Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/tEoCLTL71XRRhunCgtrO8p5G_80.mft
File: tEoCLTL71XRRhunCgtrO8p5G_80.mft (raw, json)
Hash identifier: demKrYTUCTl/p518vNKU/pufQpg/uvfI9/84Q0csWXs=
Subject key identifier: 7A:D3:4C:27:EB:5A:40:9B:65:2C:F4:39:62:EF:44:0A:9C:B8:40:93
Authority key identifier: B4:4A:02:2D:32:FB:D5:74:51:86:E9:C2:82:DA:CE:F2:9E:46:FF:CD
Certificate issuer: /CN=b44a022d32fbd5745186e9c282dacef29e46ffcd
Certificate serial: 01A0EB1BE7DAAFDD2298F84D44B47CBF8AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEoCLTL71XRRhunCgtrO8p5G_80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/tEoCLTL71XRRhunCgtrO8p5G_80.mft
Manifest number: F3
Signing time: Tue 29 Sep 2026 03:01:09 +0000
Manifest this update: Tue 29 Sep 2026 03:01:09 +0000
Manifest next update: Wed 30 Sep 2026 03:01:09 +0000
Files and hashes: 1: 4KfNsVa_I4qv3IvYqPhzl5H5cEY.roa (hash: 5fROQVYJ5qv2bh07hko8TbraDseoO0JolyoTm/L1QEk=)
2: FM7w_olBrH_vUX4wGp3g-PNziRc.roa (hash: +qvXzAUtWEvi7iNYCoyqclf72yP41yfkRoQT154u9Z8=)
3: tEoCLTL71XRRhunCgtrO8p5G_80.crl (hash: DY34wsjZgWL3aWLbgOXdmu7wEg8CTdw7S7Q9R5/lkbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/tEoCLTL71XRRhunCgtrO8p5G_80.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/tEoCLTL71XRRhunCgtrO8p5G_80.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEoCLTL71XRRhunCgtrO8p5G_80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1b:e7:da:af:dd:22:98:f8:4d:44:b4:7c:bf:8a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b44a022d32fbd5745186e9c282dacef29e46ffcd
Validity
Not Before: Sep 29 03:01:09 2026 GMT
Not After : Sep 30 03:01:09 2026 GMT
Subject: CN=7ad34c27eb5a409b652cf43962ef440a9cb84093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:79:24:72:ae:e8:f3:98:ba:c7:a9:03:a8:28:
4c:e5:15:e4:8b:b9:b9:1d:1d:8e:ea:ea:58:59:bc:
ac:82:45:77:36:7c:42:1f:b7:37:44:01:9c:14:e9:
3f:a4:20:5d:ea:94:42:35:fa:1a:37:e5:5e:13:db:
5a:5b:d4:ec:10:e6:85:0f:f7:a4:bc:b5:a8:41:e3:
09:7e:80:f3:1d:16:93:f7:9f:93:67:3f:9a:f4:74:
93:f6:51:8e:51:39:9f:30:76:25:af:f5:23:15:25:
f3:9e:d6:1c:13:42:fd:53:ee:26:9c:80:31:4b:ad:
6f:55:5f:69:3b:65:bb:e3:79:08:6a:36:68:7d:f8:
34:f8:37:dd:6c:aa:f6:f1:c4:1f:b0:a8:d4:78:85:
93:25:3e:81:60:2b:c1:20:0c:ab:35:f8:08:8d:59:
4c:89:9b:03:51:71:8d:e7:2a:9d:c8:7c:54:31:5a:
66:72:87:50:8c:6a:b0:a1:1c:26:d7:52:6d:98:1a:
2e:e0:3f:bb:f9:0e:3f:47:63:48:08:12:1a:39:08:
7d:95:eb:3f:72:38:21:b2:c4:e4:de:a1:ef:48:a2:
2d:13:43:07:92:ef:4b:3b:00:61:35:d0:93:0c:7b:
77:90:ea:f6:9d:b0:1d:58:a1:98:29:86:fc:2d:4f:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D3:4C:27:EB:5A:40:9B:65:2C:F4:39:62:EF:44:0A:9C:B8:40:93
X509v3 Authority Key Identifier:
keyid:B4:4A:02:2D:32:FB:D5:74:51:86:E9:C2:82:DA:CE:F2:9E:46:FF:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEoCLTL71XRRhunCgtrO8p5G_80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/tEoCLTL71XRRhunCgtrO8p5G_80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/tEoCLTL71XRRhunCgtrO8p5G_80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ab:bb:20:7f:6f:a7:53:ea:dc:44:f2:c2:44:d4:93:45:6b:
b8:04:2c:db:91:64:b9:36:0a:f9:c9:1b:ac:8d:00:11:b7:a3:
b1:f5:3f:1a:d4:d7:fa:79:90:e0:9f:5b:2c:41:69:56:b2:08:
9c:7c:f2:ab:0e:ce:c7:e9:08:d5:82:72:6f:f1:e4:88:2b:f0:
a1:69:01:87:5f:38:19:bd:82:c9:51:31:36:a7:f0:b9:d0:27:
1d:12:30:8e:2c:88:99:05:3f:99:4d:f6:df:e2:c5:ab:ed:ea:
d6:ea:4b:2a:d7:e8:8e:36:97:b9:49:11:6d:f5:bb:a7:1c:ea:
bf:f3:2c:e5:66:9a:a4:fc:87:ff:81:5e:e4:d5:08:08:47:71:
8f:bb:25:19:02:52:d2:2d:c6:04:b9:b6:63:12:b7:9a:74:e9:
a7:06:32:3d:9b:3f:48:dc:bc:b6:7e:1d:44:af:4c:47:3a:bb:
93:b8:ce:b6:a3:d0:ef:e6:b9:79:a7:e1:4e:76:a6:29:c5:9a:
f5:b6:bd:09:af:d2:68:20:51:96:85:6c:31:ad:ed:f5:c5:0c:
2d:40:70:46:67:c1:b7:00:71:2c:1d:80:c7:d4:1e:5e:4c:1c:
6c:c2:57:76:5c:f9:56:68:0d:eb:83:e7:99:37:cf:63:0d:1d:
42:5c:1e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:37:18 2026 by rpki-client