Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/6e50c2-c5ad-4dd5-acb7-93eb143a3fbf/1/t0FAkE6TQngaQguYXmTMNc3vy64.mft
File: t0FAkE6TQngaQguYXmTMNc3vy64.mft (raw, json)
Hash identifier: g9Bt8RmfIrIdfj/PuNno0WIR/5VUK3rLnn3DwnylUZ8=
Subject key identifier: 39:F8:62:75:29:9C:2F:42:A5:2E:74:3E:0D:C4:20:36:F4:7A:68:FD
Authority key identifier: B7:41:40:90:4E:93:42:78:1A:42:0B:98:5E:64:CC:35:CD:EF:CB:AE
Certificate issuer: /CN=b74140904e9342781a420b985e64cc35cdefcbae
Certificate serial: 01A123C1A5CCB0851A4027D442D0FEDD6C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0FAkE6TQngaQguYXmTMNc3vy64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/6e50c2-c5ad-4dd5-acb7-93eb143a3fbf/1/t0FAkE6TQngaQguYXmTMNc3vy64.mft
Manifest number: 0297
Signing time: Sat 10 Oct 2026 03:00:55 +0000
Manifest this update: Sat 10 Oct 2026 03:00:55 +0000
Manifest next update: Sun 11 Oct 2026 03:00:55 +0000
Files and hashes: 1: cJb3OglO7xZXnqgcS4IiacfQEF0.roa (hash: vl8NCITgrbY5cswSzS8XkdQGpkVi77gvR63+VLkTCM4=)
2: t0FAkE6TQngaQguYXmTMNc3vy64.crl (hash: 2ehUDs1N4+vErBtbnK+XReoABneTdwOKkztBpNQqdmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/6e50c2-c5ad-4dd5-acb7-93eb143a3fbf/1/t0FAkE6TQngaQguYXmTMNc3vy64.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/6e50c2-c5ad-4dd5-acb7-93eb143a3fbf/1/t0FAkE6TQngaQguYXmTMNc3vy64.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0FAkE6TQngaQguYXmTMNc3vy64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:c1:a5:cc:b0:85:1a:40:27:d4:42:d0:fe:dd:6c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74140904e9342781a420b985e64cc35cdefcbae
Validity
Not Before: Oct 10 03:00:55 2026 GMT
Not After : Oct 11 03:00:55 2026 GMT
Subject: CN=39f86275299c2f42a52e743e0dc42036f47a68fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cc:5c:07:c6:63:c0:b1:b5:b4:a8:38:ff:8f:
a9:89:f1:8a:5f:c4:c7:38:a3:34:aa:fb:c1:ea:b6:
50:03:85:8a:89:19:76:36:5f:f8:c9:86:49:29:87:
5a:ef:a3:27:08:2b:3c:c6:f4:35:e7:6a:65:f5:aa:
e3:06:95:2f:3a:9a:35:4b:1e:d9:e5:f1:e0:07:d1:
65:c0:10:4a:7e:21:bf:2c:41:26:e0:8c:65:b0:c4:
f6:33:b9:b4:5e:3a:21:9a:db:0e:07:3d:17:a0:82:
78:86:10:42:df:40:ca:24:76:0a:a2:44:28:46:5a:
11:f0:6e:57:36:2d:2a:bd:9f:fe:b4:d1:df:82:33:
f4:b8:84:81:ac:db:64:17:33:7a:dc:e0:7f:98:cc:
6a:43:b2:d7:95:c8:e6:14:23:7c:d9:ef:0e:9f:4d:
1a:74:02:80:c4:2f:22:02:98:bc:56:88:47:ff:40:
b2:b1:b5:ce:08:e2:46:bd:0e:a3:0a:f7:12:8a:73:
08:36:21:2e:5a:4f:97:fb:84:e0:20:f7:11:3e:c1:
3b:d0:1e:c3:2c:b8:30:9f:51:5a:30:db:24:6e:10:
bc:fb:31:63:fd:a8:38:50:cb:7b:3b:08:e5:e6:15:
31:13:f1:00:5b:d8:0a:7b:17:30:b6:6d:0a:49:7a:
70:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F8:62:75:29:9C:2F:42:A5:2E:74:3E:0D:C4:20:36:F4:7A:68:FD
X509v3 Authority Key Identifier:
keyid:B7:41:40:90:4E:93:42:78:1A:42:0B:98:5E:64:CC:35:CD:EF:CB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0FAkE6TQngaQguYXmTMNc3vy64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/6e50c2-c5ad-4dd5-acb7-93eb143a3fbf/1/t0FAkE6TQngaQguYXmTMNc3vy64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/6e50c2-c5ad-4dd5-acb7-93eb143a3fbf/1/t0FAkE6TQngaQguYXmTMNc3vy64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f3:88:16:03:ca:47:3a:2b:a1:38:24:eb:db:d2:3d:44:b2:
b2:5a:2e:3e:c3:9b:02:c9:af:a0:de:33:76:ce:ee:80:26:97:
92:f2:e5:95:0d:30:f5:f9:75:63:dd:96:93:4e:f8:21:18:44:
9b:95:db:a3:4c:39:90:79:7f:59:14:b3:58:d9:5d:a4:f5:33:
9e:6d:36:ef:4e:c5:e7:d4:39:53:41:83:87:2a:5c:78:86:12:
83:bd:97:f4:df:9d:49:c8:9a:5a:c5:07:14:c0:0c:63:0c:b6:
95:d5:39:17:2e:7a:cd:56:60:10:7f:16:88:f0:1b:4f:72:d3:
8d:d2:e2:23:65:8e:f1:cc:6b:c0:df:8a:b2:0c:d3:4e:99:97:
aa:1b:53:fd:5a:a1:83:c9:75:d1:4c:c7:f5:32:09:e6:68:c4:
f8:27:36:ca:fd:5f:3a:e6:31:5d:31:56:3d:0b:04:39:a0:b2:
10:07:bc:aa:b0:96:d4:6f:3e:44:5c:cc:d9:cc:ad:81:20:6e:
72:0b:42:44:2d:fc:d8:6c:ef:36:19:1f:d6:d2:75:b2:c6:f4:
a7:1b:3e:4a:5c:d0:78:e5:d0:76:c2:1c:f2:77:3e:39:b4:52:
e3:7b:6f:be:ea:bd:35:29:40:f9:21:f1:70:e9:1e:60:d5:de:
52:e1:26:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:16:09 2026 by rpki-client