Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
File: tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft (raw, json)
Hash identifier: bx2Bg2J03qeMjwiAf039U7PczQqXu/3xxsq9u53vx50=
Subject key identifier: F8:96:11:C0:46:FA:78:B6:86:0B:CD:85:8B:F3:76:4A:20:2B:05:9C
Authority key identifier: B4:50:4D:28:E6:7A:21:EC:96:D9:5B:27:46:3E:C0:30:3F:E1:76:2C
Certificate issuer: /CN=b4504d28e67a21ec96d95b27463ec0303fe1762c
Certificate serial: 01A17BF23251264B9018D2372E6B0F9F7653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
Manifest number: 013E
Signing time: Tue 27 Oct 2026 06:00:32 +0000
Manifest this update: Tue 27 Oct 2026 06:00:32 +0000
Manifest next update: Wed 28 Oct 2026 06:00:32 +0000
Files and hashes: 1: tFBNKOZ6IeyW2VsnRj7AMD_hdiw.crl (hash: 8iuZU7jloTGm//AmJVjT1hXPgrL64doXcG2tdpLUXwg=)
2: vJbwHPz8RQ4zs2gU1mqro7zoibU.roa (hash: sBjiZn8iplUkAmpK3IUiwbDEIQyYz8gkgjFlOTL9wqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:32:51:26:4b:90:18:d2:37:2e:6b:0f:9f:76:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4504d28e67a21ec96d95b27463ec0303fe1762c
Validity
Not Before: Oct 27 06:00:32 2026 GMT
Not After : Oct 28 06:00:32 2026 GMT
Subject: CN=f89611c046fa78b6860bcd858bf3764a202b059c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:aa:00:32:37:57:13:7b:11:59:47:a0:65:df:
26:ea:6d:f1:36:5d:5d:0d:c7:15:61:e2:75:f6:50:
6d:04:c0:99:c5:f0:5a:37:f0:c4:1f:80:48:df:04:
14:fa:e0:7b:7b:3f:a3:2a:1c:48:35:ed:c4:69:f0:
d8:06:be:bf:08:38:44:ab:66:ab:77:85:3b:08:82:
ed:23:e8:52:d1:28:d9:68:c5:62:24:b1:f0:8b:8c:
0a:51:e1:35:4a:d8:9b:f0:d0:d8:8c:f8:aa:8c:67:
85:cb:07:ee:35:a9:ff:15:4d:42:fd:c6:d6:1f:c0:
dc:cf:c4:f8:18:6d:8a:9f:ae:ce:26:66:07:72:87:
49:34:13:ae:d3:a1:db:12:58:e0:15:97:83:3e:56:
f6:65:fe:80:9f:77:50:4f:2d:ab:b3:6a:56:01:a2:
9f:3d:f2:33:86:dd:4d:b1:3d:15:f4:69:21:19:e3:
1f:29:1f:1e:76:2d:67:61:80:3f:74:ce:8d:9f:c8:
b9:fa:84:2f:34:b7:60:fd:7b:9f:5b:b2:07:16:0a:
9f:0a:60:49:5b:04:5e:26:64:9b:db:a8:53:ee:d6:
5b:97:13:db:92:70:c4:c2:5c:56:33:5b:8c:fe:f5:
06:ae:db:61:53:29:34:49:24:7f:68:9b:f6:3a:21:
7e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:96:11:C0:46:FA:78:B6:86:0B:CD:85:8B:F3:76:4A:20:2B:05:9C
X509v3 Authority Key Identifier:
keyid:B4:50:4D:28:E6:7A:21:EC:96:D9:5B:27:46:3E:C0:30:3F:E1:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ba:9b:41:c1:90:ba:9a:20:43:55:a5:0f:bc:53:20:61:3a:
02:68:f6:15:85:cb:bf:2b:4e:81:38:d8:c9:e6:f4:27:ed:1c:
27:0d:54:77:cf:91:dd:9d:14:43:20:ef:5a:a7:db:ce:8b:33:
c4:c7:b8:d3:a6:0e:a2:7e:ea:93:18:8b:ec:bc:2d:d2:6c:f3:
91:7d:c9:cc:a1:ae:5a:b3:6d:9e:4a:a4:53:ad:3f:87:e4:96:
f5:61:88:3d:b1:b2:47:9c:43:97:d7:95:d2:78:ca:9f:2a:63:
bc:8c:12:52:26:60:7e:b3:16:53:8f:ba:ed:cf:41:ab:00:5f:
36:bd:bb:1b:82:d1:89:99:30:88:5e:cf:ae:54:ab:11:48:54:
80:01:42:94:40:70:61:1d:57:6d:9a:2d:d9:f9:84:82:8a:61:
aa:95:18:13:80:1f:33:45:22:c0:39:ab:1c:f9:a5:0f:fe:86:
23:fd:fc:5a:2d:74:82:14:71:c7:3f:94:48:59:37:6f:80:ab:
ab:1a:d2:28:27:a0:e4:a8:0d:ed:cd:11:1e:7a:27:37:b4:27:
dc:18:4a:21:9c:af:02:8f:c7:82:c0:18:35:b3:25:de:c5:5c:
1f:0c:71:8b:ba:7b:25:33:ca:86:72:01:26:59:d1:8a:48:31:
b5:dd:f3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:35:38 2026 by rpki-client