Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
File: txDNRHGj-M3NhE0_NmFIlAlStOc.mft (raw, json)
Hash identifier: hH4nxjlaOYsQqmAiJngXotspM0PxsvTXeSAu2QWhd+Q=
Subject key identifier: F1:8B:34:D7:79:CD:9C:1B:A7:C0:A1:1B:1E:54:B5:10:B5:A9:42:3C
Authority key identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
Certificate issuer: /CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Certificate serial: 01A155C10E9F7030D9BDDF1B53B4DE72EB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
Manifest number: 1AAF
Signing time: Mon 19 Oct 2026 20:01:17 +0000
Manifest this update: Mon 19 Oct 2026 20:01:17 +0000
Manifest next update: Tue 20 Oct 2026 20:01:17 +0000
Files and hashes: 1: Hh4oawFMPhlZWHiv9oVznjVHldw.roa (hash: ZkANeMjzmI2+4mD6XiyteCRytMwKnaF4f4SfTl1h+1g=)
2: txDNRHGj-M3NhE0_NmFIlAlStOc.crl (hash: UmGKqfndQ03cGgwHVA8DKmuls6W636WFUTlOli/sfgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:c1:0e:9f:70:30:d9:bd:df:1b:53:b4:de:72:eb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Validity
Not Before: Oct 19 20:01:17 2026 GMT
Not After : Oct 20 20:01:17 2026 GMT
Subject: CN=f18b34d779cd9c1ba7c0a11b1e54b510b5a9423c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5b:f1:45:0d:81:dd:40:d5:41:94:c0:a0:1e:
98:6f:26:7b:1e:4b:a0:14:e0:bb:98:cd:11:91:ac:
11:e8:89:93:21:45:dd:3d:a6:63:ba:7d:53:7c:26:
86:ba:7b:f7:ae:e3:08:57:ac:b0:7e:36:2a:61:27:
c9:dc:da:c6:73:4a:33:90:b9:e7:e0:5b:35:ab:1b:
db:77:74:e9:b5:da:ed:9d:d2:d7:ce:25:5e:62:58:
d0:2f:1b:81:71:5e:99:77:cf:d0:d9:f8:c3:5b:94:
ba:fc:23:60:75:3f:21:7b:67:f3:62:d3:f9:4c:74:
de:94:56:35:c4:53:33:51:47:07:a6:73:a6:fb:af:
db:48:8a:76:3d:9b:85:72:d4:4b:6f:69:15:80:ff:
ee:90:7d:a0:3b:8c:48:1f:57:d6:a0:6d:a3:01:04:
dd:87:44:2f:7f:58:c5:3d:dd:50:b9:e8:3d:cd:51:
6a:8e:77:3b:2c:fd:2e:c5:42:34:99:4f:25:38:2d:
00:ee:7b:65:f8:04:82:38:e9:82:3c:2e:df:75:55:
29:f8:fc:b4:16:f4:aa:87:a0:93:0f:df:43:6d:51:
db:47:09:9a:11:68:5c:57:e5:9d:b9:45:cc:ed:d4:
fe:08:46:3d:a9:0d:96:1c:61:e6:4e:8c:44:f3:0a:
8f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8B:34:D7:79:CD:9C:1B:A7:C0:A1:1B:1E:54:B5:10:B5:A9:42:3C
X509v3 Authority Key Identifier:
keyid:B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7b:c0:05:bb:15:91:ad:8f:03:37:8f:d4:e8:28:5f:53:7a:
0d:d4:28:f1:72:a1:dd:f9:6b:9f:5d:5f:3e:73:b2:78:f6:e1:
a6:22:94:32:50:7f:30:5b:bc:6a:02:74:0d:d3:5a:a5:be:1b:
cb:a9:c8:d5:93:30:7a:3f:d0:42:53:38:2c:33:52:98:1e:cb:
f9:f4:76:81:6c:78:51:15:9d:44:73:3d:79:a6:88:76:9d:43:
1c:fc:22:2f:88:fe:3f:4b:7b:3b:16:61:cf:bc:ef:b9:9f:38:
54:14:db:90:80:bd:13:19:d5:66:5d:4a:78:00:93:f7:87:8e:
0e:33:ce:87:39:a2:a7:81:69:57:46:33:52:6b:ad:e0:81:8c:
ad:12:c0:9e:8d:43:6a:d7:34:ed:98:5e:aa:89:8f:82:4d:52:
97:65:09:e7:ab:45:03:19:44:a3:41:04:d1:a7:d3:8d:dc:50:
ef:10:54:52:63:08:1e:51:0f:5d:92:b8:4c:e2:a8:01:c4:3b:
3a:bf:22:59:84:89:d7:98:aa:dc:84:51:17:41:4c:db:1d:dd:
ff:96:0c:1f:ed:75:77:9a:ae:66:82:28:fa:9f:7a:75:00:66:
64:67:bc:7d:13:fb:bf:86:af:ac:ef:08:3e:90:fb:ef:c1:d0:
93:70:f3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:50:21 2026 by rpki-client