Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
File: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft (raw, json)
Hash identifier: vsW1hSX9UMq0t/UsTrGcRoFYx+0oMC/JA3mmc5l2P8c=
Subject key identifier: 2E:4A:B5:3D:0E:06:F0:FC:59:9B:AF:1F:7E:C7:66:C6:90:50:2A:0B
Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53
Certificate serial: 01A08DFC29417F159A9CFAC99957FF42EC4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
Manifest number: 17B1
Signing time: Fri 11 Sep 2026 01:01:47 +0000
Manifest this update: Fri 11 Sep 2026 01:01:47 +0000
Manifest next update: Sat 12 Sep 2026 01:01:47 +0000
Files and hashes: 1: YeKtEsYaTNZoSHj3N6MlBsotJrQ.roa (hash: twTw0giPhGzIQ/V/HMZrgKRp++mkr21dxckWNhdSudg=)
2: ielQr4EC94tydWptb7Zy7oQJTlg.roa (hash: IK1qVKo+95L3ssLme0pcM7macPsa/yBGCJukgetUuXk=)
3: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl (hash: +P/sHSHltguILfrrG0dcCyOM2DZ4s09pKPv6U/NFkME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:fc:29:41:7f:15:9a:9c:fa:c9:99:57:ff:42:ec:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53
Validity
Not Before: Sep 11 01:01:47 2026 GMT
Not After : Sep 12 01:01:47 2026 GMT
Subject: CN=2e4ab53d0e06f0fc599baf1f7ec766c690502a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3f:7f:10:8c:2d:df:5f:24:92:fe:96:0f:30:
4b:45:e0:f3:4e:f2:c7:8d:fe:de:6d:e9:b7:e5:80:
21:06:8c:f8:95:ab:a5:a2:d7:88:65:86:bc:c5:16:
93:32:5f:ff:20:8f:9e:65:5e:ba:62:ad:3f:fa:79:
3c:22:c0:5e:5a:ff:6c:63:6d:d2:5f:14:a6:5b:b2:
b1:bc:bf:63:6b:00:ae:51:04:d0:34:f9:8b:cc:16:
30:cd:76:14:4d:fa:aa:1d:c2:69:e0:dd:df:03:e9:
cd:90:a2:88:c8:29:f3:95:8a:d1:51:ab:54:fc:0f:
03:12:0e:80:b7:14:b9:77:f6:8b:b0:ab:91:0a:1f:
6f:db:4e:be:3a:4b:ad:c9:0e:f0:38:ce:4c:4e:a9:
a5:be:19:b3:62:59:b5:ff:bb:73:9d:d7:31:63:e7:
d1:14:e8:68:89:4e:bd:5c:7d:b5:92:19:0e:cb:11:
5a:9c:d6:00:32:74:ed:35:18:b7:57:31:d1:5c:57:
ca:2c:e8:c2:0b:d5:84:4e:f2:a3:c0:65:05:1e:85:
8d:8a:fd:87:74:17:f1:fb:27:6f:99:97:f5:47:1d:
e2:84:68:c6:f0:01:90:38:4d:a7:4a:a9:d9:8a:c0:
1c:4d:a9:fd:86:9d:b1:ac:5f:1d:56:99:44:1f:3b:
a8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4A:B5:3D:0E:06:F0:FC:59:9B:AF:1F:7E:C7:66:C6:90:50:2A:0B
X509v3 Authority Key Identifier:
keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c0:14:7b:8e:36:9f:eb:99:1a:b6:aa:ca:d1:f2:fb:9a:f0:
07:b1:19:ec:a1:12:2d:7f:82:2f:5d:a9:03:22:0e:fd:9f:70:
9b:19:ee:a4:9f:86:00:8d:e0:b2:70:96:32:f0:86:81:94:00:
d1:51:07:fb:a5:7f:f3:34:ac:8c:92:a9:47:3a:b4:ce:6b:4c:
a3:6f:cf:82:df:93:61:10:72:c2:f3:06:5d:a9:c4:f8:e8:f1:
7b:e8:45:05:d2:d6:aa:54:af:c5:50:94:9a:3d:7d:d2:d9:12:
08:5a:70:ca:ed:48:ca:e4:e7:ae:f6:af:ec:d4:fe:f0:80:ef:
aa:f0:54:e1:a1:3c:0a:16:98:51:40:ad:85:0d:f6:51:c2:85:
2d:e1:29:71:14:40:89:64:f9:df:f5:b6:97:bf:5b:fe:c7:b5:
74:a9:af:fe:61:f9:c0:dd:ef:b9:ec:35:69:37:14:9a:68:6f:
c3:66:4a:dd:39:98:9c:3c:89:9f:d1:5c:a7:01:86:c3:df:00:
7a:a8:af:e5:25:14:e9:c2:c6:27:55:ea:a8:d6:4d:98:4b:2a:
3c:24:a6:fa:d7:38:92:41:98:f7:b3:ee:a6:5a:2d:c7:fd:df:
a5:5a:0c:b0:a6:b0:58:e5:ee:86:47:06:f4:b0:db:ed:9f:50:
ef:ff:69:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:11:31 2026 by rpki-client