Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
File: tKfQVIK4TTu2BPCZvK-eftNGiJo.mft (raw, json)
Hash identifier: m0gBfUhi5aAtz62tGojJUP+Z3Z+wPlIoQWWGCnE1eMk=
Subject key identifier: 5E:43:CB:0C:A3:D2:F1:31:45:F7:84:78:33:DF:5C:17:75:E9:87:D5
Authority key identifier: B4:A7:D0:54:82:B8:4D:3B:B6:04:F0:99:BC:AF:9E:7E:D3:46:88:9A
Certificate issuer: /CN=b4a7d05482b84d3bb604f099bcaf9e7ed346889a
Certificate serial: 01A0CDED07D25A261C471E88E0A9B7ACD194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
Manifest number: 1A68
Signing time: Wed 23 Sep 2026 11:00:58 +0000
Manifest this update: Wed 23 Sep 2026 11:00:58 +0000
Manifest next update: Thu 24 Sep 2026 11:00:58 +0000
Files and hashes: 1: awToJLBsyk0T4IcWFD08IQBrMn8.roa (hash: D6jszyrJ34yNygrEuO9QJPaleqlFTsrRTxhepr3reTI=)
2: tKfQVIK4TTu2BPCZvK-eftNGiJo.crl (hash: 3GPt/jdAjZHXki0m86GWVp2fDcboAXWAcb+CwxHCLSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ed:07:d2:5a:26:1c:47:1e:88:e0:a9:b7:ac:d1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a7d05482b84d3bb604f099bcaf9e7ed346889a
Validity
Not Before: Sep 23 11:00:58 2026 GMT
Not After : Sep 24 11:00:58 2026 GMT
Subject: CN=5e43cb0ca3d2f13145f7847833df5c1775e987d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:4b:88:06:56:44:b2:f4:a3:b2:88:a8:50:
95:40:1d:b4:a2:73:18:db:8c:88:4a:5e:67:d1:d7:
ef:17:8f:ab:8b:c1:83:ac:fe:da:a2:0e:be:7e:72:
05:00:77:f1:61:b7:a2:d9:8e:52:26:1f:4a:14:6b:
97:f6:7e:3c:59:2c:71:96:b6:3e:c4:89:b6:ed:23:
bb:cf:1a:df:4e:ee:b9:04:f0:2a:47:f9:cd:38:88:
57:82:23:45:56:0c:37:d4:95:bc:0f:d0:d9:8c:0f:
29:85:f4:a1:79:06:49:2c:d5:55:87:77:48:b4:e2:
eb:96:b9:07:2f:59:16:1d:33:e4:64:49:d8:ac:5f:
97:88:29:52:62:0c:1b:27:c5:61:da:3b:ce:fd:5d:
b7:fb:d7:c4:04:45:3a:df:fd:3a:21:f4:33:a0:db:
5e:00:ca:af:e5:55:26:e5:73:a0:fb:bd:19:5a:49:
08:d5:7c:88:a6:d0:74:5d:70:ae:5f:0b:95:71:8e:
e4:b0:94:51:a7:8e:c0:c6:66:20:18:1f:7c:70:74:
cd:39:1d:ff:cd:3f:9d:f9:40:db:0b:fd:c7:7c:66:
c1:0d:3d:83:9e:27:4f:11:a1:83:44:8e:cc:8f:e5:
bd:a2:22:64:57:3f:ea:48:53:9f:cb:8c:10:db:6a:
00:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:43:CB:0C:A3:D2:F1:31:45:F7:84:78:33:DF:5C:17:75:E9:87:D5
X509v3 Authority Key Identifier:
keyid:B4:A7:D0:54:82:B8:4D:3B:B6:04:F0:99:BC:AF:9E:7E:D3:46:88:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:45:eb:f4:c3:ea:7c:e9:51:5e:b8:f7:f3:e0:35:b7:8d:51:
44:5c:e1:4e:d7:e3:19:41:7a:4a:59:4a:05:65:a6:57:c2:3b:
5e:fe:de:6f:8a:f7:c8:83:02:6c:93:6a:07:d6:98:6c:05:6a:
bc:80:8f:42:66:13:51:19:c6:e0:61:17:ea:04:c3:d9:01:25:
b6:d6:d9:5b:08:42:67:96:a9:ad:63:40:3c:a8:2e:ea:a5:c8:
6c:98:1e:48:a7:01:fe:cf:68:ed:4e:c8:5e:be:e2:2a:64:6a:
8e:fb:e6:fd:a7:9b:ae:74:de:09:9d:61:39:36:79:85:90:fa:
89:ce:f6:07:7f:cf:3f:b6:65:58:15:46:3e:dc:30:75:85:01:
bb:7a:c6:3d:19:b1:8c:40:d5:4f:6f:61:11:02:6a:76:e9:64:
86:ec:2e:ef:c9:c3:0e:d2:ed:11:24:24:c0:fd:17:84:12:bf:
1e:e2:b6:76:27:92:65:db:d3:1c:33:36:10:7d:f0:5b:60:82:
1e:99:d8:bd:80:4b:d3:77:a2:48:f7:c7:22:bf:d3:ee:a0:14:
62:64:1e:41:cb:10:3b:56:70:ee:91:62:9f:81:31:e6:11:20:
7a:26:bf:22:d7:31:53:aa:df:6a:6f:38:e8:7d:e7:07:ef:07:
7f:59:f9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:59:13 2026 by rpki-client