Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: OCNnVF5SwBOIZKKsDtuefOV5tTq8jBDD70J6b9LLYBU=
Subject key identifier: 68:4B:C2:1D:1C:21:5D:67:04:6B:64:3A:B1:80:F0:4D:3F:AB:C5:AC
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 01A143165E7548BED997FB183AB4164E6CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 09F1
Signing time: Fri 16 Oct 2026 05:01:41 +0000
Manifest this update: Fri 16 Oct 2026 05:01:41 +0000
Manifest next update: Sat 17 Oct 2026 05:01:41 +0000
Files and hashes: 1: F5-0m80tGgQaB6VZO47ty9lw_m0.roa (hash: oQoBwhHoNc0uwJ0ShH4VE+ATyTC8Z15nDhm83FZUfmE=)
2: snDtm5EPq4bt8uwg0uwMS4ldr3M.roa (hash: Re/iBzYv9n7wH6AvwpA38RzBVI5qHPbHIdU0N2m905E=)
3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: gqq8p25s8LuLiwp/fMNYR3nEoAOwFNCKc8UiUtH242Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:16:5e:75:48:be:d9:97:fb:18:3a:b4:16:4e:6c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: Oct 16 05:01:41 2026 GMT
Not After : Oct 17 05:01:41 2026 GMT
Subject: CN=684bc21d1c215d67046b643ab180f04d3fabc5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:99:27:07:57:72:90:a5:80:3a:6f:24:00:
ca:e2:9e:3d:b6:ae:67:44:76:77:99:2a:71:f9:6e:
e1:bb:e0:20:96:50:b2:48:a9:17:fd:85:8e:5a:43:
c7:a0:0c:d5:70:00:66:3a:f2:3e:3a:7c:0a:57:a1:
ea:4c:ea:5a:71:f7:bd:9f:0c:e4:46:2d:97:14:b6:
9e:59:51:f1:a5:f0:a5:e1:1f:c2:3f:b8:2d:9b:4d:
83:d5:da:d9:6d:5a:02:5f:1f:20:bc:a4:58:a7:32:
34:19:9d:da:42:8f:37:cd:50:f9:e2:24:02:7c:72:
27:56:22:b4:1c:56:c2:3d:3d:46:c2:cc:b7:fe:d5:
60:d4:0f:73:0d:34:fe:37:7d:ec:98:d7:52:7c:2a:
41:57:d5:f6:88:ec:d4:65:e0:0e:ce:33:61:ee:d8:
35:18:0b:9e:07:c0:f6:d2:e4:15:8a:2f:22:1e:fc:
04:06:e5:72:39:6b:f7:0c:57:e5:02:56:19:22:66:
fc:03:c2:f7:fa:a4:89:c3:59:3b:d6:c3:da:c1:7d:
43:70:64:bf:8e:79:00:03:5d:c3:0a:3f:8e:87:be:
28:7d:a0:8e:df:a6:d7:4b:97:40:65:96:21:43:74:
1a:86:2b:88:35:b2:29:15:1d:ef:84:ab:43:16:71:
31:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4B:C2:1D:1C:21:5D:67:04:6B:64:3A:B1:80:F0:4D:3F:AB:C5:AC
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:fc:c4:16:73:f1:45:c5:74:ad:bb:fe:4e:c5:b7:b5:82:09:
13:89:3f:60:b8:95:55:8b:1f:b8:a4:e4:7a:29:84:46:d2:1e:
d4:72:fa:c8:4b:8c:d2:31:32:16:a2:ac:59:60:60:e2:d9:06:
d7:1d:33:5a:d4:15:94:02:a0:94:c4:47:ea:0c:82:d9:71:c3:
91:2b:1f:05:b0:8b:97:9e:0b:0d:3a:d6:e5:91:b9:6d:80:7a:
9b:5b:98:03:69:f2:90:6c:8c:68:ac:28:77:12:54:9c:c1:37:
ad:71:0d:54:27:fb:4b:9c:75:24:5c:a7:c7:73:4f:fd:c1:dc:
31:26:c9:eb:10:ae:52:07:d4:4d:c3:8f:21:fb:ba:a0:28:9e:
b9:74:89:cd:dd:1c:54:30:40:bf:2b:36:82:24:4b:6a:9c:1c:
1c:55:c2:85:7d:7a:8f:6f:56:8b:62:75:b7:00:cc:c4:e6:2d:
87:35:94:13:72:3f:91:13:de:df:4e:8b:3e:1c:c2:84:bc:0d:
f3:ff:a1:c5:3e:30:dd:bd:dd:76:a3:b5:d9:5d:6e:88:a6:64:
d4:07:38:6a:05:60:b9:36:c1:93:26:59:14:c3:b9:e4:91:f9:
95:4a:d4:87:4f:91:94:5e:e1:22:1a:a7:f2:27:02:74:14:e9:
6b:73:81:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 11:08:28 2026 by rpki-client