Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
File: tYUi2sa83oxIEzNZkTKhYgDmpb4.mft (raw, json)
Hash identifier: 6uQjjIx5/Wmp+WBee44LEd+gEK+WYfMWDYbhE6DM3mg=
Subject key identifier: 22:A9:CE:A2:82:79:C8:61:C4:F8:5E:FF:66:BF:D4:7E:E4:AE:7E:64
Authority key identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
Certificate issuer: /CN=b58522dac6bcde8c481333599132a16200e6a5be
Certificate serial: 01A0DFBC7064A1E45D465D0B38BA6DD20850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
Manifest number: 0DCE
Signing time: Sat 26 Sep 2026 22:01:03 +0000
Manifest this update: Sat 26 Sep 2026 22:01:03 +0000
Manifest next update: Sun 27 Sep 2026 22:01:03 +0000
Files and hashes: 1: 18A7L44_0ILwZodGFUSDQ2eubuc.roa (hash: TWAVfWQBRDutGoFMNTBpWa6veuSEAlw+UuaoPc+ikg4=)
2: 2BnXbJN0-tuiSw2yPhv5M-hIP_g.roa (hash: 7StJAAew0duMZOz948e0I6qxBTgJCwCzq3+RHVzjmKc=)
3: tYUi2sa83oxIEzNZkTKhYgDmpb4.crl (hash: Fv9cV4HiG2HhN81u504KYZ0Va/TXO3eGN7mwQpP0dmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:70:64:a1:e4:5d:46:5d:0b:38:ba:6d:d2:08:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b58522dac6bcde8c481333599132a16200e6a5be
Validity
Not Before: Sep 26 22:01:03 2026 GMT
Not After : Sep 27 22:01:03 2026 GMT
Subject: CN=22a9cea28279c861c4f85eff66bfd47ee4ae7e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d6:43:c5:b0:68:25:b1:d0:f7:42:a1:ba:3c:
b7:58:3a:fd:ac:4b:ef:24:33:eb:e9:e4:3d:4d:cf:
ea:7a:53:90:e8:66:18:6a:2d:0d:ac:f5:b9:4b:36:
40:24:20:c5:59:69:e5:57:47:34:b0:e5:04:22:9b:
3b:89:c8:4a:fb:43:d2:78:35:57:df:5c:c1:6e:ed:
40:f1:f6:b3:b0:99:18:28:03:ae:80:5e:84:2b:c0:
26:dd:f4:c8:ff:b1:c8:1b:c3:73:d6:45:b2:80:25:
73:eb:62:61:a4:c5:ef:f2:44:75:34:48:23:84:d9:
f4:30:d4:72:6c:21:7f:b1:c7:70:9e:d7:28:aa:dc:
13:70:14:ae:d2:1b:6f:b7:a7:f8:dd:e6:50:50:e1:
f7:24:24:bd:14:6b:36:0a:a2:e3:e7:28:20:02:c1:
25:9e:93:13:1b:ef:16:2d:99:43:d4:22:19:b6:20:
cc:4f:0b:eb:34:1a:cc:90:f8:96:1f:ae:a7:f6:f5:
25:f9:c9:ca:74:41:f6:5e:88:41:60:4b:9a:3d:05:
b0:de:98:0a:51:ce:e1:3c:80:4d:a0:31:9e:ec:3b:
f0:f7:18:82:ac:90:e2:5e:d8:b2:67:66:00:f2:03:
6e:28:2c:34:4f:51:ee:2d:34:7c:6e:d9:2d:19:21:
9a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A9:CE:A2:82:79:C8:61:C4:F8:5E:FF:66:BF:D4:7E:E4:AE:7E:64
X509v3 Authority Key Identifier:
keyid:B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:69:8d:92:26:ac:e3:a2:7d:6c:7b:49:52:6d:34:2a:67:c5:
e4:b1:0c:0f:19:c9:36:98:01:5e:a2:57:29:9f:19:df:63:08:
13:64:45:94:e4:b7:b2:66:65:19:ea:3d:71:7f:ec:1e:56:c4:
ca:47:ea:73:d8:6d:3b:77:a4:2f:1c:27:62:3a:f4:36:c5:08:
40:0c:66:64:92:6c:34:d6:7b:7e:ce:0c:74:70:9e:da:76:75:
9e:fa:b9:ed:ba:12:c8:0e:07:2a:a9:1e:cc:bd:98:10:c3:57:
a4:b8:21:26:9b:6e:2c:1a:ae:16:e5:82:ea:2c:d4:90:bb:f6:
50:85:cc:81:de:e7:5d:d9:5f:e9:b9:1d:c9:b7:41:f4:e1:88:
09:c5:ad:42:9a:24:b7:da:6e:e3:3d:b9:25:c2:ae:dd:d6:d2:
dd:4a:42:8a:ef:5f:e0:01:aa:65:25:f9:0b:20:82:80:ef:91:
cb:ce:a7:20:e7:d6:5c:71:85:f2:9c:e1:a3:5b:43:22:aa:9d:
ea:cd:d8:fd:82:e1:59:3f:a8:cf:61:cf:28:23:e5:a8:84:ee:
1e:d1:b8:ec:44:1b:bc:b4:a6:04:8d:af:b7:52:60:c1:f5:16:
b1:8c:14:38:fd:db:92:b8:99:b3:43:e8:ea:d4:88:66:13:f8:
8d:1f:7d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:53:27 2026 by rpki-client