Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
File: tI8GPSnpEPAzvstlbouZAfaeyXQ.mft (raw, json)
Hash identifier: CP5nXH+N+TQdLs1q1x2vaPZlANbYC2u4YOPmWRfDKY0=
Subject key identifier: C9:2A:7C:D2:C0:AA:72:B8:61:02:29:04:33:7B:B6:A5:68:9B:6D:C2
Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974
Certificate serial: 01A12165467B6787D402AB957263CEA47F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
Manifest number: 1394
Signing time: Fri 09 Oct 2026 16:00:47 +0000
Manifest this update: Fri 09 Oct 2026 16:00:47 +0000
Manifest next update: Sat 10 Oct 2026 16:00:47 +0000
Files and hashes: 1: YrqYNM1Pym45hQFacw7cbC8M_eA.roa (hash: o7i0wNONs0dKHmOQelWnN9IgkyF6F7BCOkRiYH+yl44=)
2: oxlX37hwRfJw6rYvD_DlOds6oAM.roa (hash: NBmTSUZkwjvyNiisqMltw+Cq5Ss6K9JzeUmdp5uxYs4=)
3: tI8GPSnpEPAzvstlbouZAfaeyXQ.crl (hash: SGMNyKvg/lFqCby8IqlrGznLyJRPiCqeG99e05Ffqdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:65:46:7b:67:87:d4:02:ab:95:72:63:ce:a4:7f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974
Validity
Not Before: Oct 9 16:00:47 2026 GMT
Not After : Oct 10 16:00:47 2026 GMT
Subject: CN=c92a7cd2c0aa72b861022904337bb6a5689b6dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:cd:48:c8:c6:9f:57:8e:58:b1:4a:5a:1b:
d7:83:40:ea:88:c6:05:fe:98:a4:83:86:d1:49:1c:
f9:13:6f:76:96:93:6f:db:32:10:df:fb:61:e8:5c:
ca:11:25:75:fc:90:78:3c:c7:c0:0c:15:1d:35:ab:
69:36:d4:c9:d3:8e:8f:76:e0:d9:b1:0f:e4:d6:10:
c8:b5:b6:29:ad:3c:d3:38:61:91:41:ac:35:ba:d9:
28:9a:7e:cf:ff:f0:22:7c:6b:70:37:39:1b:52:51:
ca:4d:8c:e0:c4:8d:e6:2a:08:c5:68:7f:69:47:db:
f7:85:b3:60:3d:57:a8:bc:64:ad:7f:23:09:44:5a:
e8:6e:1a:18:c9:51:cc:c1:8f:f3:df:1a:2e:29:b6:
04:ee:f7:ff:bd:64:11:78:27:5f:15:f8:a6:11:98:
8d:1a:c2:86:a0:a3:94:11:67:a0:49:ce:2f:ed:98:
8f:e6:7e:5e:b8:87:fb:de:78:64:f7:cb:4e:1c:d6:
1a:8a:ca:f0:99:52:f3:75:ed:2e:91:e9:ec:c5:11:
49:73:a4:af:0f:2f:0e:01:db:63:19:c8:01:2f:bd:
de:98:64:89:96:cd:98:c5:5d:ea:dd:1a:72:18:c4:
ca:9a:4e:dd:c3:67:80:63:02:9d:89:1c:32:fe:7b:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2A:7C:D2:C0:AA:72:B8:61:02:29:04:33:7B:B6:A5:68:9B:6D:C2
X509v3 Authority Key Identifier:
keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:fb:48:82:2e:41:94:e2:eb:99:72:48:a8:0a:85:b8:c5:59:
9d:0b:c6:bd:75:b7:ca:1a:85:56:6b:a2:c6:90:e3:45:8b:75:
e4:d4:8f:44:ff:34:c3:d1:7e:77:de:98:52:7e:1b:d9:db:1a:
98:82:4c:15:ce:28:09:d3:5a:29:13:40:67:2e:99:26:af:f1:
10:15:58:dc:35:e3:b9:1f:ab:03:08:c1:41:8a:c6:ae:f0:2a:
1f:19:21:eb:47:c1:4b:3c:80:86:67:e2:2f:b5:b9:fd:63:59:
6d:52:df:0f:99:ca:61:c2:de:a7:1b:10:28:00:39:d9:13:aa:
9d:35:86:60:cf:3e:06:0b:0f:18:ca:ce:28:be:c1:29:88:71:
48:9b:d8:14:c0:8d:73:0f:c5:7f:af:d9:4a:e5:a6:58:89:48:
8e:1b:85:1f:27:c8:77:e1:c2:84:14:e0:3f:30:5a:30:2e:e7:
2f:3b:fe:fe:8a:16:f8:39:0b:3d:c0:28:13:f8:44:56:b6:df:
52:c3:f6:b5:68:cc:fe:c4:c3:45:a1:4d:47:79:27:47:fa:8d:
72:2d:eb:77:3a:59:f9:2a:97:c8:36:a6:65:4f:3a:f4:06:6e:
cf:0d:68:92:d9:5e:d1:3e:7c:a7:87:ee:e2:2d:ed:3b:75:64:
79:d1:81:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:11:35 2026 by rpki-client