Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
File: tK4oip3bDvUKKUs8rpY-FHycfck.mft (raw, json)
Hash identifier: 6JaWKWYGRqBuNkFe8L6a0yk/9055Hg13zed1HT3vkh8=
Subject key identifier: 9E:92:81:8B:D6:8D:09:FE:BD:58:19:7B:2C:89:46:50:D8:6B:72:6F
Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
Certificate issuer: /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Certificate serial: 01A0ED78496A795CFAA9AF77F30201208C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
Manifest number: 1A7B
Signing time: Tue 29 Sep 2026 14:01:18 +0000
Manifest this update: Tue 29 Sep 2026 14:01:18 +0000
Manifest next update: Wed 30 Sep 2026 14:01:18 +0000
Files and hashes: 1: TWgMkDcy_HR5XMg6rXv7Ax4ipk8.roa (hash: H/mEg4ne87MR+9DERthNodFmmxJcKV/plF/1hfT1FKo=)
2: tK4oip3bDvUKKUs8rpY-FHycfck.crl (hash: fR92BiMQhUlLtI/MZhKrpWU7aHCy4q0+PKZ8oglYI5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:78:49:6a:79:5c:fa:a9:af:77:f3:02:01:20:8c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Validity
Not Before: Sep 29 14:01:18 2026 GMT
Not After : Sep 30 14:01:18 2026 GMT
Subject: CN=9e92818bd68d09febd58197b2c894650d86b726f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d9:ef:09:53:75:9b:5e:73:6b:2b:cb:86:a9:
1a:87:b9:0d:3a:16:c3:d8:07:c8:c5:fa:43:4b:e5:
34:38:5e:7b:d9:13:02:f7:69:af:75:1f:eb:fe:68:
de:27:29:b4:df:53:e3:ab:80:2e:bf:08:af:c9:4f:
4e:95:57:bf:66:3d:2a:2f:13:da:e0:3a:f5:36:9a:
d4:67:2f:83:f0:b1:80:23:d6:ad:26:06:23:95:4b:
0f:5b:b4:06:8e:8c:16:3a:83:f3:09:67:b4:5c:b9:
f4:f3:ed:71:1c:f4:6f:de:31:24:8c:22:a2:d7:b5:
d0:75:a8:23:33:d2:c7:12:95:fa:3f:b2:1c:ec:61:
cc:3b:42:a5:36:23:1c:91:40:7d:dd:4a:24:98:3a:
60:25:b6:47:68:d5:2e:41:9b:58:7f:0c:c7:bd:7f:
3d:a9:a9:bc:96:f5:29:b8:5b:26:b8:e0:54:b7:3d:
73:7d:2c:ba:22:53:08:8a:46:08:47:48:1a:a2:89:
d5:ab:13:c0:4b:ab:55:24:92:2d:86:4e:ba:79:db:
0c:c9:37:7a:86:4e:2c:ba:aa:e0:e7:b7:1e:41:f1:
a6:29:fd:52:04:62:b1:64:73:b7:3f:f6:2d:b8:12:
de:a7:e8:6d:a1:b8:4f:ab:96:26:dc:37:35:dd:eb:
3a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:92:81:8B:D6:8D:09:FE:BD:58:19:7B:2C:89:46:50:D8:6B:72:6F
X509v3 Authority Key Identifier:
keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f6:54:d6:0d:91:de:51:44:fb:20:1c:71:c5:2a:87:20:8b:
87:bf:27:63:50:d3:af:fb:90:0c:93:43:4b:c3:95:69:8c:ef:
a8:3a:62:09:f3:b9:07:24:dd:61:12:86:9c:35:1f:dc:86:cf:
93:0e:c6:db:19:be:ec:0f:07:7e:4a:92:ba:8e:a1:f3:0b:29:
2f:e8:c4:b2:35:d3:7c:0c:02:4b:f6:20:93:3b:cf:29:4d:a6:
44:c7:3d:40:51:10:59:39:1a:49:6b:44:bc:bd:3e:6a:e3:a3:
60:ac:04:eb:19:d1:5d:40:8c:4a:d7:2d:21:1d:ba:f1:fb:f4:
cd:fb:f9:9c:0c:07:e1:10:05:a4:1a:e8:d1:bb:93:9b:8b:a9:
42:67:1e:15:80:83:37:2e:99:60:79:80:fe:ea:96:46:a0:c4:
39:b5:37:fa:aa:c1:3c:87:47:a0:15:61:46:34:bd:fe:fd:ed:
ea:c3:d1:f5:b1:57:39:a7:f0:a0:19:08:a4:f4:69:de:01:22:
f0:45:7d:fc:44:6f:df:06:d0:6f:bf:95:d6:78:1b:71:98:1c:
30:91:0b:1d:ae:e8:fe:36:e6:cf:cf:43:cc:be:74:60:9c:71:
77:69:0d:2c:b5:6b:3c:58:4e:39:2c:26:51:c4:f1:2e:44:03:
da:68:e3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:24:34 2026 by rpki-client