Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.mft
File: tLCkwjkjFNKKW2i2-vAgHqCgFLM.mft (raw, json)
Hash identifier: IvRafuiq9VQRSY7kxyjHp6HYj9ouWDNweQtpj49pcCE=
Subject key identifier: 00:66:93:50:49:BE:F3:78:43:03:F9:B4:DA:9A:6D:8E:8A:11:9D:22
Authority key identifier: B4:B0:A4:C2:39:23:14:D2:8A:5B:68:B6:FA:F0:20:1E:A0:A0:14:B3
Certificate issuer: /CN=b4b0a4c2392314d28a5b68b6faf0201ea0a014b3
Certificate serial: 01A0CCD9B274CDB86AB9627532D19689EE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLCkwjkjFNKKW2i2-vAgHqCgFLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.mft
Manifest number: 3F
Signing time: Wed 23 Sep 2026 06:00:13 +0000
Manifest this update: Wed 23 Sep 2026 06:00:13 +0000
Manifest next update: Thu 24 Sep 2026 06:00:13 +0000
Files and hashes: 1: nopMUUJTS0An2jLnhKvhz6wEdPs.roa (hash: 9seqKOVg1xtJT41JqrZrelanQQe9aZs4h0y4Rv603e4=)
2: tLCkwjkjFNKKW2i2-vAgHqCgFLM.crl (hash: 9ppMUiFFsLi1Y5VRnyFcCpDgE4HeB7SVA5awEyqC99Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLCkwjkjFNKKW2i2-vAgHqCgFLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:d9:b2:74:cd:b8:6a:b9:62:75:32:d1:96:89:ee:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0a4c2392314d28a5b68b6faf0201ea0a014b3
Validity
Not Before: Sep 23 06:00:13 2026 GMT
Not After : Sep 24 06:00:13 2026 GMT
Subject: CN=0066935049bef3784303f9b4da9a6d8e8a119d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:2a:5e:74:2d:bf:60:f2:47:73:06:c2:08:
15:ad:4f:fc:ab:29:d0:c8:44:86:73:4b:2e:5d:94:
6f:a4:b2:c6:d9:46:c9:8e:ad:db:f8:83:72:b2:ba:
12:ce:ec:11:b0:4f:2c:b0:f2:d5:83:52:b8:5f:9d:
f0:65:b7:c8:40:4a:02:31:b4:34:8f:f2:2a:ed:1c:
4c:32:46:9c:63:3c:35:7d:c8:09:33:cf:aa:82:cc:
2c:2e:59:44:51:79:34:bf:32:cf:f6:ba:7b:5a:01:
1a:01:dc:c2:1f:f6:d2:e4:e7:73:b5:f0:3e:1d:a4:
9e:9e:78:ab:c4:e7:f4:8f:86:85:81:53:be:73:6d:
b0:a4:8c:c4:e1:8e:9f:69:f8:03:97:70:d5:9c:74:
32:24:58:7b:f1:62:4a:01:e4:de:70:6f:9c:bc:f2:
ec:74:5d:a6:7a:f1:ca:d7:d8:27:64:3a:8e:d8:85:
38:4f:18:3c:b3:9e:10:75:e9:78:cd:37:46:33:68:
ab:ba:46:de:04:43:f5:a2:9b:fb:e7:2a:9e:f7:5b:
e8:55:7c:ea:e3:dd:3c:04:1e:16:e9:9f:6d:a3:7c:
04:76:b2:ca:04:a7:5a:59:d8:65:94:0b:2d:c1:74:
0e:4e:d2:58:6f:40:c7:0e:e9:18:4b:eb:13:af:73:
e1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:66:93:50:49:BE:F3:78:43:03:F9:B4:DA:9A:6D:8E:8A:11:9D:22
X509v3 Authority Key Identifier:
keyid:B4:B0:A4:C2:39:23:14:D2:8A:5B:68:B6:FA:F0:20:1E:A0:A0:14:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLCkwjkjFNKKW2i2-vAgHqCgFLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d3:1e:16:cc:20:72:c4:b6:d8:02:93:fa:e2:25:50:d1:7c:
e4:93:9c:e0:9a:cd:16:53:62:ca:4d:ce:c9:fb:5f:ad:aa:f0:
d6:5c:0f:4a:bf:0a:cc:b0:74:f4:2f:99:c5:bc:10:b7:3a:d1:
4d:69:d9:32:4a:ae:90:96:28:7b:ed:94:3c:b7:5a:b3:ce:59:
33:7d:0b:4c:65:94:e0:01:3a:df:98:b2:e0:6d:b2:f5:6a:54:
1c:ef:23:ce:69:17:2a:e3:ef:b9:58:46:8b:9c:7e:70:89:9a:
9e:ea:b9:7d:6c:74:f9:58:5a:a7:bf:8e:a3:3e:20:72:41:72:
c1:e9:c9:ac:49:9c:6d:83:f8:89:9e:56:fb:b4:cd:8f:09:d5:
18:41:13:14:ef:72:f5:43:3c:05:74:9d:bb:72:90:06:a6:f8:
52:49:5a:a2:8f:7b:ab:0a:2c:69:82:3e:e7:af:cf:e2:dc:2a:
91:21:d4:09:17:b0:7f:5c:b1:90:2a:f0:16:60:5d:39:9e:4e:
58:ee:c6:33:4b:42:3f:58:ce:dd:2e:c9:f0:0b:9c:75:43:b3:
b9:cf:64:71:28:55:c9:a2:e8:7c:60:6a:03:56:c6:df:1c:04:
f3:2f:81:1e:e8:e7:03:96:e1:38:8b:a9:0d:b9:35:79:a7:89:
df:4f:12:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:49:10 2026 by rpki-client