Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
File: tiuWfFIUXmeksyBrHKSShTyg34Q.mft (raw, json)
Hash identifier: 6ahaxfgs05GW18k/aXDm7QG9+ynOKsfX6uEk39p1DyY=
Subject key identifier: B5:DC:42:80:83:3E:8F:36:5D:05:27:59:BA:F1:3E:F2:65:2A:3B:00
Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Certificate serial: 01A13D4A7DA3AEEFCFB5311AE9C362F70E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 02:00:54 +0000
Manifest this update: Thu 15 Oct 2026 02:00:54 +0000
Manifest next update: Fri 16 Oct 2026 02:00:54 +0000
Files and hashes: 1: A6OsoYIYGh2Z_D1_x4aYKOVS478.roa (hash: R4DsSDCiEh+974EKIZS8RQ1BClrbE9cHjb1aIFSzJGw=)
2: E36OwHqQ6w57Cin5wvtmgpKJp1M.asa (hash: VOikmM+ev8Ka01X1o17ZmNFWB0YN01vxXHPntHlQFIM=)
3: tiuWfFIUXmeksyBrHKSShTyg34Q.crl (hash: j4Iu4vy5/D4dzy9ytscvvXdvyc/cuFbnCn8vevptdnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:7d:a3:ae:ef:cf:b5:31:1a:e9:c3:62:f7:0e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Validity
Not Before: Oct 15 02:00:54 2026 GMT
Not After : Oct 16 02:00:54 2026 GMT
Subject: CN=b5dc4280833e8f365d052759baf13ef2652a3b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:5c:13:f6:42:fe:b0:9f:9e:f7:21:25:79:
7d:06:0d:4b:ed:af:d6:13:a1:57:d0:7b:02:e7:7a:
18:46:7f:65:5b:3d:94:25:67:31:f4:13:c5:44:b3:
3e:20:55:85:6b:bb:45:7c:c5:f7:6b:33:e4:80:9a:
a1:0c:9d:aa:3b:28:48:55:73:33:7d:c0:6e:c3:a7:
94:3d:8f:49:72:b4:48:11:36:30:d1:ea:ea:1c:6e:
60:f1:ea:92:37:b6:d5:b3:85:9b:6c:53:ac:06:08:
ce:c2:46:ca:d6:3a:51:7b:5a:40:b8:d1:0e:31:3b:
e8:de:f5:31:67:f2:81:50:59:8a:f3:7d:a7:8d:09:
1f:05:de:50:23:93:86:6d:4b:f0:57:b4:72:fb:18:
b3:e7:2f:25:f9:6c:76:d9:d3:e4:3a:5d:39:bc:99:
ab:00:6b:cb:d8:ed:ad:94:7a:3a:ee:25:5b:60:e7:
f0:e3:5a:ac:41:4c:1b:12:30:05:2d:03:aa:2a:eb:
4e:91:99:3b:81:d1:3d:82:7d:8f:25:a1:d2:5f:ea:
d4:99:4f:63:b2:87:12:7c:1c:37:2b:03:de:fd:c7:
74:f2:7a:49:10:76:d1:23:97:75:51:d3:23:ab:9f:
d3:07:e9:8a:94:48:72:24:d9:9a:49:f8:ab:a6:6f:
92:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DC:42:80:83:3E:8F:36:5D:05:27:59:BA:F1:3E:F2:65:2A:3B:00
X509v3 Authority Key Identifier:
keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2d:32:a9:70:dc:47:c7:9d:8e:28:a5:e9:24:82:34:32:16:
94:27:25:2e:bd:e9:81:e3:d6:06:11:ee:1f:b7:cf:f1:b3:ad:
23:aa:40:71:9d:f4:f6:c7:a4:60:24:ba:b9:f5:bc:67:30:8f:
06:1b:fe:d6:8f:d9:7c:02:01:e2:6a:b8:c7:24:05:93:c1:12:
ae:fd:0e:8a:de:fd:b1:4c:ec:de:87:02:ee:12:e0:68:26:58:
69:c7:6e:21:c1:37:e8:5e:46:e0:32:44:74:f5:e5:95:1c:fc:
07:d1:a7:74:75:bd:9f:9c:76:e1:de:29:ed:09:73:cb:f8:c7:
ea:83:bf:95:c1:53:de:9b:20:bb:64:9c:57:c6:2a:f8:20:a3:
9c:ed:77:39:67:53:28:5e:e1:38:01:c0:f1:cd:5d:d9:94:24:
a5:f3:e4:62:5a:0d:a5:1b:10:1e:c8:93:df:79:da:e8:76:ea:
5c:b6:b3:a7:a2:36:5b:2e:bc:36:3e:2d:b1:6b:7f:c7:10:fa:
3c:6b:1c:99:68:8f:d6:e9:80:30:ac:a6:3e:b7:6e:c5:f6:76:
c5:e1:7c:97:74:7f:2f:88:14:8b:33:f4:97:89:97:c9:14:f7:
48:1e:06:13:d3:f3:84:a0:23:5e:c4:1c:d8:06:36:8c:83:44:
b2:a5:2e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:45:15 2026 by rpki-client