Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
File: tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft (raw, json)
Hash identifier: O55zJX+ukgGjNKNARmu3WL4b8W/JaO32E4/VyKrBDXU=
Subject key identifier: 36:2A:F4:52:9E:FD:88:23:38:B5:48:4A:20:D0:7C:71:8F:DD:8F:C7
Authority key identifier: B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5
Certificate issuer: /CN=b483bc0a71a52d0cf3989522367575959ebdcef5
Certificate serial: 01A10701393707B65C8CDFF5DECEE91B00FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
Manifest number: 1A16
Signing time: Sun 04 Oct 2026 13:01:23 +0000
Manifest this update: Sun 04 Oct 2026 13:01:23 +0000
Manifest next update: Mon 05 Oct 2026 13:01:23 +0000
Files and hashes: 1: qJnVj3Zs2i38NS_GvtNSRBYOWbE.roa (hash: h7mzOdGL4lo+Kqx9x5P2yddSOacnumyUrjBXBH0gi30=)
2: tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl (hash: XYNjCoONM3R4RMC4HDYneZd4JDJ8Y+fAA6b0ygRyv6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:01:39:37:07:b6:5c:8c:df:f5:de:ce:e9:1b:00:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b483bc0a71a52d0cf3989522367575959ebdcef5
Validity
Not Before: Oct 4 13:01:23 2026 GMT
Not After : Oct 5 13:01:23 2026 GMT
Subject: CN=362af4529efd882338b5484a20d07c718fdd8fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b1:f3:f3:1e:4c:5c:9d:bd:6f:09:5c:ed:ee:
2d:50:81:e7:c7:f6:04:45:5e:fa:e1:6e:ad:15:8a:
23:7b:fe:c7:ec:0f:44:5b:71:b2:49:d3:74:c5:c5:
f3:9d:ac:87:74:b7:ae:06:ae:72:df:f6:da:d8:9a:
2d:4d:e1:3a:44:3b:1b:7a:c9:d2:d7:f8:fa:bf:c9:
66:90:60:bb:2f:26:d8:dd:e9:72:0d:f7:1f:f4:e1:
df:12:0e:39:0b:85:11:7b:33:bd:f5:2f:60:30:84:
86:1c:b2:e3:09:2e:01:28:6d:1a:b1:a7:8c:aa:ae:
03:d3:71:37:c3:dd:1b:24:63:c3:c4:db:fc:e3:75:
ec:8a:d3:8e:5b:14:33:cf:1a:54:ba:3a:cf:52:5e:
58:64:3a:d5:35:e9:b1:e0:1a:1f:6b:e2:18:69:1c:
cd:2c:1c:51:69:69:de:80:9a:25:71:e6:25:f9:a3:
93:da:a3:0f:09:f1:bb:20:b2:35:88:28:b5:bb:8b:
34:be:19:e2:c2:b5:3c:ba:44:71:ba:91:91:c9:77:
2a:44:b3:7e:2a:74:63:3b:7f:b1:5d:80:ef:2a:b9:
66:eb:83:6e:76:3d:a9:9f:29:1b:94:00:32:0f:c2:
1e:20:29:d9:1d:80:76:ad:84:95:16:69:e2:c5:c7:
9d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2A:F4:52:9E:FD:88:23:38:B5:48:4A:20:D0:7C:71:8F:DD:8F:C7
X509v3 Authority Key Identifier:
keyid:B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:db:8d:bf:5b:0b:eb:f0:c3:ab:82:f8:e2:8d:bc:4b:6f:78:
27:ab:bf:2f:38:1d:5e:d4:f7:15:90:30:95:82:86:60:74:37:
31:17:de:a9:7d:ca:1b:86:77:bb:9d:13:f7:2a:cd:dc:c8:e5:
55:fc:c7:94:c7:80:9c:c8:e4:dd:c9:84:4a:63:fb:cf:90:46:
d3:6a:06:75:c4:cd:d1:db:32:fa:f4:31:88:3a:32:74:98:c0:
ee:33:ba:7c:87:85:57:c4:7b:e7:0e:25:71:3a:56:d6:2d:89:
65:a9:07:d7:b6:4c:8d:6e:5c:54:d7:4d:d1:2f:9b:44:39:5f:
93:a5:b0:a0:39:a0:6b:62:78:d9:05:d3:2a:a7:47:19:65:1f:
9a:87:37:68:f0:e0:70:77:61:e3:29:41:60:c7:c6:39:50:8c:
81:3b:ae:5c:0d:63:86:53:23:03:cd:9e:31:1f:05:3f:92:ab:
3b:b2:17:7f:6e:c6:16:1c:55:bd:a7:67:3d:ea:19:54:48:6b:
90:0a:30:cb:cb:50:cc:7c:bc:f4:4e:2c:a0:7f:c4:bb:b4:2a:
18:13:e3:c0:cb:af:4c:29:ad:5e:b4:54:94:39:92:b3:8b:60:
35:23:0f:64:9f:d5:44:4f:8e:5a:b1:4b:c7:0d:87:48:07:da:
ee:3d:bb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 00:23:50 2026 by rpki-client