Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
File: tEH8gb4caZv_xFKL3JyTMwElo20.mft (raw, json)
Hash identifier: 4y+2NbHdvU0NjaSBQrsftuWWRKzD49FnLdvjIKhy1rI=
Subject key identifier: A3:9E:B8:82:9C:9A:A7:F8:C3:17:6F:87:98:26:29:85:C0:82:0D:A4
Authority key identifier: B4:41:FC:81:BE:1C:69:9B:FF:C4:52:8B:DC:9C:93:33:01:25:A3:6D
Certificate issuer: /CN=b441fc81be1c699bffc4528bdc9c93330125a36d
Certificate serial: 01A0ED0AC6477C6C88548B05B28F19FCF540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEH8gb4caZv_xFKL3JyTMwElo20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
Manifest number: F4
Signing time: Tue 29 Sep 2026 12:01:41 +0000
Manifest this update: Tue 29 Sep 2026 12:01:41 +0000
Manifest next update: Wed 30 Sep 2026 12:01:41 +0000
Files and hashes: 1: tEH8gb4caZv_xFKL3JyTMwElo20.crl (hash: 9E7tNaL6vzSCMXdDIezjcOXPyk8iPVOuT1OfQuojLb0=)
2: yyonxWMV91Z2Iy_izhRbZlfmQz8.roa (hash: U35LAOz/goOJLZMkOqSlfS1X+wiK+fXvB4Ca7DHTgOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEH8gb4caZv_xFKL3JyTMwElo20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 12:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0a:c6:47:7c:6c:88:54:8b:05:b2:8f:19:fc:f5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b441fc81be1c699bffc4528bdc9c93330125a36d
Validity
Not Before: Sep 29 12:01:41 2026 GMT
Not After : Sep 30 12:01:41 2026 GMT
Subject: CN=a39eb8829c9aa7f8c3176f8798262985c0820da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:30:a9:44:73:39:53:d3:a8:93:60:c7:75:
2b:f5:89:3b:b0:94:48:54:72:0c:52:5b:66:a1:99:
a9:72:6e:5a:ad:05:c9:5c:2c:d0:47:00:10:72:21:
e5:45:8e:cb:43:04:53:f1:80:19:92:e7:54:40:c2:
26:00:b1:0c:7a:c6:75:38:19:ee:52:03:9d:29:f8:
e0:95:b8:cf:ae:11:87:6c:5c:79:12:c7:47:bb:27:
7e:ae:fd:10:ba:84:20:47:f2:e4:b7:ad:61:32:f9:
8b:e5:c5:b4:6a:66:a6:38:fc:63:bb:5d:a9:1f:d6:
ce:b7:76:69:74:1d:c7:ea:fc:f2:68:9a:2c:0d:cc:
d5:ea:73:71:c0:c1:6a:a3:3e:6b:76:e2:28:b3:09:
2d:8e:f3:97:cb:e4:2a:93:73:03:8a:cc:4f:e5:3c:
bf:75:b8:18:64:f8:3c:bc:f3:11:b2:e3:9a:cc:4a:
23:db:1e:17:11:a9:8e:da:9b:68:c3:22:b4:a2:f5:
bf:36:95:6b:49:04:17:1f:97:7b:0f:bf:7b:69:49:
33:48:61:91:79:04:01:23:2b:92:92:72:92:98:6b:
4e:0d:be:08:49:3a:82:7d:15:f7:0b:a1:5d:18:f0:
78:f4:bb:60:f3:62:52:bd:3c:16:17:9e:77:c1:9b:
80:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9E:B8:82:9C:9A:A7:F8:C3:17:6F:87:98:26:29:85:C0:82:0D:A4
X509v3 Authority Key Identifier:
keyid:B4:41:FC:81:BE:1C:69:9B:FF:C4:52:8B:DC:9C:93:33:01:25:A3:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEH8gb4caZv_xFKL3JyTMwElo20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5f:a2:1a:e1:06:dc:6f:8b:52:5c:cb:7d:4e:40:0b:17:a0:
e9:22:f7:1f:89:bc:ce:a3:46:29:fc:fa:21:39:36:c7:d6:a2:
df:b1:23:1b:a8:7c:76:01:6a:e6:29:48:c8:38:5f:69:86:4d:
9d:d0:33:99:32:61:f1:7e:3d:e0:9e:fd:5d:0d:8c:a4:aa:65:
d4:be:d9:6a:7c:78:a5:c1:6a:aa:b9:73:c8:d7:7d:3b:f0:f5:
08:20:68:26:9d:7d:6b:39:41:e1:0d:a3:7d:a5:dc:b0:c5:6e:
06:23:64:4d:18:46:a7:3b:94:92:aa:93:80:b3:9c:f5:24:a0:
f1:62:89:fd:18:bf:20:2d:0b:a7:c4:1b:3e:5d:07:62:74:6b:
22:41:31:1a:75:56:84:c6:07:02:19:e6:82:3a:b3:1f:d5:b8:
42:28:9d:52:21:34:64:fd:ae:b9:18:4b:54:9b:73:02:dd:98:
7a:c7:1f:49:df:35:b0:31:16:9c:bd:84:f6:88:0e:b2:19:18:
97:d7:1a:18:8f:05:45:63:1f:c7:c9:22:ea:67:65:c1:78:dd:
7c:5e:ad:5c:e6:42:83:92:43:f9:ab:ef:3e:d1:82:5f:d1:50:
8e:c7:0a:cb:b1:43:4e:53:e8:4d:cd:3a:ee:af:bd:94:e6:78:
02:83:6a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:31:39 2026 by rpki-client