Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
File: tFBkwayGkOLHepWaUCVG6YvNNyc.mft (raw, json)
Hash identifier: BEzOOu/c3jmilXAXlhhPhQWMUf9MeHWdqoCR6C9fjao=
Subject key identifier: FE:F2:D2:6D:22:74:19:42:8C:B1:53:B5:20:16:38:A3:A8:BB:95:4D
Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
Certificate issuer: /CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Certificate serial: 01A08AFAA88376599DFD84DA73C77E49EB24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
Manifest number: 10C8
Signing time: Thu 10 Sep 2026 11:01:17 +0000
Manifest this update: Thu 10 Sep 2026 11:01:17 +0000
Manifest next update: Fri 11 Sep 2026 11:01:17 +0000
Files and hashes: 1: tFBkwayGkOLHepWaUCVG6YvNNyc.crl (hash: fFk6WAIlww7sS/4WC+xnNBBSHMkLjxp5PAcGszpUlEg=)
2: wFIxH6rmc0pTO3lHbm1q54JXQUw.roa (hash: LdJ/iIkB/Qkjc76ikiZz0rGCtU2IPzIjdQ2qezYDSK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:a8:83:76:59:9d:fd:84:da:73:c7:7e:49:eb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Validity
Not Before: Sep 10 11:01:17 2026 GMT
Not After : Sep 11 11:01:17 2026 GMT
Subject: CN=fef2d26d227419428cb153b5201638a3a8bb954d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:93:6b:0c:cf:6c:69:b1:50:8a:f4:cc:27:6e:
75:27:89:29:10:58:8b:69:d5:b7:3c:3f:77:db:f7:
37:fa:06:83:d5:87:b8:76:13:81:c2:b1:93:95:a8:
6b:78:e6:49:d5:e8:71:99:fe:00:47:fc:d5:bc:10:
da:d9:bd:d9:64:2b:ac:68:2c:b5:19:f6:c9:d7:33:
1a:4f:a7:44:17:ca:1f:f0:f6:7f:d5:6a:48:31:02:
c4:6c:24:73:0b:80:f3:1c:73:c6:cc:65:fc:25:90:
f3:5d:5b:fb:d0:e2:08:e0:1f:ac:24:5d:fa:7e:4e:
5d:51:54:f6:2a:f6:3a:b7:44:48:ab:1f:fa:90:10:
39:ed:0f:03:04:cc:71:88:cb:48:16:53:d1:91:51:
e8:69:82:3c:e5:1c:8f:ae:d2:00:f9:20:1f:70:94:
ec:7f:c2:ef:28:29:a6:28:ec:e6:1d:26:64:f7:44:
ab:23:14:9e:fd:04:15:3d:c2:b3:70:52:7e:9b:4f:
60:ab:be:66:46:c2:56:d9:47:1d:88:6c:3f:bc:7b:
75:8e:ab:36:7b:7f:13:84:9c:f1:e7:0d:bc:3d:0f:
11:97:57:b5:b8:0f:bb:73:e4:14:30:34:93:7d:1a:
40:14:96:98:5c:48:bf:f7:d4:b1:6a:68:0d:bd:31:
f8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F2:D2:6D:22:74:19:42:8C:B1:53:B5:20:16:38:A3:A8:BB:95:4D
X509v3 Authority Key Identifier:
keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5e:44:1d:5f:1b:67:33:32:d8:7d:6d:94:92:4b:97:2a:af:
08:5b:63:c2:5e:ee:12:ca:43:03:a7:5c:3e:59:eb:38:76:39:
ec:50:a8:39:51:6c:41:84:db:59:4d:ed:9f:e1:6c:f7:d0:78:
6b:38:fd:ee:19:11:64:51:55:74:d2:f2:44:cf:02:f8:71:63:
9e:1a:9e:ea:e6:c3:2d:7b:8b:ad:b7:93:75:57:f8:2e:66:9e:
cc:a0:3c:61:ef:ff:57:3a:53:17:06:4b:75:01:e2:61:4a:b6:
73:4a:52:be:98:f4:e1:ed:05:d7:63:ea:42:27:9c:4b:55:87:
4a:74:dd:88:24:1b:d7:a8:24:6e:d2:56:95:3a:87:8e:06:ca:
3a:3c:79:18:c0:f0:46:9e:91:52:5b:7f:76:6e:66:86:1a:6f:
d6:31:0c:a4:5a:6f:82:ce:a6:37:48:f1:35:6b:47:6e:82:65:
79:64:26:7b:61:0d:56:3e:d6:9d:8e:e7:ac:d1:90:0b:c7:cb:
44:2e:fa:45:d4:15:05:52:d4:86:83:27:cd:3f:3f:2b:65:ea:
96:0f:e7:45:3e:e9:7b:d5:4a:58:d4:0e:52:9f:97:14:93:39:
de:a7:16:11:35:98:b6:a4:30:b7:13:8e:44:8e:ba:98:3e:a0:
fd:7b:40:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:31:00 2026 by rpki-client