Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
File: tm6nNZIhwbd9bMAG97ZwapqQgpk.mft (raw, json)
Hash identifier: T/HFSrYgDSlN7ounMnGNwQaA4w/U+0GaHLshp38/QzM=
Subject key identifier: 64:3C:4C:79:0A:3D:9C:EB:C3:94:51:C4:65:52:F5:0F:56:4D:A9:17
Authority key identifier: B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
Certificate issuer: /CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Certificate serial: 01A1AA4C4F7DA75AED50F8EC4D41C297C335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
Manifest number: 1AF5
Signing time: Thu 05 Nov 2026 06:01:30 +0000
Manifest this update: Thu 05 Nov 2026 06:01:30 +0000
Manifest next update: Fri 06 Nov 2026 06:01:30 +0000
Files and hashes: 1: DaFV5jzmPybSPgigFM674_TKd_I.roa (hash: RHaBsbMv1bP2SqidM9oIE8sxOfVQW0oAkbNeIVvvEAQ=)
2: tm6nNZIhwbd9bMAG97ZwapqQgpk.crl (hash: Lnamr/kCDKh8kUEVOtw5gfvBmugBce+iYoi9TUxFX40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:4c:4f:7d:a7:5a:ed:50:f8:ec:4d:41:c2:97:c3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Validity
Not Before: Nov 5 06:01:30 2026 GMT
Not After : Nov 6 06:01:30 2026 GMT
Subject: CN=643c4c790a3d9cebc39451c46552f50f564da917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:8f:44:56:3d:72:38:8b:78:fa:d3:37:4b:
1e:5f:23:3a:b3:4f:bd:e9:a3:5c:98:92:d1:27:30:
c6:8a:93:34:24:28:ac:af:5b:35:00:b0:8b:b7:a0:
88:14:01:68:f5:2d:14:da:ef:46:95:ff:c5:a6:c4:
30:54:aa:fa:09:bc:26:ea:8a:66:c8:e2:88:ab:d7:
7e:b3:d2:b3:f8:9f:c3:70:72:81:cb:22:02:61:b1:
bd:82:07:23:76:17:b2:4f:a4:f5:53:e8:e0:04:30:
93:7d:09:8a:8e:ce:3c:59:ae:71:1d:39:6c:1b:3e:
ea:de:74:59:c0:1d:67:ee:3a:cc:94:76:25:af:32:
81:d3:ae:74:70:f0:13:52:25:63:78:9b:a0:1a:c1:
92:49:f8:5f:9c:de:a0:1b:b3:3f:a2:3e:f8:70:3e:
f0:8a:d1:bb:c8:03:23:47:3f:98:61:d9:4e:bf:8b:
13:13:1e:fe:1c:0d:88:61:2a:52:d2:fb:3c:21:cb:
32:fe:2d:df:ad:a4:b8:fc:16:c8:13:cf:84:1d:8c:
ff:48:e0:67:4f:cf:c1:60:11:bd:c2:a5:64:d8:90:
71:fa:8b:3a:13:29:76:1d:e6:30:d4:5f:34:17:26:
0e:6b:12:85:01:d5:b6:fa:23:6f:78:b5:00:e5:22:
0b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3C:4C:79:0A:3D:9C:EB:C3:94:51:C4:65:52:F5:0F:56:4D:A9:17
X509v3 Authority Key Identifier:
keyid:B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:34:9f:1a:cb:16:bf:a0:99:09:c5:de:ae:52:f4:3f:fb:c9:
b0:c9:1a:95:91:f4:0e:01:b2:50:9d:85:56:28:a5:6e:5c:a7:
f9:68:83:1f:f9:6e:13:9a:e3:2b:d3:0b:4e:04:b6:c7:f4:91:
87:83:81:2d:67:01:a2:3f:23:af:81:d5:b9:b1:92:e7:f5:c8:
2a:99:99:8a:8e:39:37:e7:a9:0d:32:f1:d4:f4:a5:47:f2:d3:
cf:e5:33:58:a5:01:7c:68:89:51:c3:5f:c0:1b:c3:72:8e:a8:
28:12:af:c8:f2:8f:1a:36:dc:54:0c:ee:68:52:09:17:23:5a:
29:80:21:8c:e6:48:94:d3:d5:d3:23:fd:66:e3:7f:28:8c:6a:
26:ff:54:b9:cb:bb:f0:20:a3:a5:68:3d:15:1e:79:c0:f4:94:
fc:ec:c9:2d:7f:e5:22:ae:3c:b9:f5:e9:9a:b3:81:04:9c:7e:
f9:87:f9:f5:5c:b6:25:57:67:14:f2:41:a1:31:cd:66:2f:40:
5e:d2:75:c5:57:c5:d9:61:a1:c5:41:b5:a6:46:2f:bb:cb:16:
03:02:9d:a0:21:e5:ca:59:d0:be:0e:57:1b:49:e3:fb:40:da:
1c:9e:d9:56:fe:15:ac:f3:37:59:29:98:7b:c5:ea:c8:71:76:
2d:00:e8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:28:27 2026 by rpki-client