Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
File: tKOwBTZrDhDVAulBSQHNhPri3JU.mft (raw, json)
Hash identifier: GLJqEqjy+T8OP2ATlA1LewoVwikQJD55tbpiKCw04FQ=
Subject key identifier: 03:92:49:10:CB:36:29:BA:09:93:E1:A8:D9:ED:C6:A1:93:58:7D:C7
Authority key identifier: B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95
Certificate issuer: /CN=b4a3b005366b0e10d502e9414901cd84fae2dc95
Certificate serial: 01A0C39FBA94CF101E3863BE4764F3289056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
Manifest number: 02FC
Signing time: Mon 21 Sep 2026 11:00:20 +0000
Manifest this update: Mon 21 Sep 2026 11:00:20 +0000
Manifest next update: Tue 22 Sep 2026 11:00:20 +0000
Files and hashes: 1: 6ZCReiMt-9O5qTlHfdRp0QA32Z4.asa (hash: bKgoE+JkmS262GXXwRqyLtBEgk05ptq2r34ReJuCtP0=)
2: Rh-ZUnz6j4kgwPiltUC2WNESJv8.roa (hash: KaJ3DV/t9W6woGLoKmszOfnkxPqXiwxsukUttzUDmPU=)
3: tKOwBTZrDhDVAulBSQHNhPri3JU.crl (hash: AEeDXqqPJ2zPtA/RFeGEra9Lg/F6NjUmomwrTCYj8D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:ba:94:cf:10:1e:38:63:be:47:64:f3:28:90:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a3b005366b0e10d502e9414901cd84fae2dc95
Validity
Not Before: Sep 21 11:00:20 2026 GMT
Not After : Sep 22 11:00:20 2026 GMT
Subject: CN=03924910cb3629ba0993e1a8d9edc6a193587dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4e:97:21:27:16:40:db:e6:bd:73:b9:8b:ec:
80:5c:f5:c5:5a:e6:4d:5c:23:af:0d:4e:f3:d7:0d:
e9:d8:e5:0d:4c:e4:ac:04:14:9c:b8:29:e2:18:0d:
e7:ab:2e:ae:10:ea:7b:58:a2:ac:aa:c3:12:e8:a9:
dd:25:33:96:e8:b1:7c:a0:ce:bc:4b:b4:ac:f3:e5:
1b:fc:45:29:b8:26:ec:4e:b3:5d:e8:54:4d:f9:20:
0c:fa:6c:43:14:6f:8e:d0:32:dc:79:30:f3:00:a2:
a3:94:c5:72:a9:63:0a:a8:be:ea:73:ff:f0:24:86:
76:09:ae:6b:db:39:46:8c:b4:37:2d:aa:55:49:e2:
76:f9:39:fa:af:48:43:26:c1:08:0e:0e:26:35:0d:
e0:79:8f:fd:35:50:b6:52:82:ff:bf:e7:5c:63:08:
f9:16:06:88:ef:f0:79:a3:22:e2:ac:33:75:6c:06:
3f:51:1c:fd:d9:29:af:52:9b:c9:18:ab:84:f6:38:
98:40:f9:59:1f:72:85:0b:72:44:8b:e9:13:54:11:
2e:b5:05:9f:c8:79:aa:0d:f1:50:c1:a3:8a:7f:38:
09:11:f1:16:0f:4c:d5:4b:e3:67:04:79:50:fb:e5:
6a:51:5d:8c:1f:6e:1d:96:18:c7:ab:2f:cb:41:a9:
82:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:92:49:10:CB:36:29:BA:09:93:E1:A8:D9:ED:C6:A1:93:58:7D:C7
X509v3 Authority Key Identifier:
keyid:B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ae:a8:3b:b1:01:9f:cd:a2:cb:95:36:4b:8e:06:df:90:36:
a2:c1:16:6f:c9:cc:31:9d:03:4a:9d:d6:43:ae:4f:01:b7:d6:
50:cb:e9:06:38:5f:dc:37:7c:aa:3d:00:a3:af:05:2c:22:96:
9c:f4:e4:c7:64:af:10:0b:27:3d:de:db:38:67:4d:b1:d7:93:
ed:99:37:d1:d5:13:63:f5:fa:24:03:37:87:57:49:ce:2e:87:
f8:51:db:eb:31:02:a9:ad:0a:7d:67:dc:f0:b1:4f:d4:d2:29:
23:d8:bd:68:3b:3e:b5:14:d5:cb:04:cb:3b:40:69:49:3e:5b:
a8:e4:ba:a9:90:eb:fc:82:4c:54:8c:23:d2:59:42:fc:0a:74:
0e:1a:90:00:15:1a:b9:04:dc:0d:eb:14:7c:34:fa:ba:87:24:
e4:84:88:af:98:67:b6:54:be:7e:24:53:4c:28:ce:cc:0d:ca:
d7:26:c6:e0:ad:6d:37:4d:ae:fd:b5:e1:35:d5:05:10:e7:be:
8c:bc:59:98:0f:81:78:38:7d:4c:6a:b7:08:f4:2c:5a:f0:8b:
e3:d1:53:19:03:67:ba:15:10:d4:a6:a0:bd:f4:3f:07:e8:48:
dd:de:ea:56:63:0e:af:ff:7b:48:1e:88:f7:20:1c:73:b9:a9:
f6:61:5e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:23:01 2026 by rpki-client