Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json)
Hash identifier: 4gVjMdmJcvC65oS6ehg3LfzSYHF5/vbKxzFaq/rOO4k=
Subject key identifier: BA:72:BA:A0:6B:FE:6F:A2:7E:3A:C7:E8:74:59:20:74:5E:9A:33:B4
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 01A16D9223169576C218E0ED013016FAC700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
Manifest number: 1AC5
Signing time: Sat 24 Oct 2026 11:00:56 +0000
Manifest this update: Sat 24 Oct 2026 11:00:56 +0000
Manifest next update: Sun 25 Oct 2026 11:00:56 +0000
Files and hashes: 1: QXMTv56aBNAUruAXJC7IVsSmMG8.roa (hash: jId8pBbIUwFi+HQiN7AbLv5/eBeeSyed+4bqRVzluB0=)
2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: EZZ6UWUZAtXAbTYVs8oqv0PqBxRr+iw7ofQYJcM8VTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:92:23:16:95:76:c2:18:e0:ed:01:30:16:fa:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: Oct 24 11:00:56 2026 GMT
Not After : Oct 25 11:00:56 2026 GMT
Subject: CN=ba72baa06bfe6fa27e3ac7e8745920745e9a33b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:84:52:37:11:12:52:b6:fe:13:c6:08:ea:
c3:ab:b4:82:f9:5a:5b:d1:5e:03:86:3a:7f:76:7a:
3f:e2:89:b3:48:6b:26:e8:c3:69:6a:8b:02:b3:9d:
fc:0a:d7:06:af:4c:eb:6f:54:26:1e:4f:43:e4:4d:
15:be:4b:64:54:d6:7f:67:03:a2:44:ba:2d:a3:b8:
a5:c6:82:6a:03:2d:78:cb:32:05:5d:eb:91:85:5a:
91:73:7e:28:8c:cc:ce:36:22:9e:85:9c:84:c2:2d:
12:48:3c:7e:71:7e:41:be:d0:52:5f:ca:7b:a5:4b:
7d:1d:d1:de:7a:90:38:eb:d2:86:61:68:79:80:e6:
20:51:64:17:4c:66:93:11:d6:e4:ba:c0:d0:d8:b3:
cf:ad:52:db:9e:d6:2a:ff:97:d8:63:e2:92:b4:02:
d9:41:24:ad:8b:e0:5a:40:18:22:3c:e6:ef:36:ac:
c3:c1:f2:9e:4d:ae:07:22:9b:8d:7c:da:35:48:4f:
f3:79:f1:f1:c2:65:6d:78:e1:e4:2c:54:6c:2e:9b:
04:c6:46:11:ca:30:cf:0c:83:93:9b:bf:c6:d3:05:
cf:cc:fd:45:dc:86:94:ca:53:cc:06:54:64:f8:2c:
85:99:f0:15:c4:8e:8a:c8:49:53:26:35:a3:92:2a:
8f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:72:BA:A0:6B:FE:6F:A2:7E:3A:C7:E8:74:59:20:74:5E:9A:33:B4
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d7:a6:74:94:7a:93:73:1f:ea:30:49:44:8a:b7:51:1b:11:
56:bd:35:80:84:b2:a1:2d:85:1c:1b:7f:d6:0f:02:cd:c0:83:
b5:ea:34:f3:29:a7:ce:a9:8c:ea:b2:75:f4:37:47:c7:5d:84:
63:c9:06:48:8e:e0:b6:75:f2:ac:4e:fb:f7:6d:05:7b:6d:1a:
78:53:07:67:29:c8:ea:31:5d:6f:bb:ba:c0:b8:35:4b:25:7d:
3e:08:4e:94:c5:bc:f0:4c:9b:b7:83:07:76:5d:e1:f7:8c:fc:
a6:92:a8:d4:b3:ca:89:ff:8a:53:a1:15:c8:29:ea:5f:96:e6:
23:44:e7:97:fc:f2:a3:04:50:c2:5e:c0:ae:90:0b:76:f2:24:
47:ef:ba:d1:13:80:85:c2:bc:e0:97:9a:0e:6b:72:2d:2f:28:
2c:55:33:06:64:89:55:9a:5e:d9:1e:d0:91:03:ff:e3:dd:e9:
25:36:89:52:7b:5d:5c:a2:fa:74:e2:04:5e:7f:2a:1e:8e:97:
c0:bf:a3:3c:8b:b2:41:27:2d:a1:cd:f7:63:b3:f8:8d:18:ca:
9b:83:05:0b:37:ea:e3:24:fa:bb:0b:39:c8:c2:3c:3b:04:f6:
a4:18:1b:76:1c:b5:9e:c5:d5:b6:b8:79:36:50:dc:eb:db:a6:
31:84:07:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:47:57 2026 by rpki-client