Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
File: txRZXFDDUZIbDemldUChXlwcYYo.mft (raw, json)
Hash identifier: 4TH8UVlcK94a0qVb9DamY4NV8ipRvFfMcEyVEas3TDY=
Subject key identifier: 34:73:87:E8:F1:F9:D8:4A:B4:1C:A8:08:C0:AA:D6:E0:A7:6C:ED:30
Authority key identifier: B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
Certificate issuer: /CN=b714595c50c351921b0de9a57540a15e5c1c618a
Certificate serial: 01A0DEAA4D47E77127BB5B34109455B813C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
Manifest number: 14D5
Signing time: Sat 26 Sep 2026 17:01:37 +0000
Manifest this update: Sat 26 Sep 2026 17:01:37 +0000
Manifest next update: Sun 27 Sep 2026 17:01:37 +0000
Files and hashes: 1: GuWBmwhJapEp_BmmuNbZSMGsF-Y.roa (hash: XKoJ/kEd+7q2jht4EhlLR7+g4VG6e/EP//UCSF6Kcuw=)
2: txRZXFDDUZIbDemldUChXlwcYYo.crl (hash: GDJ/rFDJ1rOL/YdIVJuKu9GTRnzzIlIZWUhVhX1h5ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:aa:4d:47:e7:71:27:bb:5b:34:10:94:55:b8:13:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b714595c50c351921b0de9a57540a15e5c1c618a
Validity
Not Before: Sep 26 17:01:37 2026 GMT
Not After : Sep 27 17:01:37 2026 GMT
Subject: CN=347387e8f1f9d84ab41ca808c0aad6e0a76ced30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:fc:e4:50:76:aa:e3:db:bc:f9:10:0a:01:
66:e6:19:80:17:f5:a2:28:53:ea:34:99:f4:3b:6b:
be:a6:99:b1:10:49:db:a7:ea:8a:90:82:55:dd:d7:
bc:fa:b0:b1:12:bc:96:ee:12:31:5d:0a:d8:3c:bb:
47:bd:99:06:b3:d1:1a:44:75:16:3d:ea:d6:0a:6b:
b0:69:c0:bb:03:28:25:f9:06:d5:0d:ff:74:d5:e6:
5c:2c:db:4b:ac:f2:a8:64:96:dc:dc:3d:45:ff:26:
e7:28:1e:f7:0d:3f:51:e3:1d:fe:72:a8:68:d0:a9:
3d:4a:d0:ef:f1:bb:01:87:6e:b7:4b:a4:fc:54:62:
2c:56:af:1e:0b:0d:a2:25:17:95:c5:d3:50:ae:be:
96:e3:a1:70:05:aa:fe:5a:e8:48:d9:7e:9b:e9:c7:
14:45:67:6f:fe:7f:72:b4:9a:66:ec:95:7f:48:27:
2e:52:a9:1c:64:ae:8b:e8:65:f7:79:83:6f:ab:60:
6d:b9:49:d2:81:52:98:d0:eb:13:11:b6:e0:72:89:
9c:06:fb:e1:dd:37:e8:c7:e4:a4:36:76:f2:f2:87:
24:f8:22:6a:49:63:b7:9b:51:2c:2d:8a:b3:28:37:
bb:20:81:d9:82:7d:5a:59:40:7f:92:75:fd:2e:ac:
ca:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:73:87:E8:F1:F9:D8:4A:B4:1C:A8:08:C0:AA:D6:E0:A7:6C:ED:30
X509v3 Authority Key Identifier:
keyid:B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d9:76:fe:a7:f6:2c:db:ec:e4:50:05:13:dd:eb:4c:7f:9f:
fb:2c:e5:be:39:ff:e9:17:29:4c:d5:13:82:d7:e7:61:f1:cf:
46:0a:95:4f:2f:c7:ee:08:ed:77:5c:15:cd:50:ff:e3:16:41:
18:62:e1:21:a7:e1:b2:b8:6a:d0:a4:d1:fc:98:1d:e5:03:d2:
56:82:42:e0:3a:2e:ab:16:b0:fa:a5:44:a3:e6:e0:0b:82:7d:
ad:74:04:16:9b:8d:a7:54:53:20:ee:57:df:55:13:95:ff:b2:
c8:41:d6:97:cf:e7:de:12:44:76:d5:3d:46:fb:d4:20:5a:be:
46:4b:78:65:34:73:ef:da:90:c3:1f:2a:8d:af:62:89:d5:b2:
95:20:f0:2b:de:d9:a2:f4:e8:13:fc:7c:09:dc:35:40:95:b9:
cf:e5:34:f5:23:49:11:5f:7f:d2:59:85:bb:0e:95:66:c1:06:
59:37:ee:db:30:df:5b:e0:97:96:29:af:3d:5e:9d:e7:8e:97:
a9:be:8a:48:56:36:9d:6b:b9:ce:cb:0d:c9:44:5d:18:8f:48:
5e:c6:db:b4:7b:ef:ef:4e:8a:7b:25:da:20:1e:83:95:bb:ef:
05:aa:62:23:ca:98:00:b7:8f:08:30:5b:82:89:4b:6b:e3:fe:
98:32:46:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:53:52 2026 by rpki-client