Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier: a665tDOl2AN7AD8nIaxc0s7jobaxvJKeKG0QgvxIV1Y=
Subject key identifier: D0:D6:FB:DE:C1:44:0B:A0:75:43:67:DC:55:DC:C6:63:0E:F0:E3:50
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial: 01A17AE002707379272393D55E9AB9ABF9A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number: 135A
Signing time: Tue 27 Oct 2026 01:01:03 +0000
Manifest this update: Tue 27 Oct 2026 01:01:03 +0000
Manifest next update: Wed 28 Oct 2026 01:01:03 +0000
Files and hashes: 1: DXKA0kXE0N5ZtPOR2Oy4LAcB_4A.roa (hash: Sj3LYG5kwveQsf1vohBBwmgJI5eBDcD/U3wifQsq2hI=)
2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: tgictdM+R3UYMCLVe0oUg/Y7IdtAJ3bvM95wC/Xcqqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:e0:02:70:73:79:27:23:93:d5:5e:9a:b9:ab:f9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Validity
Not Before: Oct 27 01:01:03 2026 GMT
Not After : Oct 28 01:01:03 2026 GMT
Subject: CN=d0d6fbdec1440ba0754367dc55dcc6630ef0e350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:df:6c:ad:a6:2b:d3:af:b3:c3:0f:4f:92:af:
0c:32:6a:36:a1:ae:75:43:de:87:ae:5e:71:c2:ab:
47:e6:b3:6a:86:53:cd:f6:6f:33:ab:04:22:5b:da:
ee:c3:fc:f5:17:ee:b8:49:77:7f:f3:0e:3c:30:86:
58:e9:8e:fa:d3:af:0e:f5:94:2b:41:3d:76:53:9f:
30:91:6a:44:a7:6b:5f:01:5f:a8:5d:31:38:7c:f6:
4e:25:f7:6a:05:da:1b:ad:89:67:1d:a6:82:17:bf:
66:c8:23:3b:56:fe:ac:22:74:19:7b:b3:cb:1f:ff:
e1:af:92:df:ff:2d:7d:61:7b:57:ed:98:73:e7:05:
e9:c9:8e:49:1b:bd:0b:87:27:f9:9d:8c:53:89:8e:
53:aa:1c:4e:58:76:58:3a:19:2b:e7:83:07:64:d0:
e6:7f:57:04:cc:91:e6:01:96:a3:3e:f8:a8:09:01:
17:84:7c:64:35:81:da:9c:54:3b:53:23:6f:a2:ea:
86:93:5f:67:c2:59:4a:95:16:a3:1f:b0:dd:13:ef:
6c:8a:24:24:97:61:77:92:be:19:b9:87:65:49:8b:
88:95:cd:c6:ff:f9:5e:f9:68:c3:9b:9d:72:24:27:
a4:47:b2:3b:98:e2:45:e7:ac:25:6c:d8:17:4d:0b:
84:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D6:FB:DE:C1:44:0B:A0:75:43:67:DC:55:DC:C6:63:0E:F0:E3:50
X509v3 Authority Key Identifier:
keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:09:98:ec:1d:3b:37:99:11:b6:2b:39:2e:94:c8:bf:9e:45:
bd:61:19:2f:dc:1f:fc:20:ca:d4:e4:07:0a:4e:21:35:44:c1:
d9:4c:8c:f5:af:d5:1f:ea:cf:98:91:8d:34:93:f7:84:5c:7c:
ee:a8:d7:3a:72:91:15:fb:8f:31:66:73:7f:c5:fb:8b:2e:02:
fa:c7:94:46:da:88:75:b0:12:99:99:2b:fa:9b:73:ca:0e:db:
a3:52:7c:78:d9:64:41:08:9d:74:81:cc:bc:94:e8:74:d4:64:
a4:a8:5f:5b:99:a8:22:f5:93:a2:66:6a:0b:d7:cd:20:7d:38:
ff:ec:84:40:90:db:c5:b2:3c:e9:f2:83:21:e0:30:5a:e2:3d:
b2:84:e5:ea:f6:b4:86:9d:98:88:9f:6c:c4:1a:43:f5:19:fe:
7d:7e:78:3d:c0:c3:ad:2f:8b:e3:13:38:f9:bc:a3:c5:8b:b1:
0b:37:9b:f7:c9:7f:f5:9d:88:24:1f:81:5a:99:67:59:c3:8e:
9d:f4:76:ca:9e:c2:13:0a:8c:37:d5:36:9a:43:5f:b0:da:c0:
92:4c:86:f8:63:30:ce:f3:2c:87:6c:f1:a3:a6:81:7c:16:f5:
1e:d1:47:32:36:d9:88:18:ee:74:0a:3e:8c:77:bc:15:88:57:
1a:5c:45:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:27:53 2026 by rpki-client