
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
File: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft (raw, json)
Hash identifier: J3fymxl1LdMxltShb3abzGRAoHrcvF4N0f7BgYFdAu0=
Subject key identifier: D0:52:FB:D2:EC:12:9B:46:EC:15:42:38:70:15:21:49:77:A3:A2:06
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Certificate issuer: /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial: 01A0D0801398F26E9CB7916D69BB4968AE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
Manifest number: 0B43
Signing time: Wed 23 Sep 2026 23:00:49 +0000
Manifest this update: Wed 23 Sep 2026 23:00:49 +0000
Manifest next update: Thu 24 Sep 2026 23:00:49 +0000
Files and hashes: 1: pf4imHRU2e6GfZe8rQKhzIc5LBg.roa (hash: dsJgVjGxo4nm0IH9s2QS1ktYyvlCS7K764cL/mH8BNg=)
2: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl (hash: Lxg2/DWU6VTv7FEfKfCqZzdGJDVDvcX587QLRxHO+Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:13:98:f2:6e:9c:b7:91:6d:69:bb:49:68:ae:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Validity
Not Before: Sep 23 23:00:49 2026 GMT
Not After : Sep 24 23:00:49 2026 GMT
Subject: CN=d052fbd2ec129b46ec1542387015214977a3a206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:33:4c:70:99:4b:9d:9d:cd:0b:c6:b5:53:
9e:b6:66:29:ac:18:c0:5d:ee:8f:f7:26:dc:b1:21:
64:00:ae:5e:e2:56:a6:9e:66:7b:b9:7c:f5:fc:f8:
9e:07:b7:a9:bb:bf:e6:22:86:5c:83:50:fb:ee:99:
d6:0d:a3:66:65:6d:ca:dd:58:df:96:79:1a:9f:b3:
a8:d1:83:7a:9b:8e:32:1e:f3:be:2a:a6:aa:07:30:
c6:04:e2:35:a3:a4:d9:3e:59:8b:8f:ce:fb:78:20:
ba:61:7c:5e:7f:a9:08:38:7a:72:e1:04:0b:e0:b3:
31:07:f8:22:95:46:88:97:d3:77:99:2a:7a:c3:31:
dc:05:9a:68:46:09:c1:cf:6f:a4:8a:6c:1f:ed:10:
92:65:83:a1:21:ca:8c:a0:0e:a9:6f:80:9c:72:68:
04:41:f8:f2:ea:fb:49:d4:51:0a:6f:80:b8:6c:6e:
db:3b:e7:19:b5:0f:fd:cf:5b:45:85:cc:a9:fa:c6:
cb:2b:33:94:3c:a6:ab:bf:d1:b6:b5:97:dd:d7:a6:
cc:08:e6:89:fe:71:66:35:80:d9:f4:f0:55:0c:13:
61:0b:e1:8a:3c:9c:7a:83:bd:0a:79:9c:2c:5c:46:
b3:bd:8b:33:a2:9f:d7:b1:07:1e:95:a2:5e:0b:a1:
11:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:52:FB:D2:EC:12:9B:46:EC:15:42:38:70:15:21:49:77:A3:A2:06
X509v3 Authority Key Identifier:
keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:67:0c:a6:39:d8:6e:0c:17:db:e8:55:40:f6:5b:78:54:0e:
29:cf:7f:c3:52:84:66:38:8d:18:7a:6f:e8:7b:4f:fa:a5:d7:
3c:c9:90:75:f6:3e:44:fb:13:6e:65:05:6a:95:86:d0:0a:2d:
a3:92:6f:77:c6:04:7a:5c:0e:fa:cd:c4:fe:e4:07:ed:d9:06:
ba:5d:65:60:cf:db:e1:e1:ee:87:55:42:1f:25:c5:ae:fa:ff:
61:f0:4d:73:0d:5e:96:c7:4a:4d:80:21:73:bd:85:91:ad:ee:
19:85:bc:19:f0:ee:21:82:8e:e9:3a:ff:af:e8:b1:81:ea:41:
d5:d6:5c:77:b2:c4:87:01:df:96:af:ad:a9:aa:08:24:45:e0:
4f:fb:c7:c8:c1:ed:80:fa:ee:2c:fd:66:b2:6a:ab:cc:5d:b1:
13:27:c3:05:61:5d:6d:a6:76:42:14:92:f9:1b:59:42:21:ec:
47:0e:02:8c:c8:e5:ce:98:60:83:2b:bb:4d:63:6b:4f:aa:01:
30:ef:5b:75:f5:7b:2b:34:88:59:c4:b3:27:f9:c6:d2:f6:07:
ca:49:4c:c3:0e:c0:fd:c9:74:d8:22:fa:e6:26:d8:7d:13:d7:
45:3f:79:ac:d5:af:d5:c9:97:c3:04:e2:6d:80:58:17:e6:8b:
90:c3:05:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:14:59 2026 by rpki-client