Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json)
Hash identifier: 9jAmAItMOkyZyEre7llf90Tyf7niRx+pCLqjHYWaVB4=
Subject key identifier: 1E:12:A0:BD:4B:AD:22:28:B2:88:8D:5C:B3:49:66:FE:4E:AD:99:DB
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 01A175147637362FB0189B5666E1C3080060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
Manifest number: 13D6
Signing time: Sun 25 Oct 2026 22:00:37 +0000
Manifest this update: Sun 25 Oct 2026 22:00:37 +0000
Manifest next update: Mon 26 Oct 2026 22:00:37 +0000
Files and hashes: 1: WMqwkkOCeJIiDGczokQt6OKgfpo.roa (hash: 6yCQ2yXVHO2BxnZqJR1Rvu8adOAClmHZ2J60vDEAoZw=)
2: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: HNrXtf0XCyxjfnnYB0L1a5gutD3ZzvNGCuOSpIqp398=)
3: ydyTTB3FHmlgmrUF4u_cEkdDzws.roa (hash: sm5RJb+IplkwipOY1e61+aLvM0eV38hivV05zuDbU50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:14:76:37:36:2f:b0:18:9b:56:66:e1:c3:08:00:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Oct 25 22:00:37 2026 GMT
Not After : Oct 26 22:00:37 2026 GMT
Subject: CN=1e12a0bd4bad2228b2888d5cb34966fe4ead99db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c2:9b:c5:63:fd:ca:26:9c:0a:c8:93:93:80:
8a:21:06:9f:eb:89:e4:e7:d5:bf:b8:74:19:51:cb:
53:c2:23:94:e4:38:e9:8e:c7:cd:7b:43:35:27:bc:
1e:f9:37:bc:43:27:75:22:57:8b:e6:49:88:b5:4e:
6c:74:6e:f2:ce:36:25:c7:9e:cf:f3:b1:d5:6e:64:
5b:51:13:f8:f4:9a:05:91:ab:bd:6e:96:11:f4:0b:
8d:6f:22:34:65:c0:3b:3b:4e:86:b4:48:35:d7:12:
33:db:bf:ab:25:bd:47:b1:91:71:fc:b1:8d:3f:36:
6f:f3:d4:94:33:8d:f1:26:4d:8c:f5:6b:2e:1a:c4:
c6:f0:c5:b5:9c:67:68:bb:74:1e:3d:fe:c3:ad:2d:
57:e3:f0:62:f0:e5:8d:bf:28:82:d3:00:88:0a:af:
0d:d6:54:12:d5:ec:ef:a4:4c:9a:61:cc:1d:53:a1:
b7:fd:d9:6f:dd:fe:4c:fc:98:c1:2d:f4:ef:d5:b3:
6e:8c:2b:6e:21:fb:36:4e:74:4c:04:58:d2:65:91:
21:7b:64:64:5a:d1:ba:f8:6d:3d:73:f8:92:af:8f:
f4:68:b1:ed:06:55:5c:c1:69:b7:51:8c:51:c8:60:
66:26:ff:28:25:02:f5:d4:d6:8e:4f:e3:3c:cb:dd:
20:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:12:A0:BD:4B:AD:22:28:B2:88:8D:5C:B3:49:66:FE:4E:AD:99:DB
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e1:f5:7b:96:5b:1e:bd:ed:1c:c4:7a:33:4b:a3:b7:a5:05:
f8:f4:85:73:5d:6d:59:e0:ab:2c:c5:06:07:79:dc:5d:cf:00:
89:f7:39:74:f7:29:40:76:f9:0d:ee:66:3b:b7:32:dc:6e:6d:
6b:46:43:13:18:07:61:62:35:b7:05:32:53:47:df:5e:56:43:
a0:05:fd:c7:e6:8a:9c:6d:ac:b1:24:f3:bd:c9:e4:1e:ec:c6:
3f:52:be:aa:ef:34:bc:93:29:70:72:62:34:f9:e9:eb:e0:5f:
6c:e4:b5:de:a8:c7:ad:31:11:96:be:d7:a9:17:e2:70:93:73:
73:13:61:1b:c6:96:7a:05:07:03:a2:8e:70:62:b8:30:31:0f:
6c:1a:15:1b:5b:00:68:88:cf:5c:a7:e1:1c:5e:22:f5:c3:0f:
02:3d:2c:88:3f:17:7b:07:e5:35:96:95:aa:1f:1e:18:f6:d6:
f6:5e:a5:b5:5b:7e:81:d7:9a:6f:90:4e:53:09:65:a5:3c:eb:
b3:cc:b7:fd:d1:39:0c:53:72:2a:82:31:e5:6e:5c:2a:e3:f1:
6d:d7:74:bc:01:6b:29:96:c0:b0:d7:a8:f4:8e:7c:04:5c:96:
83:2e:b3:a1:e7:ba:7a:2d:4f:55:aa:56:8c:79:9e:1a:1b:95:
e3:76:0c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:07:32 2026 by rpki-client