Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
File: ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft (raw, json)
Hash identifier: Nl73BruOhM+o2g7MDDtfspjSc+1VmnvgOvARwj+SyTs=
Subject key identifier: 3E:87:C3:72:76:99:C6:44:F9:DC:18:31:6F:08:EB:FE:83:9C:BD:39
Authority key identifier: B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78
Certificate issuer: /CN=b62dd60548b67cc41e67b6a616a12ec53bf42978
Certificate serial: 01A0EDE657C3B4FD09B86BD54A9DF357E4F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
Manifest number: 1A79
Signing time: Tue 29 Sep 2026 16:01:30 +0000
Manifest this update: Tue 29 Sep 2026 16:01:30 +0000
Manifest next update: Wed 30 Sep 2026 16:01:30 +0000
Files and hashes: 1: cR-Inx2FPQAFHMTBAFcIV-g96qI.roa (hash: /WX3k+99dSoxI5A3FmHr7z1BH//wZrnLXz4X48FtN/8=)
2: ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl (hash: iCFZPjNkuGJBsM4hY954CHbdoGt2gnYlxk2Qc78+yKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 15:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:e6:57:c3:b4:fd:09:b8:6b:d5:4a:9d:f3:57:e4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62dd60548b67cc41e67b6a616a12ec53bf42978
Validity
Not Before: Sep 29 16:01:30 2026 GMT
Not After : Sep 30 16:01:30 2026 GMT
Subject: CN=3e87c3727699c644f9dc18316f08ebfe839cbd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d8:74:6d:ce:4e:77:34:8b:50:db:22:a1:d2:
d7:2a:40:25:78:85:f8:c6:a4:f6:4a:42:c5:29:e4:
3b:ea:4b:49:ed:c1:82:15:c8:47:ad:9e:22:9f:5c:
32:7b:44:90:18:2f:0d:17:de:2e:98:f3:c1:ca:a0:
cd:92:3a:06:8b:a3:84:ca:d1:32:5d:ab:20:9f:a9:
44:30:25:d0:9a:24:3e:69:64:c0:19:a1:23:41:95:
08:c5:31:5d:e4:28:21:f4:84:1d:8c:7a:aa:ae:5a:
dc:5a:37:99:81:b0:97:e9:7a:8d:9b:8d:a3:a0:75:
91:59:41:71:a3:53:1a:b9:da:df:67:31:34:62:fd:
4a:a5:0d:d7:21:a7:19:e4:39:47:1c:75:16:ba:5c:
e2:dc:8b:c1:f7:bf:82:66:f8:14:bd:ac:98:6d:d0:
92:2f:d4:d7:f7:79:0e:d0:ef:22:71:81:44:3a:f5:
51:e3:1d:2b:e8:db:9d:fe:d0:ea:18:86:a2:e6:e1:
29:48:0a:24:1c:30:90:7c:b2:fd:c7:f9:9d:39:76:
ac:ea:91:6e:1f:15:9c:49:13:b7:ab:12:19:6b:61:
2b:43:e1:13:9f:47:61:a5:e4:2a:de:f0:77:b3:fc:
dc:82:ad:db:e3:ff:32:e9:16:97:38:67:08:5d:97:
c9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:87:C3:72:76:99:C6:44:F9:DC:18:31:6F:08:EB:FE:83:9C:BD:39
X509v3 Authority Key Identifier:
keyid:B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f4:e4:78:f5:4a:39:2d:63:f4:62:21:fa:8d:d3:3a:79:6b:
30:57:3a:2b:80:f0:95:3c:9f:5f:81:e3:08:bc:2e:c8:3e:5b:
33:56:80:fd:e3:82:db:0e:1a:a1:5a:8c:ff:a4:66:05:c8:76:
ba:3a:43:dc:86:93:08:25:a0:23:98:9e:1f:36:1e:ed:52:92:
cd:cc:2c:1a:85:5c:a7:bc:c3:7c:a5:c9:d5:42:38:08:c7:17:
22:45:a2:88:4a:2b:76:ce:b8:4e:6d:74:fc:da:0f:25:ff:9a:
7a:bf:48:bf:71:46:ae:0c:1d:2c:ec:ba:8f:8d:43:f2:0f:e3:
bf:51:63:28:46:ef:ad:41:67:48:46:65:f1:c9:ba:4f:b6:23:
bb:a5:e4:cb:6b:97:f5:46:9a:fe:29:a0:18:48:69:42:0d:4c:
1e:ea:a4:d3:9e:71:bc:8b:6f:fb:7f:b7:fc:96:d4:e7:34:48:
21:74:d4:c8:ae:a4:ac:7d:5f:7f:53:cf:0e:0d:6a:54:1f:dc:
92:fe:72:da:a1:4d:54:80:c4:75:cf:b4:38:72:80:32:87:75:
1f:17:47:cf:13:91:0d:06:7e:4f:b9:56:39:60:49:0a:51:2c:
18:0d:2c:95:b3:33:ba:75:57:f5:7c:0b:44:c2:d6:e8:06:ea:
9c:21:35:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:22:11 2026 by rpki-client