Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier: YKIyGXKg/q7FHg92tNOuThRtPZ8CI6IL1AAtc5mvtnQ=
Subject key identifier: 4C:4E:68:5B:A6:D4:EB:22:8D:B8:51:E4:95:78:90:B9:A0:9A:E9:EC
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 01A0E8F65BF3EF0D32C601908FFD89A9A9EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number: 1A7C
Signing time: Mon 28 Sep 2026 17:00:54 +0000
Manifest this update: Mon 28 Sep 2026 17:00:54 +0000
Manifest next update: Tue 29 Sep 2026 17:00:54 +0000
Files and hashes: 1: b7WIoLNUFyReyBs5srL2P-7kWBY.roa (hash: KaUmjHHJdwqwRidv+DylDRGHxrEDsHhrz5N8o1v6ikI=)
2: qA1FSgo8W2WfbgMfxgehUTGINhY.roa (hash: QlYJVn46F259ZKkX99iXU3ryDNDtJ4SF3Ih4Ss1i1sM=)
3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: 6i/kalvjbEMhtxwP+XgxhkkCkE6hYbLTUT6FC7HuOYU=)
4: w1rSq9HiUPdlBfnJQU20TUnkDtc.roa (hash: e/N9+4KOJLWpyk5b2EmLTnk1UrTHENrYm4rgBBrmxPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f6:5b:f3:ef:0d:32:c6:01:90:8f:fd:89:a9:a9:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Sep 28 17:00:54 2026 GMT
Not After : Sep 29 17:00:54 2026 GMT
Subject: CN=4c4e685ba6d4eb228db851e4957890b9a09ae9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:88:54:d6:40:72:91:ae:01:a2:5d:09:28:
b9:8e:49:7d:4d:8f:b1:d3:97:9a:ce:fd:b1:ac:36:
f9:a5:dd:83:f4:73:ef:38:b6:3e:0e:06:0a:7d:bc:
66:97:03:ec:e9:18:8a:f5:b5:68:e9:66:76:ac:47:
2f:c7:71:8a:a6:2a:2b:a8:7d:7f:83:db:b9:c7:a1:
5f:5c:eb:91:31:d4:01:a6:10:fa:01:9b:96:51:93:
5e:8f:44:eb:da:b0:b9:6f:e6:b1:8b:0a:d9:bc:14:
f5:58:4a:b2:5f:84:38:d1:75:02:cf:41:cf:06:7b:
ff:22:fa:db:f3:0a:ba:96:8a:f9:f4:45:50:53:0b:
0d:40:95:ce:92:df:13:1a:ff:96:d4:07:c0:83:12:
a6:ea:d4:63:ba:93:98:c4:10:b9:9c:7b:ea:0e:93:
f0:11:fb:5a:d6:5f:12:99:72:c6:9e:de:93:94:74:
c7:4c:17:6b:94:45:42:d9:96:a5:2b:e7:6c:d5:00:
c1:ae:0c:d1:e1:64:9a:e1:f4:11:e8:44:65:78:2f:
f0:36:ba:65:72:bd:51:54:6d:44:3e:8f:57:50:f4:
99:30:39:e3:35:be:95:03:8c:17:9d:e7:26:c4:51:
79:c0:1d:90:d5:7a:8d:20:60:0f:1a:dd:01:58:eb:
ff:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4E:68:5B:A6:D4:EB:22:8D:B8:51:E4:95:78:90:B9:A0:9A:E9:EC
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b3:e1:e8:d8:8c:27:fd:3e:87:99:b3:5d:65:85:b5:ec:60:
ed:e0:e4:f5:99:b5:27:a9:ae:ee:d4:02:08:c4:37:30:27:df:
30:d1:16:77:83:6e:7c:6f:f7:cf:dc:26:db:75:b5:70:b4:48:
d0:05:45:ab:18:26:5a:be:c7:e9:d1:08:c0:d8:82:75:8b:0c:
fa:bc:83:2a:c1:a1:b0:0d:80:d9:53:14:71:4c:5d:ad:0a:47:
d2:73:f3:16:db:ce:0f:e9:3f:3a:3b:29:3f:f4:e0:18:9c:1a:
7c:36:d7:e7:b6:99:12:00:29:16:a6:28:a9:52:10:00:83:ed:
f8:8b:ea:b4:e4:f9:d6:db:e5:33:b8:e5:ca:7b:e6:a9:d4:00:
1a:1a:24:8c:1a:e9:93:d5:58:a1:fb:71:47:b8:62:fe:23:78:
d1:7a:a8:8e:ed:58:c2:ef:f7:43:8e:4d:7b:95:cb:01:a0:6f:
41:20:38:ea:5d:f3:a4:c6:14:50:91:7c:97:a0:82:bf:53:c2:
34:db:76:c4:eb:f3:b3:53:b0:32:83:0d:ae:3d:e7:cb:40:c5:
fa:db:70:84:64:c3:3c:29:a5:86:db:de:1f:05:1e:1a:d6:bb:
46:32:b3:bd:fb:af:54:1f:0f:37:54:db:17:0d:6a:99:4e:11:
22:7f:b3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:42:50 2026 by rpki-client