Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/fea303-4f3a-423e-afd5-28139bd99411/1/RsITtblG3tmAlM5BLCL_-iB-QWY.mft
File: RsITtblG3tmAlM5BLCL_-iB-QWY.mft (raw, json)
Hash identifier: iY8zJUZlVTwZQWqKqLnRkuApTD/zNn1Ay5mgQjiESnU=
Subject key identifier: 63:04:90:23:E6:85:24:F5:75:7B:04:1B:3C:5C:FB:55:E4:DE:19:87
Authority key identifier: 46:C2:13:B5:B9:46:DE:D9:80:94:CE:41:2C:22:FF:FA:20:7E:41:66
Certificate issuer: /CN=46c213b5b946ded98094ce412c22fffa207e4166
Certificate serial: 01A119E2C2F14EC302A9376053676546DDD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsITtblG3tmAlM5BLCL_-iB-QWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fea303-4f3a-423e-afd5-28139bd99411/1/RsITtblG3tmAlM5BLCL_-iB-QWY.mft
Manifest number: 87
Signing time: Thu 08 Oct 2026 05:00:53 +0000
Manifest this update: Thu 08 Oct 2026 05:00:53 +0000
Manifest next update: Fri 09 Oct 2026 05:00:53 +0000
Files and hashes: 1: CG6YE3diFNDxAY_EfqmIVLlC8zk.roa (hash: mSZY3NosPIP9Kd5rgPCFUb3EI5OnSJu4ig3yx1dZcHc=)
2: QBS0R0WX4CgAouVoy5AWvsIQFiE.roa (hash: E3Diw4Z8AQ6BjMDTeQHhn+VEM0caceCcTyALUIOkuu8=)
3: RsITtblG3tmAlM5BLCL_-iB-QWY.crl (hash: BVR6cifAKyWNdfUNq5j0+TA65JYNJEH7av8BmPBqdeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fea303-4f3a-423e-afd5-28139bd99411/1/RsITtblG3tmAlM5BLCL_-iB-QWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fea303-4f3a-423e-afd5-28139bd99411/1/RsITtblG3tmAlM5BLCL_-iB-QWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsITtblG3tmAlM5BLCL_-iB-QWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:e2:c2:f1:4e:c3:02:a9:37:60:53:67:65:46:dd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46c213b5b946ded98094ce412c22fffa207e4166
Validity
Not Before: Oct 8 05:00:53 2026 GMT
Not After : Oct 9 05:00:53 2026 GMT
Subject: CN=63049023e68524f5757b041b3c5cfb55e4de1987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:78:83:13:67:1c:f0:42:ea:69:3f:79:56:bd:
c5:43:c8:1d:d8:d2:e6:81:1f:81:a4:be:9f:34:c3:
02:bf:f2:e2:3b:d2:27:57:cc:b0:1f:17:3c:f6:87:
ca:6b:11:27:f2:fb:30:36:75:62:ca:29:d6:64:21:
4c:e4:21:f0:60:73:5c:3f:de:69:7e:2f:67:c0:93:
97:39:af:0f:9e:05:19:eb:87:32:c1:54:52:1f:e4:
5f:61:f9:cc:d2:53:b3:91:96:43:47:62:94:88:9b:
5d:1e:40:70:df:f4:f7:2d:41:24:80:b6:df:c3:db:
b5:be:d6:a4:02:bb:68:66:70:2c:7e:32:be:d6:17:
e6:ca:10:c5:7f:65:cd:b0:7f:27:d8:d5:ac:75:16:
09:16:f4:4b:af:57:6e:af:be:1f:88:58:c1:2a:58:
65:7d:a9:9e:00:ff:c2:55:fb:de:93:1a:6a:5f:b6:
0e:eb:6a:9b:34:dc:5c:1f:09:99:f6:6f:d7:45:5a:
4c:7b:9e:0c:33:55:58:8f:1b:e8:e1:ce:fd:9d:cc:
14:c9:f9:3b:04:86:bc:47:dc:4d:81:e0:c6:bd:19:
26:e7:78:52:6c:14:93:60:94:64:6b:d9:2f:92:2f:
ad:bc:e7:b3:2e:45:26:a7:5c:2a:2b:5b:18:db:89:
0a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:04:90:23:E6:85:24:F5:75:7B:04:1B:3C:5C:FB:55:E4:DE:19:87
X509v3 Authority Key Identifier:
keyid:46:C2:13:B5:B9:46:DE:D9:80:94:CE:41:2C:22:FF:FA:20:7E:41:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsITtblG3tmAlM5BLCL_-iB-QWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fea303-4f3a-423e-afd5-28139bd99411/1/RsITtblG3tmAlM5BLCL_-iB-QWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fea303-4f3a-423e-afd5-28139bd99411/1/RsITtblG3tmAlM5BLCL_-iB-QWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:39:45:5e:7c:4a:fe:18:c1:b3:52:64:e3:ef:1f:74:5d:a0:
3c:f1:46:f7:2a:91:52:b9:52:0d:5a:4f:7a:f0:02:2d:4c:7a:
4f:e2:8a:82:b8:81:1e:0a:38:fb:b8:c0:99:06:84:18:a1:17:
fd:ec:e0:f9:ea:c3:1e:d1:a0:5f:3c:79:2a:12:1a:f0:5c:00:
04:a4:09:71:e5:1d:30:86:21:95:53:58:2b:4d:84:61:88:60:
da:05:04:c3:9c:b7:ad:6b:ef:c2:4a:a2:2e:78:48:e0:5b:5f:
11:d8:15:2d:65:cd:75:76:47:28:a6:7b:a4:d8:65:e0:2e:f9:
9f:6c:69:3a:c6:4e:db:0a:02:c3:6c:b1:bf:d4:fa:42:12:06:
ab:58:0b:07:34:ef:cc:6f:3c:db:e2:e5:83:81:e7:ce:c4:4e:
ab:66:e8:c0:19:78:dd:ff:e4:79:3b:f8:1e:3c:c2:c4:80:0c:
0e:8b:24:22:de:4c:b9:8d:d5:88:24:05:36:84:09:57:55:af:
f4:59:68:55:85:47:d0:5e:0f:40:3f:46:07:90:bc:93:eb:05:
7e:0b:de:ff:be:b3:60:d3:46:f4:34:ed:6e:bd:3e:fd:28:6b:
54:26:a5:8d:5e:f1:6b:a6:56:c1:c4:f5:0b:7a:a7:b7:e6:5d:
8e:0f:8b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:24:39 2026 by rpki-client