Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
File: tKkPaJZnhEKvruG6qqayot7KzTs.mft (raw, json)
Hash identifier: +F0uSgQc7SoV3CnrwgOLo/TGmp1pfsSfGGfC5EO5Jww=
Subject key identifier: EF:33:03:B2:CE:46:D8:64:93:BA:F4:EF:B1:41:B0:B9:54:F3:F0:1E
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial: 01A17E180177BC1DF687D1812ED0417BE424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
Manifest number: 1ACB
Signing time: Tue 27 Oct 2026 16:01:04 +0000
Manifest this update: Tue 27 Oct 2026 16:01:04 +0000
Manifest next update: Wed 28 Oct 2026 16:01:04 +0000
Files and hashes: 1: DjRcKjGf481KpSn3dS8opbsCTRQ.roa (hash: q4qSCDk+u7QWlYigOct6W9NgvEFiQbOazsiPpD4B9fE=)
2: KMdcbWWp5MyTzP2tDi5ljSFkPgs.roa (hash: rr/RZr6IyiOAVd9654gWzYqEL3pIM32RlUlY8qv46PE=)
3: eNHn6hiUVOxJ-_Y5SJktOte6hXk.roa (hash: jPd38RvXr6qVEzTNTT/Ft+c1V1MvmsnZDnEJANdwKuo=)
4: tKkPaJZnhEKvruG6qqayot7KzTs.crl (hash: XwPz2pxzX6RDH25e9JBRiZ8+dZ3nMy9iBDRivrrLZR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:18:01:77:bc:1d:f6:87:d1:81:2e:d0:41:7b:e4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Validity
Not Before: Oct 27 16:01:04 2026 GMT
Not After : Oct 28 16:01:04 2026 GMT
Subject: CN=ef3303b2ce46d86493baf4efb141b0b954f3f01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5a:d0:42:05:60:59:87:6a:2c:23:44:17:60:
62:7a:4d:f0:89:de:5f:ce:50:e0:5a:e3:8a:11:f3:
ba:96:79:48:3c:6d:27:dd:b9:bd:61:ba:33:1b:da:
92:c5:cc:b6:99:a6:7e:fa:8c:05:99:cc:99:ce:a3:
ed:44:e8:7f:05:78:de:50:39:1d:85:80:b1:8d:2e:
28:74:b8:88:a2:af:37:2b:bb:15:f9:43:40:1c:ff:
c0:52:16:2b:44:2f:1c:fe:4a:a8:15:95:63:ef:8a:
0e:f6:70:c2:32:ce:78:2a:fd:b7:c9:06:ba:19:9c:
6c:b9:95:35:e5:44:96:21:3f:71:24:c9:49:88:04:
31:7e:54:6a:18:e8:6d:e4:27:b5:e8:da:f2:c5:47:
06:84:8a:dd:e8:fe:3b:b3:e4:ee:8c:e5:e4:a2:7d:
9b:83:86:71:10:17:da:14:e2:90:bc:f7:05:fb:2a:
bd:7a:d6:a8:51:7a:62:d5:83:95:46:df:88:62:46:
68:9a:85:93:45:92:f0:50:53:f3:a4:87:4b:b2:0f:
be:17:bc:10:25:bb:86:ba:f9:fa:24:0b:d6:b9:14:
21:50:7a:b4:9c:f7:79:d5:eb:f5:ad:df:9a:b3:4c:
64:42:20:95:0f:eb:a1:b0:11:99:01:39:3e:b6:16:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:33:03:B2:CE:46:D8:64:93:BA:F4:EF:B1:41:B0:B9:54:F3:F0:1E
X509v3 Authority Key Identifier:
keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ef:b1:e2:3c:c3:ef:b4:63:aa:81:8d:37:01:b2:24:f1:b2:
ee:c7:fd:94:d7:3d:74:cb:67:9d:d5:99:be:89:95:9f:d6:08:
f1:d0:06:a2:9a:14:65:89:09:38:97:6f:f5:2f:0d:03:9e:de:
03:78:27:19:73:4b:95:0a:be:9a:74:21:ac:9a:df:67:60:e0:
7b:26:cb:da:34:3f:a9:0e:d2:8a:2f:fb:5b:57:74:a1:eb:57:
56:4d:77:f1:a4:54:d2:e0:9d:71:88:48:ad:7a:1f:9d:8a:41:
f2:a9:47:4b:ad:a2:69:3b:d6:d8:98:f3:e6:02:a8:c0:8f:7e:
48:dd:a3:2d:38:47:0e:14:4c:4c:64:13:80:cc:ae:c2:e6:58:
82:4d:c7:35:12:62:af:c6:51:4c:7a:70:3d:7b:3a:ad:3d:90:
ba:60:3d:96:c4:b1:4f:fd:82:f9:7f:4d:96:9f:0e:fe:27:3b:
50:fb:e9:20:bf:1e:3b:a9:6f:85:0a:ba:5c:58:d1:69:14:bc:
66:51:3e:51:e2:c1:f7:33:97:02:d5:77:84:93:4b:29:0e:f4:
f3:77:f6:f7:1b:f8:dd:f3:f9:58:12:39:18:3d:f1:52:87:f0:
d0:9e:58:d9:8a:61:39:d0:ec:d9:66:77:87:bc:b7:72:85:b8:
11:61:39:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:06:20 2026 by rpki-client