Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
File: tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft (raw, json)
Hash identifier: cXbrmkKRheKelWCTKSuvhFM1Sd8Qh1I/QwVxO+pTgSU=
Subject key identifier: E3:DB:DE:D5:BC:AC:63:B4:48:49:1C:AA:7C:01:45:E5:58:5B:44:D3
Authority key identifier: B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
Certificate issuer: /CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Certificate serial: 01A133A28372105A9C65C7098CBC7D8A3025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
Manifest number: 1A9F
Signing time: Tue 13 Oct 2026 05:00:50 +0000
Manifest this update: Tue 13 Oct 2026 05:00:50 +0000
Manifest next update: Wed 14 Oct 2026 05:00:50 +0000
Files and hashes: 1: Ay40Es4lmjK5Q5DTaQo_Rj0Il34.roa (hash: l6a+NksOUtbW9bPUki0o5wq7kn4tvxRKIpI840BR/qo=)
2: _6C7ZJIoO8hrlgkDOWBLtP8RmkY.asa (hash: t9M76dXMiyceR0U0QUt2/ZTaClfSexTzeZfzv7VPHnc=)
3: tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl (hash: wNHp3uvTslWUt3/AmeC5K3h4j9PFM+bYtIwpQOs+3jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:a2:83:72:10:5a:9c:65:c7:09:8c:bc:7d:8a:30:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Validity
Not Before: Oct 13 05:00:50 2026 GMT
Not After : Oct 14 05:00:50 2026 GMT
Subject: CN=e3dbded5bcac63b448491caa7c0145e5585b44d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:27:95:ba:de:9e:01:38:e6:dc:d1:4e:a5:22:
29:57:bf:00:20:b5:e5:67:67:d0:c1:cf:69:06:63:
ff:f5:db:ed:ba:c9:fe:7e:0a:5a:79:ac:32:88:ee:
d5:c5:5d:88:54:a2:64:0f:9a:48:7d:43:46:99:e7:
a7:76:f8:97:6f:6c:8d:bc:bb:66:4c:2a:a8:fe:46:
a1:a6:83:94:38:54:7b:15:58:87:f9:b6:1f:b7:3f:
aa:f7:4d:d5:7d:81:67:cc:b2:11:d6:b0:a2:20:f2:
9d:d1:1d:4b:b8:84:7a:48:0c:a2:b5:be:9e:ac:b8:
36:55:62:aa:53:98:bc:be:dd:9e:6d:6c:8e:e4:24:
26:d3:23:0c:6c:45:b7:6a:a4:7b:86:3d:83:b9:80:
f1:de:b5:9a:97:84:1e:df:6f:7e:d6:a0:09:c1:80:
9f:1e:ad:5e:41:fa:16:2e:00:a1:e4:1e:c0:01:27:
9c:e2:fa:b9:8f:4c:ba:62:7a:ff:07:94:1c:e5:4b:
1d:87:b6:9e:ef:74:c3:39:a3:ed:97:15:89:21:f7:
72:ff:6b:83:bf:0f:51:11:9b:78:71:4b:05:e5:cd:
f5:b9:71:fc:a8:8e:b2:df:57:d2:42:a0:25:83:12:
5a:cc:69:58:6a:e0:0f:95:3d:d4:c4:12:76:38:45:
01:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DB:DE:D5:BC:AC:63:B4:48:49:1C:AA:7C:01:45:E5:58:5B:44:D3
X509v3 Authority Key Identifier:
keyid:B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5b:ca:c4:89:d6:58:40:78:5b:4d:93:7c:a1:f3:cc:c1:c2:
66:fb:84:6c:df:e5:cb:9e:af:56:fd:e4:6d:ff:c9:ad:de:e7:
bd:6f:5b:b2:ec:82:50:74:34:e0:bf:99:c0:e8:be:22:71:51:
b3:9e:0b:9d:d4:13:40:e9:5d:36:8f:3a:5b:45:ff:5d:ea:f9:
ea:b5:65:33:1b:b5:60:4e:73:1a:ec:51:33:cf:f0:fe:6e:35:
13:b8:06:83:4e:cd:fa:8c:13:80:6b:b2:f9:42:22:62:5f:3c:
b2:96:2c:39:32:87:d9:0f:b5:4f:86:84:03:b6:a1:a3:56:3b:
63:c3:6b:15:a0:c8:81:af:eb:cb:09:ce:88:a9:f6:84:b1:78:
b8:6d:3a:96:2a:dc:15:2d:c3:54:f8:9d:fc:dc:c3:1f:91:c3:
a8:4a:53:94:3e:ff:65:5a:2a:96:0f:69:a0:81:b3:84:cb:1e:
1d:34:79:0a:1d:f9:93:61:e7:31:c5:c1:c5:3f:ab:55:43:04:
d3:4c:b0:8f:23:ca:33:b9:29:82:e1:db:be:f3:8a:7a:c6:ed:
6d:ea:f4:68:97:fa:fe:d9:55:b7:f1:04:8d:95:fc:db:60:99:
d9:d0:a5:75:b5:bc:82:01:4b:47:6e:b8:90:a1:18:3b:03:55:
7c:c9:3b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 14:03:28 2026 by rpki-client