Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/tjUR6nObBPqgDTGq0uWIekxM-N8.mft
File: tjUR6nObBPqgDTGq0uWIekxM-N8.mft (raw, json)
Hash identifier: INXx42i7ZukW82KX9Hnx7wODZlHRnW6YF7iHasFAiO0=
Subject key identifier: A7:E8:0F:77:03:73:0A:F3:69:C3:84:AE:FC:DA:B6:2C:7A:B8:BA:DD
Authority key identifier: B6:35:11:EA:73:9B:04:FA:A0:0D:31:AA:D2:E5:88:7A:4C:4C:F8:DF
Certificate issuer: /CN=b63511ea739b04faa00d31aad2e5887a4c4cf8df
Certificate serial: 01A08A8D2C0481AA279BCB3469EAC3504CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjUR6nObBPqgDTGq0uWIekxM-N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/tjUR6nObBPqgDTGq0uWIekxM-N8.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:42 +0000
Manifest this update: Thu 10 Sep 2026 09:01:42 +0000
Manifest next update: Fri 11 Sep 2026 09:01:42 +0000
Files and hashes: 1: O3Md2fGu_NAQGVwzsUndSXloRpk.roa (hash: II4bSX3yzIxXnF5wQkTynrc5UoTKYvwt/oh8DflXYKc=)
2: tjUR6nObBPqgDTGq0uWIekxM-N8.crl (hash: 5ac+0sq92ZYRRiAi7g0/9zMM0POHdWdE+U7qPctsp08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/tjUR6nObBPqgDTGq0uWIekxM-N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/tjUR6nObBPqgDTGq0uWIekxM-N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjUR6nObBPqgDTGq0uWIekxM-N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:2c:04:81:aa:27:9b:cb:34:69:ea:c3:50:4c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63511ea739b04faa00d31aad2e5887a4c4cf8df
Validity
Not Before: Sep 10 09:01:42 2026 GMT
Not After : Sep 11 09:01:42 2026 GMT
Subject: CN=a7e80f7703730af369c384aefcdab62c7ab8badd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:48:fb:15:1b:e8:b1:d3:55:4d:c7:af:4d:3b:
f6:43:f0:c2:4c:b9:c8:b4:5a:1b:d7:26:f5:61:ca:
14:94:fb:11:4f:bf:20:0e:cc:b7:1c:73:cc:fa:30:
76:8c:c5:71:b4:44:84:22:3b:8f:f2:d2:76:20:97:
9c:80:61:ef:d5:6b:bb:c0:87:18:a5:d2:3d:86:fe:
b4:f6:f9:13:40:d2:48:cd:d2:40:ba:fd:fa:a0:9e:
73:06:c5:e6:d2:d0:1f:d3:c2:89:19:db:a7:13:d0:
9d:2e:70:54:af:d5:23:28:52:05:52:33:29:40:3b:
c0:91:52:fd:56:52:fc:df:98:c2:fd:1f:8d:09:6c:
75:a4:51:ba:b5:3c:17:5f:83:92:b6:f8:a4:37:b4:
06:33:ce:8d:7b:6e:5b:c7:f1:28:83:86:79:c1:e2:
ca:ad:83:c3:ba:67:09:a3:b1:34:22:b1:0b:a4:6e:
80:66:89:ae:3c:d2:97:4e:69:8f:4d:ef:b1:78:33:
1e:c6:97:fb:52:09:27:50:a3:37:93:36:ae:a0:0c:
3c:b5:be:55:db:76:d4:06:cf:b3:a8:fe:f7:d3:99:
5b:6c:fe:4e:8a:eb:bb:c1:ef:7d:ba:16:8f:5a:a6:
a8:29:c0:48:9c:8d:90:6a:21:da:a2:a4:e0:6e:fa:
df:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E8:0F:77:03:73:0A:F3:69:C3:84:AE:FC:DA:B6:2C:7A:B8:BA:DD
X509v3 Authority Key Identifier:
keyid:B6:35:11:EA:73:9B:04:FA:A0:0D:31:AA:D2:E5:88:7A:4C:4C:F8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjUR6nObBPqgDTGq0uWIekxM-N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/tjUR6nObBPqgDTGq0uWIekxM-N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/tjUR6nObBPqgDTGq0uWIekxM-N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:fc:e6:2e:50:2b:cc:64:0c:f1:90:43:a9:20:ae:41:25:62:
3f:e9:d7:41:cb:8e:09:64:81:a8:78:c1:fc:52:36:ef:d7:1b:
8f:7c:26:56:29:fd:60:71:64:76:08:18:e6:e9:7a:a5:04:18:
67:a1:eb:04:fe:ee:72:b6:d6:e4:7d:4e:48:f1:29:28:45:ec:
30:3a:ef:b9:9a:bc:6b:cc:70:e3:06:e6:82:37:cb:0e:58:fd:
e5:0a:fe:a9:96:75:47:db:9a:e5:af:ff:ae:1e:42:48:ab:70:
41:23:ec:2b:02:68:28:16:72:2f:69:08:92:84:d4:a0:9f:99:
91:07:08:b7:9a:d5:4e:67:4a:ff:bd:9a:b3:5f:20:f9:a1:c5:
34:0a:d2:f6:a4:c0:bf:4a:fc:48:89:1d:8b:47:d5:ff:96:fb:
39:73:a4:d4:a5:f0:70:53:25:cb:3a:67:78:80:c7:dc:73:9c:
0c:32:9e:52:91:18:ef:b7:a8:52:3d:ca:43:87:05:55:14:0d:
2c:5a:f8:f9:08:24:3f:3b:9d:58:cf:76:28:b4:26:48:17:a9:
95:21:ea:4e:d7:18:19:40:85:96:29:a0:b9:c2:93:cf:93:68:
79:3f:34:8f:fa:10:b5:03:3f:e7:c6:c0:0c:a9:65:0a:4e:f6:
ad:80:c7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:57:09 2026 by rpki-client