Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
File: tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft (raw, json)
Hash identifier: 0G5H8eEqkueU8ksPclld20OXf23m9/xeREDlk0OKvmk=
Subject key identifier: AA:66:6A:9F:0B:B6:05:97:9B:20:5A:AE:84:AC:8E:7E:DC:9D:2F:F7
Authority key identifier: B4:50:4D:28:E6:7A:21:EC:96:D9:5B:27:46:3E:C0:30:3F:E1:76:2C
Certificate issuer: /CN=b4504d28e67a21ec96d95b27463ec0303fe1762c
Certificate serial: 01A086B031CABE4DB7B781B4C4CD1FF192B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
Manifest number: BF
Signing time: Wed 09 Sep 2026 15:01:29 +0000
Manifest this update: Wed 09 Sep 2026 15:01:29 +0000
Manifest next update: Thu 10 Sep 2026 15:01:29 +0000
Files and hashes: 1: tFBNKOZ6IeyW2VsnRj7AMD_hdiw.crl (hash: vV8/79vPgR6LFjqrJ+3u/lN5CQ58ex2R1+r//O3w/7o=)
2: vJbwHPz8RQ4zs2gU1mqro7zoibU.roa (hash: sBjiZn8iplUkAmpK3IUiwbDEIQyYz8gkgjFlOTL9wqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:b0:31:ca:be:4d:b7:b7:81:b4:c4:cd:1f:f1:92:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4504d28e67a21ec96d95b27463ec0303fe1762c
Validity
Not Before: Sep 9 15:01:29 2026 GMT
Not After : Sep 10 15:01:29 2026 GMT
Subject: CN=aa666a9f0bb605979b205aae84ac8e7edc9d2ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e3:f5:6d:07:8e:63:cd:d9:fb:19:37:8d:a9:
95:4c:65:12:94:0d:ac:f7:e8:2c:c5:22:75:62:74:
1d:f4:d4:f1:01:5b:2c:b2:72:f3:db:ec:6e:98:88:
ee:79:74:a4:e1:2c:34:34:a7:80:71:81:a3:0b:41:
5c:49:2b:60:24:18:5f:bf:fa:17:6b:fa:19:a9:37:
b7:42:df:2a:77:59:2f:f8:6c:7b:8b:e4:fa:77:15:
1f:c0:56:25:18:dd:04:ed:01:04:72:4a:e5:d3:a3:
4e:d7:91:ac:f7:3c:bf:98:5a:7e:b1:99:33:9c:1b:
a0:9e:20:b8:f0:c0:1b:7a:e1:c9:3f:78:cd:e1:d8:
a8:99:f8:35:03:6d:f3:d1:3b:1c:78:6b:85:a6:25:
07:dd:3a:ef:d3:38:43:4c:d2:39:e9:e3:7b:1e:80:
a4:8f:09:59:dc:60:66:00:6d:0f:a0:7a:73:ae:24:
f0:97:26:3a:a2:57:b4:9c:8c:dc:3d:6a:31:be:2c:
a3:ce:52:94:4d:c9:b9:aa:4b:06:e6:ac:5f:41:c1:
6f:0e:6d:82:a7:93:5e:bf:26:cd:c3:5c:28:7e:af:
2a:44:d6:01:62:36:84:a9:7a:f3:56:cb:a9:a6:74:
fb:e2:b5:c9:46:26:18:c7:43:bf:ed:fe:ee:76:d0:
b6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:66:6A:9F:0B:B6:05:97:9B:20:5A:AE:84:AC:8E:7E:DC:9D:2F:F7
X509v3 Authority Key Identifier:
keyid:B4:50:4D:28:E6:7A:21:EC:96:D9:5B:27:46:3E:C0:30:3F:E1:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0a:8c:fa:bc:c5:7e:a6:f6:81:a9:34:6f:56:58:ac:be:3d:
dc:21:05:f9:31:89:b2:23:f9:23:49:8f:dd:95:b3:dc:09:76:
6e:61:9e:95:f1:6c:58:f9:43:34:ea:b7:92:0c:32:ec:45:e6:
97:e0:c4:7e:01:10:1e:d2:7b:90:b1:e3:a6:ae:5e:05:16:42:
ae:99:37:a4:c1:06:54:69:3c:e3:ef:73:80:16:85:0c:a6:34:
ad:58:2f:e8:6b:ab:f3:02:85:61:49:e6:1c:79:c7:c7:1b:96:
0f:b4:8b:6b:63:ed:cb:e3:69:bb:9b:84:e1:58:0c:8f:0f:0c:
fa:3b:6f:c8:d9:92:20:42:73:b8:c8:28:00:e7:d2:02:83:c2:
48:c2:4e:49:11:59:8c:f9:06:57:8b:90:df:f4:7b:0f:2e:df:
bb:15:d1:e7:1f:e2:15:b2:9d:a6:e1:98:b8:a6:7b:83:29:fe:
d6:a7:58:2f:45:75:5e:de:7d:1c:f3:7a:e8:05:c1:10:09:dd:
3d:47:e7:20:ed:a7:5e:f3:b2:d2:25:28:7b:bb:43:6e:fd:0e:
ea:97:21:1e:f0:f9:bc:fc:8e:8b:44:74:d7:6a:51:95:af:ed:
d5:13:75:db:02:a8:64:3d:bc:d8:dc:ae:93:02:3a:92:8c:0b:
9e:81:cd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:06:39 2026 by rpki-client