Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
File: tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json)
Hash identifier: 3Nz5+4cbnmxHgiEMtwQKxUuKrPgbfb8rAqbgIsA1L9o=
Subject key identifier: 65:E5:D8:7D:64:CF:AB:AF:F7:3D:9E:E1:27:4D:46:A4:FE:35:BB:C8
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial: 01A13D139C548195C252771F13636987039C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 01:00:57 +0000
Manifest this update: Thu 15 Oct 2026 01:00:57 +0000
Manifest next update: Fri 16 Oct 2026 01:00:57 +0000
Files and hashes: 1: 1-GyqlA5KmcLfrL7pM3klE299nlw.roa (hash: J/BXL3XYbhHb/gfys6Z72uUSQjUFONh9EZ4ff4040ZQ=)
2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: rx72hdXbfGxvQNboRatXOAuCJcdl/QURyudCoA1YrB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:9c:54:81:95:c2:52:77:1f:13:63:69:87:03:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Validity
Not Before: Oct 15 01:00:57 2026 GMT
Not After : Oct 16 01:00:57 2026 GMT
Subject: CN=65e5d87d64cfabaff73d9ee1274d46a4fe35bbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3b:89:1f:6f:4d:29:0d:f5:34:78:53:d3:39:
3d:01:27:c3:e5:29:8e:3d:91:ce:97:db:4a:7c:3a:
c3:8b:c5:58:c4:3c:64:9c:c2:09:6e:0d:db:74:c4:
c8:73:8c:a7:1d:fd:72:46:ce:81:4a:a6:80:11:b5:
cc:36:88:3b:96:11:84:96:9a:65:fe:d9:5c:d4:70:
43:d4:5f:ad:7e:4d:60:95:34:7d:96:91:46:50:29:
de:2c:d1:0f:48:b6:11:33:be:3d:e6:b8:31:9a:9c:
14:da:ed:8d:1f:d0:e6:86:5b:3e:d7:79:e5:61:75:
23:d7:5d:3f:fe:14:ac:16:ba:92:bd:fa:21:40:1f:
04:d1:c0:13:61:be:1c:c9:51:ef:eb:d7:2f:e6:4c:
63:3d:91:04:f7:f2:fc:f7:c2:a0:e0:7c:01:68:ff:
87:17:ff:0b:25:df:e2:2d:a7:81:e5:bd:dd:9c:38:
15:ab:3a:ee:1f:92:91:11:b3:29:c1:7c:bd:4b:35:
e1:28:e8:eb:be:7b:64:2e:5f:90:34:b1:32:26:09:
fa:ca:e6:c7:e0:6d:ee:0a:ee:84:a3:90:ce:bb:ef:
11:0f:36:2e:a4:e2:25:63:73:43:f0:2d:d1:3b:13:
c9:ff:02:3b:18:e0:f0:a0:45:a8:15:94:dc:7e:ff:
ab:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E5:D8:7D:64:CF:AB:AF:F7:3D:9E:E1:27:4D:46:A4:FE:35:BB:C8
X509v3 Authority Key Identifier:
keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e1:d6:f7:71:01:09:9d:1c:96:d1:d1:50:11:02:27:6a:0f:
c8:eb:2d:57:db:41:3e:17:5e:46:ca:52:87:14:65:91:17:c8:
c9:b2:0f:30:37:30:1c:2e:5a:9a:a1:fb:68:24:e7:95:4c:db:
96:95:ba:0a:be:d2:e9:31:b1:49:40:ef:e4:e3:76:2f:3a:f9:
2e:ad:d6:23:d6:01:68:e5:c1:9d:75:c5:6a:99:65:4e:12:15:
0d:4f:3f:a8:d4:0a:2e:1e:fe:91:0e:56:a0:0a:48:a8:38:d4:
d7:8e:35:39:cd:f3:c0:86:35:4e:79:7c:08:41:9f:f9:46:38:
18:c0:6b:b1:78:2b:9f:8d:81:2a:38:6e:f7:60:53:85:e0:09:
ef:1c:f3:72:e1:b9:f8:9a:43:e1:56:4f:05:21:cf:f5:7a:41:
8f:99:b2:f2:39:42:b1:53:7e:0f:cd:9a:b2:b2:11:25:eb:a7:
96:4f:bb:5d:0b:d0:28:d9:25:fa:ad:7c:d0:76:57:3d:22:a4:
b5:ca:2f:7f:45:96:d0:ff:e4:ad:09:70:09:29:71:9d:99:a5:
3b:4a:eb:38:ab:22:9e:e7:9b:c4:74:bf:66:6d:15:69:c5:fa:
3b:a5:1f:87:f1:c4:a0:49:ae:32:6b:fc:84:67:ba:00:52:26:
2d:db:8f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:01 2026 by rpki-client