Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
File: tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft (raw, json)
Hash identifier: rClfH29zAW+ctNoxLfJWZbIPMrF+sLMiNNiMA1s2qyI=
Subject key identifier: BD:18:C5:A3:FF:5E:67:4E:1A:71:53:CB:EB:AC:DC:39:C5:B3:9C:C0
Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
Certificate issuer: /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Certificate serial: 01A13A1252ADADA5E488AB16A8EAA3F57341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
Manifest number: 1502
Signing time: Wed 14 Oct 2026 11:00:41 +0000
Manifest this update: Wed 14 Oct 2026 11:00:41 +0000
Manifest next update: Thu 15 Oct 2026 11:00:41 +0000
Files and hashes: 1: AVa744s5sqejKlFOoRj5fFaGhmQ.roa (hash: Ye5YKn3mU+KYo94fAkaWcugUwoVf5/pOVZx4pX9gUjA=)
2: Ts1c5R1pfarxRE69RZTUbL8j2wI.roa (hash: ZcQpB70U2YO+2we7XC8myVB/BAIh03F9aXKEn9a2hG4=)
3: tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl (hash: N9IgJv7HZGe9Wj5xOhWdRYxy3qgmvII8sCZQTT/L2Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:12:52:ad:ad:a5:e4:88:ab:16:a8:ea:a3:f5:73:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Validity
Not Before: Oct 14 11:00:41 2026 GMT
Not After : Oct 15 11:00:41 2026 GMT
Subject: CN=bd18c5a3ff5e674e1a7153cbebacdc39c5b39cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:08:77:da:83:95:d9:62:1b:63:82:91:65:fa:
2a:ea:02:9d:fe:15:c2:13:b7:5e:59:1e:90:0c:0d:
ae:30:78:a9:5e:5b:b7:d1:2b:12:8c:a0:07:7d:9b:
5a:5b:7d:42:24:31:c0:ac:98:1b:c3:8e:8e:1a:e3:
c8:92:c4:9e:42:31:13:01:7e:29:60:cc:d4:42:a6:
39:80:04:29:67:43:4c:f0:17:a7:c5:c7:7a:ca:10:
f6:10:71:b0:5b:bb:bd:96:5b:8f:10:5f:04:9d:de:
83:65:12:85:c8:8f:cc:60:98:d5:17:c2:51:ae:ea:
ba:4b:a9:d3:3c:2c:a4:6c:3e:d4:3f:1d:5b:ad:66:
c0:52:c8:75:36:01:1b:25:07:1f:44:99:27:3f:ec:
d9:7f:92:6c:56:8c:d4:41:e1:cf:ed:0f:1e:23:ff:
e1:18:d1:4f:6b:fe:b4:3f:6f:c6:52:32:65:ad:b5:
e4:ec:56:1f:a9:b1:96:9b:a8:f4:1b:56:52:57:2f:
20:61:be:3d:f1:5c:7c:34:4f:5d:32:ad:a5:5f:46:
5c:e5:2e:ed:8b:7d:66:de:7f:bc:63:74:98:84:c6:
67:8c:54:e5:8d:d4:5d:f1:4c:eb:1d:f6:47:89:1c:
ef:5e:65:72:2b:82:56:85:82:2a:83:c1:f5:20:c1:
85:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:18:C5:A3:FF:5E:67:4E:1A:71:53:CB:EB:AC:DC:39:C5:B3:9C:C0
X509v3 Authority Key Identifier:
keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1d:06:7a:a4:01:ad:5f:75:66:49:4d:8f:19:1c:55:03:76:
d2:0b:57:2c:91:5a:9b:ae:e8:e3:44:fc:55:1a:59:e6:a0:65:
13:4b:e3:16:40:64:91:10:3f:60:d4:65:d0:9a:f8:ce:4c:29:
7b:4c:34:5b:b2:95:3f:b9:5c:26:1f:59:de:fb:4d:57:59:80:
5b:6a:eb:2e:3b:9a:ef:75:fd:3b:19:07:26:9f:27:d8:b4:52:
78:f1:d3:52:78:ee:19:fc:e1:0b:22:aa:83:87:87:4e:50:c5:
93:c8:5f:18:a0:a7:a2:48:78:e0:0c:8d:c5:0b:b5:ec:66:05:
99:ba:ce:b8:fb:81:30:28:26:6c:29:65:06:97:7a:cc:9f:8b:
c4:e1:8a:74:6a:3c:b3:4b:8e:74:4e:cd:e1:3c:26:75:15:7c:
9c:42:6d:d9:d3:78:1f:d7:27:3a:53:4c:72:e5:70:76:0e:e6:
07:dd:9a:03:cb:cb:e1:a2:32:3f:71:ba:2a:0e:8b:79:ff:18:
41:56:8e:b5:e8:22:49:59:3d:06:e3:20:aa:5c:99:c3:2d:c1:
73:bc:96:fa:6c:0e:d7:77:b1:48:91:8e:c4:cf:a4:41:3b:ab:
7f:25:b8:ea:e6:07:9f:9c:4e:4a:61:eb:2a:ee:db:3f:c4:42:
ea:69:ed:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:32:44 2026 by rpki-client