Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
File: tHRnMbQxArluui3l04w9zShLj-Y.mft (raw, json)
Hash identifier: Lf09tT0MieU0WRMbl8M9QMjvwcGceWfghokHwkOKvEc=
Subject key identifier: 09:A8:38:28:76:E5:6B:0A:E6:94:4F:61:4E:97:6A:5D:DD:62:23:DC
Authority key identifier: B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
Certificate issuer: /CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Certificate serial: 01A11B2C27C7859AB6A1D630DF282BBF391D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
Manifest number: 02AA
Signing time: Thu 08 Oct 2026 11:00:40 +0000
Manifest this update: Thu 08 Oct 2026 11:00:40 +0000
Manifest next update: Fri 09 Oct 2026 11:00:40 +0000
Files and hashes: 1: fpHEmukzCf8sEZN1-1ROK3M58Hg.roa (hash: VqNpGMHhla64QbrRVajda2AOnqhRXGh5QpCi8IhSSCc=)
2: tHRnMbQxArluui3l04w9zShLj-Y.crl (hash: uO+E2DVFBZPdF0vZth1oyCGZRjtKwFtHwCQ+FFJ6yDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:2c:27:c7:85:9a:b6:a1:d6:30:df:28:2b:bf:39:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Validity
Not Before: Oct 8 11:00:40 2026 GMT
Not After : Oct 9 11:00:40 2026 GMT
Subject: CN=09a8382876e56b0ae6944f614e976a5ddd6223dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:4b:da:88:d3:bb:8b:7f:b7:ef:27:73:01:
1f:2e:7c:d6:52:64:40:91:f2:d1:90:82:89:fc:06:
af:79:28:88:bf:54:0b:b6:d7:33:86:a9:8f:e8:f0:
0e:0a:98:80:23:48:4c:89:f3:2c:5e:38:20:c2:44:
37:0e:41:4e:7b:d0:00:f8:64:28:dd:e0:4b:f8:c4:
6c:0e:2f:ee:65:59:2a:bd:77:0e:a0:28:51:1b:9b:
59:03:06:72:7a:ed:9d:2b:29:11:1b:c3:dd:9f:0b:
bf:74:4f:fc:2e:c1:c7:a8:27:6a:24:1d:87:9d:cb:
93:13:fe:e5:05:73:de:34:3a:b2:df:95:8c:0f:45:
bf:08:2c:5f:ca:47:d8:1d:d3:a8:61:ae:2f:e0:ac:
18:23:79:21:77:51:78:5b:51:f6:fa:c9:b1:1a:28:
a2:46:2d:09:de:a3:89:5a:ee:69:fa:f7:9e:62:6f:
6a:0f:ea:92:86:09:c2:70:9f:bf:f6:ce:6c:80:b3:
b5:6d:8a:00:3e:49:16:55:75:d9:ae:d6:73:9c:06:
ef:13:aa:5c:74:1d:6f:4a:96:34:76:7d:13:63:c1:
42:78:91:a8:14:da:1d:3d:70:44:0a:8c:ca:4f:1d:
83:ef:7e:25:45:8e:ee:e5:7c:07:ac:6d:4d:19:25:
44:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A8:38:28:76:E5:6B:0A:E6:94:4F:61:4E:97:6A:5D:DD:62:23:DC
X509v3 Authority Key Identifier:
keyid:B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b0:3e:32:68:4d:79:d3:31:5c:12:63:e4:b6:e1:ce:40:ac:
00:39:fa:07:79:90:a4:83:ff:44:ae:57:03:aa:a1:67:ad:85:
64:27:81:89:39:17:0e:f0:4e:6a:07:85:68:71:d3:08:d0:e4:
a6:72:08:0a:18:1c:9b:58:49:2a:77:ce:2c:ce:50:de:ad:87:
8a:64:12:0d:61:b5:0b:0a:57:a0:ad:1c:98:1e:52:82:38:0a:
4d:b4:4d:fe:05:22:ca:e6:da:f4:96:de:18:94:6e:e1:4e:d0:
ca:ea:5e:e6:00:17:b0:46:fe:12:61:b0:53:d1:a0:51:14:94:
96:d3:ff:e7:f3:62:d8:bb:4f:b4:b6:09:a7:43:99:64:0e:72:
06:51:c7:0b:ce:4b:be:0d:1f:b7:9a:56:37:03:9d:37:1c:c7:
8f:8c:69:ec:e4:39:d7:3a:3e:8a:c5:f7:74:17:10:09:98:81:
e6:77:0c:b5:c4:83:7d:cd:94:15:ac:c1:6b:ec:23:92:cb:07:
04:c8:c4:65:e6:78:c2:b9:e8:af:6a:ba:ea:78:34:ee:fc:2c:
4d:b5:25:95:18:66:2d:b2:31:62:89:92:ff:b9:bc:14:27:f1:
81:57:7a:5d:e9:31:3f:85:5d:b0:19:a1:02:09:ca:f9:c1:93:
fd:d1:d6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:35:22 2026 by rpki-client