Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier: gF0dZ5jxHxxlm0/UNa/ITlN1+1ufhFn/W5/0kLBqs7U=
Subject key identifier: 9B:5E:2F:93:7A:6C:56:2C:13:00:37:61:3D:F3:2E:CD:5F:CD:C4:E0
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial: 01A115CF052D2AE1011D0E570E1F46F7FC61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number: 1A90
Signing time: Wed 07 Oct 2026 10:00:51 +0000
Manifest this update: Wed 07 Oct 2026 10:00:51 +0000
Manifest next update: Thu 08 Oct 2026 10:00:51 +0000
Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: KqMwzCRAitW2jjF0HbN0yev1uX4pRg3DZJoyFFeSAhI=)
2: owMZq8FjMrGcWydVPo2XzsNX_wE.roa (hash: oerV8Rk8gelATCf/K/1z5Pi6X6k6wK997b4CHySJpco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:cf:05:2d:2a:e1:01:1d:0e:57:0e:1f:46:f7:fc:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Validity
Not Before: Oct 7 10:00:51 2026 GMT
Not After : Oct 8 10:00:51 2026 GMT
Subject: CN=9b5e2f937a6c562c130037613df32ecd5fcdc4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:ea:2d:fe:c6:10:88:70:25:b2:f2:01:c4:
c1:b7:e5:b2:c9:d6:2d:7e:2e:39:e1:ce:ed:03:23:
24:b4:c0:cf:3d:86:70:aa:8c:62:4a:83:35:69:03:
c0:1c:eb:41:2b:dd:d3:77:5e:16:bf:44:09:77:f5:
c3:f0:cd:67:e1:59:1b:2d:be:f6:b2:ab:c9:4e:4b:
15:25:b1:18:99:3c:e1:10:34:50:3d:11:7f:ad:a7:
db:b8:90:ec:96:3c:19:5e:09:e3:a4:78:6c:73:4c:
c5:a7:ad:82:96:84:3d:f0:6c:d7:32:7a:73:10:14:
4d:61:ab:57:5c:ca:53:a5:dc:22:a3:49:c7:7d:34:
5d:67:f4:ff:62:f7:4a:84:08:23:aa:e8:44:b1:0f:
65:80:c4:98:08:4a:60:26:62:bb:52:f1:00:fc:d6:
38:84:45:cb:6d:e1:d9:b9:d0:89:7e:63:35:05:38:
c2:cb:0c:df:e9:e2:57:97:59:ad:9d:66:d4:83:1a:
c4:99:ef:82:6c:80:c9:d3:60:25:0a:e8:9b:2c:c6:
ff:9e:38:91:ef:a7:c4:f0:e4:0e:20:8a:b7:a7:5b:
07:8c:84:08:74:52:66:b3:54:8d:cf:d7:0d:fb:8f:
04:7a:40:b2:ce:7b:25:a7:ad:57:01:20:da:23:f9:
b4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5E:2F:93:7A:6C:56:2C:13:00:37:61:3D:F3:2E:CD:5F:CD:C4:E0
X509v3 Authority Key Identifier:
keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:2e:2e:ac:99:9f:81:cc:c3:c2:01:05:1a:08:62:65:f3:50:
73:60:b5:13:6a:0a:a3:4e:ea:34:f0:43:3a:a7:0d:1b:87:57:
a0:59:5b:e3:c7:4a:cb:82:53:b7:37:0f:03:1d:0a:cb:e5:f4:
1b:a6:72:59:1a:62:68:34:97:08:6a:13:16:7f:3d:35:69:ee:
21:d6:fe:84:2f:79:97:80:18:33:97:8c:da:8a:73:cc:22:68:
f7:55:4f:f6:f1:d7:ca:81:5e:fc:9b:c7:14:c7:45:a1:35:29:
55:47:b5:67:68:95:da:1e:8d:25:25:90:20:c4:02:98:a8:fe:
9c:d4:67:49:1e:1b:25:7b:e1:d0:a9:47:88:dc:3d:ec:ed:a8:
5e:f2:b5:e7:63:26:c3:1e:ee:92:25:d3:d4:00:b4:b4:44:21:
73:ca:15:66:3e:ac:fd:53:cc:b3:66:80:38:31:61:f4:83:85:
eb:be:5c:00:84:df:5b:e2:b3:f1:fc:08:84:49:07:15:84:07:
d8:73:39:f7:72:cf:bf:df:f2:ac:db:5e:c9:3f:62:ab:61:12:
5e:2c:a3:98:b1:3d:27:e3:30:7b:31:59:ef:bf:e1:ba:62:42:
f0:03:a5:eb:44:c9:66:f8:44:f2:15:9a:c7:2e:9d:87:3c:c5:
16:83:6b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 21:30:04 2026 by rpki-client