Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
File: tRhBzcn2NZTd3CulmkATMYK1efo.mft (raw, json)
Hash identifier: owZmVCKW1ysPaXXQHJGtfrkQT5mxC3/zXMNJvZLT2zY=
Subject key identifier: 7D:E7:DB:57:1F:6E:0D:CA:5D:54:B4:AE:0B:56:6F:DC:32:7E:FA:92
Authority key identifier: B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
Certificate issuer: /CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Certificate serial: 01A0E9647B446C24A4AF16F07A63A39D6673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
Manifest number: 1A7C
Signing time: Mon 28 Sep 2026 19:01:11 +0000
Manifest this update: Mon 28 Sep 2026 19:01:11 +0000
Manifest next update: Tue 29 Sep 2026 19:01:11 +0000
Files and hashes: 1: gn4_joE3Kg7Iuvtn8_CsNV3N_rY.roa (hash: inZ7mhN1iTFUjJSaH+6rFZpFzgOqpsU8gKqes5JxewU=)
2: tRhBzcn2NZTd3CulmkATMYK1efo.crl (hash: WqLlW6EaAVH2lfcEgqeHixSa/krHLozAmyxjMTO/yF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:64:7b:44:6c:24:a4:af:16:f0:7a:63:a3:9d:66:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Validity
Not Before: Sep 28 19:01:11 2026 GMT
Not After : Sep 29 19:01:11 2026 GMT
Subject: CN=7de7db571f6e0dca5d54b4ae0b566fdc327efa92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bc:df:82:e0:53:b7:0e:1c:6d:6f:f7:29:c0:
57:e6:ad:a2:df:bd:b9:2f:58:ea:18:8a:a7:ed:e5:
9b:5d:05:16:07:2d:fc:16:22:d3:df:2c:6f:d8:6b:
87:5d:db:cd:de:c7:ed:ef:b5:fc:ce:b3:f8:3f:9b:
86:69:81:4c:4b:3b:c3:a3:41:4b:b9:86:2f:a5:40:
89:9e:ab:dc:aa:57:13:33:84:1b:6c:54:1b:cb:81:
22:54:15:3c:97:d9:ea:76:b0:e6:e3:83:b7:b5:75:
19:fa:f2:68:aa:6d:2d:d5:46:2f:57:a7:aa:a3:8d:
99:c1:c3:37:77:85:46:bf:79:b2:4d:12:fa:32:dd:
3d:d5:b8:90:67:ab:5b:a5:f2:a3:10:ef:93:e4:76:
df:1a:57:a2:1b:a3:cf:78:de:e6:3e:32:66:d2:89:
4b:39:47:73:a5:91:e4:f3:b5:5f:4a:86:f6:cd:1e:
05:83:79:a4:30:dc:78:1e:05:9f:0c:18:e5:9b:ac:
5e:8a:b3:ee:74:86:95:5a:50:80:24:af:0a:60:f5:
ad:8c:f9:16:46:b0:e1:50:a4:bf:5a:d4:a0:99:f4:
c1:ed:42:51:65:26:99:19:c0:db:5c:d2:eb:4f:e3:
c7:a4:9d:74:a8:3d:4e:f7:dc:81:b0:3e:4d:b5:a6:
06:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E7:DB:57:1F:6E:0D:CA:5D:54:B4:AE:0B:56:6F:DC:32:7E:FA:92
X509v3 Authority Key Identifier:
keyid:B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:d6:d6:f7:e4:18:b1:89:dd:4b:b4:f9:f5:8e:aa:86:35:fa:
6e:21:cb:26:eb:8d:8b:38:7a:0e:a5:5f:4c:bc:be:27:25:7a:
25:35:da:f2:13:41:53:95:22:7a:cd:c8:f8:d7:3c:ab:a1:ea:
7c:12:db:84:35:09:ad:dd:07:31:92:2c:63:92:e6:66:2d:df:
c6:f0:36:1c:a5:3c:23:49:15:49:0f:7c:8f:3a:9f:15:3e:dc:
0f:14:0d:60:14:d6:9c:54:b4:b0:68:9b:6d:0d:77:d2:f3:bf:
b8:bc:92:27:68:12:3c:94:b0:cd:bf:94:62:8b:c1:35:ab:9d:
53:29:46:fc:62:46:95:52:10:29:d1:2f:0b:2d:3a:dd:cb:4b:
81:57:55:91:c6:30:c3:ab:76:ac:02:81:36:61:b3:c5:e4:48:
df:28:8e:24:e7:6f:e6:97:1d:9a:3e:d4:b6:7b:9f:6e:8b:f3:
59:8b:27:9f:ec:23:9a:d0:f9:32:5d:34:52:e7:f1:5a:e4:26:
68:31:90:33:00:14:63:b5:50:ac:ad:7b:69:1e:f6:91:92:87:
11:fa:5c:58:69:0d:88:ec:fb:24:a4:13:5a:51:31:e9:73:49:
3f:6a:5f:80:f3:9b:18:03:2e:2e:4d:d3:d4:54:dd:fe:df:e8:
df:6f:b4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:26:22 2026 by rpki-client