Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
File: tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft (raw, json)
Hash identifier: 25SC/b/to0A6Q+bCfdkZVK3h6HgN5E3mVOZBbhPvOIk=
Subject key identifier: AF:2F:A0:82:9B:6A:2A:52:DD:12:DC:9B:A5:E0:12:82:6C:FA:D1:82
Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
Certificate issuer: /CN=b4dd6d658e14571e839f7813da31f2217422818e
Certificate serial: 01A12D69FC36AD4F74133F79E9BC246F69A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
Manifest number: 1A9D
Signing time: Mon 12 Oct 2026 00:01:22 +0000
Manifest this update: Mon 12 Oct 2026 00:01:22 +0000
Manifest next update: Tue 13 Oct 2026 00:01:22 +0000
Files and hashes: 1: YwaTWFoU_sclTYJB9JwjIcKav1Y.roa (hash: Eu+5SivPrsHncNTTaLf6fSyoRwG5oxFjSNJBm3PvsI0=)
2: tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl (hash: X8cMorAHN06SSz79b/C2DIFmyO6ytRwmA3Cthy70jzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:69:fc:36:ad:4f:74:13:3f:79:e9:bc:24:6f:69:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e
Validity
Not Before: Oct 12 00:01:22 2026 GMT
Not After : Oct 13 00:01:22 2026 GMT
Subject: CN=af2fa0829b6a2a52dd12dc9ba5e012826cfad182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7e:96:bf:7c:7d:e4:ec:81:f9:56:a1:42:cc:
7c:de:25:6f:ad:45:ff:92:c7:75:d4:6a:f6:d8:a7:
96:c9:96:af:c5:6b:98:59:0b:3a:97:45:a1:55:ac:
42:34:a0:3b:d4:43:17:f6:2f:64:b3:df:5a:69:80:
70:23:97:18:ad:92:93:77:3b:fc:eb:f2:23:26:b2:
5c:7f:d9:d9:0e:74:92:5b:2c:ca:e2:8b:2c:3e:94:
bc:d1:e6:c9:d4:15:4d:31:89:9d:1c:36:c1:88:fc:
29:3d:8a:63:87:e1:84:c0:aa:18:ab:c6:14:c8:84:
0c:1f:91:54:c6:63:be:e2:73:d0:f1:87:89:48:f9:
00:60:45:d7:b9:48:3c:52:04:44:69:67:d3:40:27:
c9:4f:9c:49:4d:7f:06:e1:d2:93:78:3f:96:68:20:
7c:17:21:92:50:8a:07:a2:cd:8a:c7:bb:b9:6f:a4:
e3:aa:70:bc:03:7e:47:06:10:65:e7:81:ae:ae:9e:
4c:6e:d1:13:76:32:9e:e6:d3:02:0c:99:5f:f1:66:
74:4a:d9:11:c3:5f:57:66:e5:f6:8d:c9:c7:a0:1d:
d3:67:20:62:85:c3:15:2c:54:fd:de:44:f5:25:8b:
ad:2f:91:f5:c4:1c:2a:7c:8e:38:35:67:2a:8f:f4:
2e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2F:A0:82:9B:6A:2A:52:DD:12:DC:9B:A5:E0:12:82:6C:FA:D1:82
X509v3 Authority Key Identifier:
keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:15:95:9c:d3:9f:80:6b:02:25:74:36:32:d1:c5:3e:3f:54:
5e:fe:68:e1:c7:49:94:39:56:ec:83:45:e0:4f:8e:9d:ed:23:
cc:8e:67:a5:8a:db:6c:2f:cf:74:bb:d2:81:c2:f0:a1:51:4e:
aa:a9:a6:2c:67:91:11:ae:e9:64:7f:9a:b9:51:cf:c4:76:13:
a1:d3:04:28:dc:fe:a5:ac:69:4c:a6:3d:3b:13:6f:fa:09:4a:
b0:f1:fc:26:59:8d:a5:c5:7c:b1:0c:9c:a0:49:47:f1:26:ed:
9b:6b:e3:db:44:6a:11:e2:e4:da:5d:cf:f4:9a:f4:95:8a:7c:
0f:43:4c:ce:f2:98:e2:e2:56:55:69:c2:6d:18:87:5f:c1:e5:
17:d1:f4:cf:ab:8b:24:dc:b0:07:99:73:32:a8:23:92:7d:36:
e8:6e:cc:ed:b5:96:23:75:5c:9b:5e:41:16:fd:2c:6a:05:e3:
0b:ba:11:21:fc:40:6c:06:e7:37:f3:8b:d9:5c:78:fd:a1:39:
37:34:a6:91:f0:a7:7d:56:94:c5:a2:10:0a:63:72:30:c6:f0:
6b:4e:94:eb:ce:fa:a1:a7:7c:8d:b4:89:c4:55:df:03:d1:98:
10:17:d5:70:bd:4f:69:4b:09:26:e6:45:25:ac:47:47:fd:ec:
db:71:45:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:57:10 2026 by rpki-client