Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
File: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft (raw, json)
Hash identifier: kLDJNU96evFOwuaxd1mN0kf30UPw4DfNeCCNuo5zsvk=
Subject key identifier: 0F:64:ED:70:F4:BE:6C:0F:48:F7:D3:D3:98:22:D8:CC:97:9C:82:DD
Authority key identifier: B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
Certificate issuer: /CN=b48184549e12e9934bffb7615bca3d0c25681360
Certificate serial: 01A14E3E0542BBDD6EF9D949784DD23D37B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
Manifest number: 1AAE
Signing time: Sun 18 Oct 2026 09:00:49 +0000
Manifest this update: Sun 18 Oct 2026 09:00:49 +0000
Manifest next update: Mon 19 Oct 2026 09:00:49 +0000
Files and hashes: 1: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl (hash: U8y3h9JAeAXmD/mvT8sTWCCXFOJ3GEu69xxqmc63hu4=)
2: tuDCv4lvmfDzJRQ3OOYakiJXpLk.roa (hash: B9WwSI4TdVDoQmekvK0lWtI32JXbnkCFS/fzwW4JyBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:3e:05:42:bb:dd:6e:f9:d9:49:78:4d:d2:3d:37:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48184549e12e9934bffb7615bca3d0c25681360
Validity
Not Before: Oct 18 09:00:49 2026 GMT
Not After : Oct 19 09:00:49 2026 GMT
Subject: CN=0f64ed70f4be6c0f48f7d3d39822d8cc979c82dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:89:1b:6f:1f:e6:60:76:33:a6:90:3d:90:92:
b9:72:c4:0b:ae:ae:32:4d:b8:08:1f:71:91:9a:a5:
91:41:e0:5f:d3:05:84:27:f5:b2:16:ca:33:eb:d8:
4e:e2:bc:4c:ba:d0:4e:46:a9:bd:fe:0b:3f:b1:cf:
6c:dc:7f:b9:fb:b7:ce:89:00:f1:f3:d7:0d:02:a5:
bd:7f:6a:ec:ec:09:68:4c:b1:9a:56:4b:30:42:2f:
bc:50:05:78:19:0d:fe:aa:95:36:d4:43:b3:db:32:
9c:0f:5e:a3:29:38:c1:23:e9:84:1b:8f:42:3c:0f:
c2:a1:22:00:48:05:a3:74:32:00:46:6a:08:36:ae:
19:64:3d:c4:3d:17:aa:f4:03:ee:50:f2:34:89:c5:
17:91:f4:93:37:ba:cf:14:2e:fa:7b:0a:61:6f:3d:
e3:56:66:42:07:50:48:a1:e9:63:11:49:b2:e7:8e:
5e:60:b0:12:23:ea:bd:8a:73:b6:57:8a:f6:fc:fc:
7c:8b:99:ee:21:d3:36:c0:c0:18:82:26:ea:69:12:
de:42:f4:0e:74:ed:4b:35:49:3a:32:d0:61:66:8f:
74:40:7c:c7:76:f6:f3:bf:38:f7:0f:5c:7a:84:73:
0f:68:d7:50:e5:0f:3c:40:c4:09:9e:5c:a8:67:3e:
7c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:64:ED:70:F4:BE:6C:0F:48:F7:D3:D3:98:22:D8:CC:97:9C:82:DD
X509v3 Authority Key Identifier:
keyid:B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:82:54:55:a8:48:1d:e4:0c:4b:02:fb:09:a9:47:8d:ff:76:
4f:64:aa:59:d6:a5:59:97:b1:bb:a9:0b:ea:5c:e8:e4:a1:25:
d9:6b:26:dd:b7:18:5d:17:6f:bf:2d:7d:bf:c4:8d:28:a7:6e:
a3:cc:0a:a8:02:82:00:4c:f1:85:71:44:73:13:6e:6a:d3:d3:
41:35:e4:00:9c:96:98:aa:e0:a5:48:9b:c0:5f:fa:fc:b9:81:
57:ae:ef:85:f6:c0:44:08:e3:87:8e:a5:11:b9:14:92:a2:fe:
46:d2:f1:ae:59:0a:12:3a:01:e8:e8:eb:6f:db:e0:40:68:d0:
f0:7a:98:ab:4d:e4:de:40:88:7a:2e:6a:cb:f5:7a:40:ed:90:
23:09:0a:78:55:82:be:28:58:79:2b:71:40:9b:0c:1d:c1:31:
e5:ef:81:23:09:c7:7a:62:a1:bf:2b:d1:56:c1:82:36:04:1b:
4a:39:85:5d:b6:21:74:23:f4:47:8f:67:1f:d2:42:63:8d:bb:
19:90:e9:fd:64:3f:e0:c6:41:e3:70:14:94:52:97:ab:b6:16:
fb:40:93:45:c0:f0:94:43:64:25:84:02:fb:de:fc:ee:79:f5:
69:62:71:94:79:11:f6:f9:a8:55:a2:0c:0c:2a:db:8c:ba:fc:
32:03:66:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:42:09 2026 by rpki-client