Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json)
Hash identifier: 7DCfBRP6/vOaEU3nTgJ1CSVMYb2abDm8ANUp+rGJ9HQ=
Subject key identifier: F7:1B:9C:25:D8:11:92:B4:3E:CA:09:B5:72:3E:80:7D:83:EF:8F:7E
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial: 01A0C444D2026273CDD0CB124800435990A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
Manifest number: 14D6
Signing time: Mon 21 Sep 2026 14:00:39 +0000
Manifest this update: Mon 21 Sep 2026 14:00:39 +0000
Manifest next update: Tue 22 Sep 2026 14:00:39 +0000
Files and hashes: 1: 58ydFFoOvrTPYA8iOIAgZMf_cpo.roa (hash: F/vDL/5heMjU5cUbUY7RNuovDGPBXC3rXD0ZADSlfk8=)
2: roH8dSJ1cyQiwOhgeOOscUYpa4E.roa (hash: 3JORgmdPZaQ8xXUzauNxbxZQHf1X4hPOhgbsIE182Bg=)
3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: VXhZLNeFDGY6oWsHdzRDzIU9niqdTMp1Ff7DMc+iXLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:d2:02:62:73:cd:d0:cb:12:48:00:43:59:90:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Validity
Not Before: Sep 21 14:00:39 2026 GMT
Not After : Sep 22 14:00:39 2026 GMT
Subject: CN=f71b9c25d81192b43eca09b5723e807d83ef8f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:19:ba:a1:a4:00:8f:95:00:ac:d6:ab:f8:
13:1e:94:42:39:8a:7a:32:93:52:59:fe:66:60:93:
60:a6:c3:8e:03:14:28:f5:72:b1:f0:f1:06:b1:a7:
79:42:d5:69:cd:fa:4a:d3:5d:0c:53:a7:1e:4c:00:
65:64:45:c2:20:41:fa:07:3b:48:7e:89:68:fe:54:
2e:5a:ea:0a:fb:3d:57:ea:e5:1f:a7:1e:8e:3b:c5:
fa:ad:87:35:6e:bc:0a:9b:16:35:31:a0:1d:02:b6:
2d:bd:b8:31:8e:b0:d3:f8:cc:4b:b3:bc:a3:1a:cb:
eb:8d:ed:66:1d:fc:70:48:5e:cf:b9:03:98:df:65:
82:31:a9:86:a2:04:f5:1e:b8:16:27:4e:5d:93:f2:
4a:8d:b4:7d:d0:ff:8e:95:78:a5:91:e4:0f:89:60:
d1:7f:fa:2a:a0:b0:2f:12:01:0e:cb:1b:3b:71:06:
d1:0a:a2:3f:d2:8b:de:d1:07:91:ea:87:0d:09:77:
28:24:68:5c:dd:84:47:85:c7:bc:81:9b:2b:49:58:
d7:e5:a0:09:9a:4e:52:6f:88:50:b0:b1:a0:03:65:
8f:b4:bf:12:f0:9b:01:c8:de:67:58:52:f9:74:19:
e2:1d:ed:f4:de:6a:da:48:c6:33:59:10:7f:cd:a2:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1B:9C:25:D8:11:92:B4:3E:CA:09:B5:72:3E:80:7D:83:EF:8F:7E
X509v3 Authority Key Identifier:
keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:87:d7:81:1f:95:52:6f:bc:b1:6f:2f:50:e8:80:25:d5:1e:
4e:7a:52:ec:de:b5:58:c4:eb:57:a4:27:a4:67:d4:4f:e1:a8:
e3:56:c5:7b:34:5f:6f:4b:b5:8d:f9:7c:03:7e:f8:3a:cb:38:
0d:d8:f4:50:6b:4e:a4:2c:37:2e:60:e7:0a:71:81:63:95:35:
57:11:f7:32:0d:d6:40:d2:69:32:89:c6:75:bc:96:73:38:39:
a7:29:e7:04:d1:b1:39:2a:03:a8:07:00:04:72:29:30:1e:83:
a9:37:93:13:2b:e0:97:fa:0f:c2:91:25:71:34:3f:23:f8:03:
58:34:a3:5a:38:af:a3:22:b2:91:78:8e:42:fb:9f:9a:8c:cb:
9d:70:66:f8:22:a1:30:d5:e5:2a:b4:77:49:80:49:51:ee:c2:
a1:0d:6b:83:6d:c4:bb:c9:c6:29:04:b0:b9:ae:f2:d9:e1:e4:
16:51:59:5c:de:15:ad:b7:68:6f:9b:04:e3:e0:05:70:68:58:
08:f2:9b:19:27:d3:47:19:33:27:00:45:ba:3b:e4:7e:eb:fc:
db:c3:c6:b0:da:84:31:6d:cf:62:2b:9c:dc:ce:59:62:29:f4:
8c:09:a0:f4:3d:c4:a2:47:3f:d5:25:ae:1f:0e:b2:8b:df:1d:
16:14:d9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:55:48 2026 by rpki-client