6:82:7c:04:b7:95:71:cb:96:11:
32:16:5a:1d:d6:4b:e2:75:68:6d:14:62:ef:ac:af:22:ad:e5:
27:4e:ca:ef:9f:d3:c2:a1:11:d5:fc:46:4d:cf:cf:05:60:e2:
df:33:07:07:79:b7:90:2e:6f:26:d0:a5:13:d7:b8:60:39:a1:
35:4e:05:48:8a:64:37:dd:b4:07:e7:ec:5e:ea:3a:fe:03:28:
55:5d:92:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:32:27 2026 by rpki-client