Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
File: tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json)
Hash identifier: VYj5qOKSs3YaPBHJ44e0ZDLaYhHFlKuvdKgWB9D6kXA=
Subject key identifier: F7:9A:CC:03:2C:13:FD:D8:A6:25:48:17:8B:50:4A:BC:65:C2:23:AD
Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Certificate issuer: /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Certificate serial: 01A11F3FD4CB0FF703224C023906E5DD5B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
Manifest number: 1A92
Signing time: Fri 09 Oct 2026 06:00:39 +0000
Manifest this update: Fri 09 Oct 2026 06:00:39 +0000
Manifest next update: Sat 10 Oct 2026 06:00:39 +0000
Files and hashes: 1: mRAbVrC4vL4GmozrjHi2i0Iaytw.roa (hash: vC24nQiiHK47q4YRBJHF/HkE+eYaEpAw6ZvG99eAnwU=)
2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: 03OJEHlsf3kDACBv1xCs/rcn8hlGwE5t+ts/PltCbAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:3f:d4:cb:0f:f7:03:22:4c:02:39:06:e5:dd:5b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Validity
Not Before: Oct 9 06:00:39 2026 GMT
Not After : Oct 10 06:00:39 2026 GMT
Subject: CN=f79acc032c13fdd8a62548178b504abc65c223ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:63:37:dd:1b:99:27:99:17:20:35:08:42:cb:
6d:26:56:99:0f:ef:25:e4:a4:00:63:27:39:f4:71:
1d:76:8c:69:42:4f:61:7d:00:d1:77:03:2a:e5:48:
a7:b6:36:5f:0a:2c:c0:f0:0c:62:62:fc:4f:eb:8f:
a0:d9:d2:14:b6:4e:60:35:b8:bb:d4:42:ca:09:79:
4b:c7:e0:d9:b4:68:a7:64:a8:aa:87:fc:39:20:e4:
dc:62:32:52:e9:b8:64:76:74:8a:e5:cc:a0:b6:4c:
7d:a2:db:6b:d4:db:59:cf:54:01:4d:18:86:56:c3:
b7:b8:3e:4d:22:73:cd:d5:32:9c:0a:d9:63:01:82:
75:a3:f6:6e:67:d7:29:0f:5f:14:cc:80:4b:dd:9f:
69:75:62:e8:9f:c0:6f:ea:29:0c:89:80:5a:41:33:
1b:f9:81:86:0b:40:b5:6a:b9:1a:e1:9f:88:19:01:
a6:9d:22:f4:35:13:16:96:7b:fe:03:4b:66:c6:af:
b2:31:be:7b:24:85:f6:a5:33:12:7c:15:b3:0a:06:
1e:82:b0:55:a4:d5:26:f2:d8:0f:fb:eb:a7:2a:48:
3a:dc:9f:34:c6:ea:2a:0f:95:2c:00:e4:ff:94:4c:
0e:c7:d0:61:14:49:49:5d:be:7b:88:09:e1:b0:7e:
1f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9A:CC:03:2C:13:FD:D8:A6:25:48:17:8B:50:4A:BC:65:C2:23:AD
X509v3 Authority Key Identifier:
keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:75:8e:8a:63:1f:a7:54:02:51:aa:21:62:4f:1b:61:32:74:
72:95:1a:7c:3b:5f:d8:7d:0a:18:8f:30:2b:d8:60:7f:2c:70:
05:ca:69:11:71:a6:2a:90:10:57:64:c5:65:3f:ce:19:9f:b9:
bc:af:6c:4b:4b:f4:45:3a:89:4f:35:5d:2b:b5:5e:e9:36:1f:
29:39:90:79:8a:61:14:40:f0:0c:25:df:ed:e1:57:ae:2b:02:
28:d1:84:59:33:eb:78:25:ff:5c:58:f4:26:be:cb:63:8a:15:
06:64:88:9d:b0:8d:71:8a:31:2a:db:77:c4:2e:5d:59:9a:ba:
e8:0a:eb:23:98:b8:b1:e8:84:7a:a3:9f:ba:43:27:5b:25:74:
f7:c3:22:78:47:0d:c7:4f:ee:62:a6:c9:81:44:d2:af:e3:3b:
88:d9:6c:f0:7b:d8:34:8a:a4:c8:8e:61:a6:88:13:2d:b9:e0:
fd:11:e7:b5:3a:9f:d1:13:39:64:bb:f4:31:c4:3d:9b:bc:a2:
12:96:4f:37:9a:9d:cd:c4:dd:94:c7:93:a7:d5:95:f0:e8:5e:
0c:69:b8:1c:a2:b3:39:fc:55:9c:c4:19:77:46:88:f3:27:6f:
82:04:86:5c:6a:cd:2c:bc:b4:e7:fd:7c:a3:8d:54:1f:b9:fa:
50:33:6c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 12:31:42 2026 by rpki-client