Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
File: tK_MhnJK4o7jZE0b6ehSCj7zia0.mft (raw, json)
Hash identifier: xh1rxfAtAopy3p4PLFYPf+5Fyh4zEauH84UfhF0LSVs=
Subject key identifier: A8:DE:EA:4B:22:73:7A:AC:4F:61:2A:D9:E4:66:AC:41:48:13:B8:87
Authority key identifier: B4:AF:CC:86:72:4A:E2:8E:E3:64:4D:1B:E9:E8:52:0A:3E:F3:89:AD
Certificate issuer: /CN=b4afcc86724ae28ee3644d1be9e8520a3ef389ad
Certificate serial: 01A0E5511928D5564D651B5C6CDEA342AFB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
Manifest number: F0
Signing time: Mon 28 Sep 2026 00:01:32 +0000
Manifest this update: Mon 28 Sep 2026 00:01:32 +0000
Manifest next update: Tue 29 Sep 2026 00:01:32 +0000
Files and hashes: 1: tK_MhnJK4o7jZE0b6ehSCj7zia0.crl (hash: I5bKqvRxhhKPAw/8Mva/Be3ibpSYBI138OHV04e9wGE=)
2: xknKtTv3aOJfGX6wPs3f3yNuujM.roa (hash: UAJG/h4ZBqmm+2hMDaAp1u3zKvAAvYZrIBtFkvMHGHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:51:19:28:d5:56:4d:65:1b:5c:6c:de:a3:42:af:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4afcc86724ae28ee3644d1be9e8520a3ef389ad
Validity
Not Before: Sep 28 00:01:32 2026 GMT
Not After : Sep 29 00:01:32 2026 GMT
Subject: CN=a8deea4b22737aac4f612ad9e466ac414813b887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:99:86:32:12:19:56:59:cb:27:73:fb:cd:d8:
78:8c:3d:c7:a4:78:47:b5:8a:a9:e2:09:27:7e:ce:
25:9c:9f:01:bf:71:38:49:d7:50:67:b5:e0:64:aa:
70:9f:08:71:c2:08:dc:66:96:87:2e:89:41:ed:f8:
4c:e8:d9:7a:a8:92:5c:90:d8:99:92:28:72:26:d3:
2c:c8:69:54:dd:c0:a0:d0:ff:37:ff:7d:13:6e:1b:
2c:42:4c:c5:fa:c4:1a:d6:cd:6d:45:c1:5b:6d:db:
44:b1:15:d0:5a:25:7c:ef:59:bf:bf:b8:19:28:91:
11:fa:69:d3:65:65:0f:d6:10:8c:91:3a:00:61:c6:
2f:33:33:fa:21:34:a7:bc:c1:4d:2f:2c:cd:7a:33:
e8:40:82:34:a1:a2:76:96:0b:47:ab:9c:26:e6:c2:
fd:05:da:38:e4:21:1d:a5:b0:bd:93:3b:8e:80:ec:
b5:77:0f:10:07:64:3d:50:93:8a:b2:91:74:2e:4a:
70:a3:f7:13:25:ba:57:50:bb:69:1a:9d:60:3b:63:
2b:65:eb:54:6f:16:46:f9:f3:fe:f4:a4:aa:f9:d4:
3a:cf:e8:93:e4:1a:ef:b9:9f:70:ad:30:03:08:e3:
84:d5:fc:1a:87:60:ab:0c:eb:1d:bc:33:60:3a:e5:
64:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DE:EA:4B:22:73:7A:AC:4F:61:2A:D9:E4:66:AC:41:48:13:B8:87
X509v3 Authority Key Identifier:
keyid:B4:AF:CC:86:72:4A:E2:8E:E3:64:4D:1B:E9:E8:52:0A:3E:F3:89:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:17:11:01:cc:d3:07:0d:03:0d:c5:85:78:c8:d6:30:63:92:
9f:47:35:51:42:33:26:cc:ed:7b:ad:51:8a:91:83:f5:be:84:
fc:22:ff:b3:24:3d:50:61:1d:46:7e:9e:ee:d8:81:65:22:8b:
fc:09:9c:ef:a6:7f:5a:d5:79:e3:0e:26:67:5d:04:e7:0f:35:
33:2d:ff:3c:be:81:c0:42:b7:59:b9:ec:e0:80:83:58:da:32:
10:36:65:d2:a7:63:83:1c:4a:31:c7:57:90:5f:1d:73:db:65:
fe:37:96:38:95:0e:91:d9:ac:4a:dc:b8:79:26:e3:4b:0b:2e:
6b:1b:be:71:fc:87:c1:a5:f4:56:fd:f4:04:f9:0e:37:2b:7a:
26:d8:9c:5e:78:90:c4:dc:56:d9:b2:e0:a3:a6:09:b3:b3:39:
d0:10:75:2c:20:55:7c:14:b9:55:29:66:50:27:71:09:ea:a8:
5c:6a:c3:8b:f3:97:db:a0:db:5b:f1:59:8a:4c:22:e8:0b:35:
7c:82:c5:99:60:35:7c:64:af:86:80:8d:99:5d:dc:2a:60:50:
02:98:7e:dc:68:51:e0:23:29:f1:ef:3e:a9:fb:08:6a:f8:e9:
2b:49:79:cf:5d:11:bb:c4:ea:ee:2a:62:91:f9:94:25:5c:b7:
4d:c9:33:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 03:37:27 2026 by rpki-client