Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
File: tsAN1rE41q2498hDjdCy2Fg9xWY.mft (raw, json)
Hash identifier: BUJldZOgrZy4u6cu3r+RWAqZPcI2k8Vuof7dOPh5+bI=
Subject key identifier: 82:72:9F:FF:17:84:B7:12:FB:AA:41:0F:0F:41:13:1F:00:CC:56:1A
Authority key identifier: B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66
Certificate issuer: /CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
Certificate serial: 01A0BF555F4B3F76263050DBF415D66D107F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
Manifest number: 030A
Signing time: Sun 20 Sep 2026 15:00:38 +0000
Manifest this update: Sun 20 Sep 2026 15:00:38 +0000
Manifest next update: Mon 21 Sep 2026 15:00:38 +0000
Files and hashes: 1: gebinHk09-NabMXj-jq94wPZa6M.asa (hash: GQWmqZiCd4TGe+5+G38N918qHKq5ATM9kvInAFjIdFc=)
2: tsAN1rE41q2498hDjdCy2Fg9xWY.crl (hash: zMTRYPyBr0FVtB1N15D3CWnUYmbJzbz0uHqNped0N/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:55:5f:4b:3f:76:26:30:50:db:f4:15:d6:6d:10:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
Validity
Not Before: Sep 20 15:00:38 2026 GMT
Not After : Sep 21 15:00:38 2026 GMT
Subject: CN=82729fff1784b712fbaa410f0f41131f00cc561a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:7c:51:cf:30:6b:fa:ad:0f:a6:4f:9b:7c:
39:b1:a0:1a:1d:3b:02:b7:14:c6:01:db:e2:4d:27:
c9:8c:d6:2c:d1:3a:61:a0:f5:c2:10:cb:80:82:b2:
03:7f:99:a1:53:94:65:b3:73:e0:78:bf:bd:6a:b0:
9f:64:59:8a:d1:89:62:01:ff:3a:c8:93:7e:aa:36:
89:83:d5:eb:0b:ef:62:7f:58:e0:87:e5:c9:30:ea:
b5:47:d7:ef:31:19:ff:7d:d0:63:c0:fc:e5:54:e8:
5d:ce:05:71:e2:b3:24:44:1b:af:03:36:7f:40:6f:
30:b0:11:96:62:59:00:e3:23:f7:40:8c:92:50:d1:
0f:52:d2:c4:22:62:02:19:18:1c:26:8f:3b:e3:51:
56:4e:38:19:10:01:45:f1:bb:c5:bb:7b:e3:c6:86:
38:e1:db:09:34:23:f6:1c:78:b4:69:4a:c1:22:57:
82:19:ab:1c:ed:d7:b4:31:ba:bd:6c:2c:5a:f5:b7:
33:f2:2f:53:cf:a2:a8:39:90:bd:73:be:c9:1b:13:
eb:9a:a6:ca:53:29:70:43:1f:10:0e:b4:10:27:73:
45:6d:49:67:68:a3:9d:ed:65:27:ba:ac:b0:0f:0e:
ac:d1:11:7d:f8:b6:77:5a:fd:b5:34:c4:49:f9:7d:
1e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:72:9F:FF:17:84:B7:12:FB:AA:41:0F:0F:41:13:1F:00:CC:56:1A
X509v3 Authority Key Identifier:
keyid:B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:55:dd:49:e1:99:92:87:fb:60:31:c8:6a:fe:6f:1f:ce:93:
f6:1f:42:5e:5b:03:bb:7b:ec:60:5c:e9:3e:b4:26:c1:78:d7:
f6:d9:0e:d0:72:95:81:56:f9:c4:93:35:09:59:dc:1a:5c:33:
9b:16:20:bd:75:93:32:f8:81:ae:e3:cf:d5:a7:30:30:d4:07:
e0:34:38:ca:cd:ef:4a:aa:da:f2:78:d2:ff:f8:b9:82:ca:6c:
af:f4:3b:c9:76:d1:dd:c4:6c:12:13:ef:6f:da:27:34:13:d2:
a8:00:a6:ab:32:11:df:5c:24:9b:98:8a:6b:08:bb:69:26:0e:
75:c0:09:24:6c:90:1d:ab:8c:f9:5b:5a:6b:19:d7:db:85:68:
09:a8:54:e4:5a:19:c3:c1:4d:b8:8d:33:71:f2:5f:d0:2d:61:
56:8b:bc:4a:1f:a4:d0:0f:69:ed:15:b0:8c:59:49:da:49:01:
2a:0d:8e:ae:f8:25:f7:06:b4:9e:02:91:b5:24:e4:1a:ec:c1:
e0:9e:c1:29:7c:0c:3c:33:b3:f3:fb:dc:8a:ef:50:0f:9b:5c:
a8:27:a9:6d:3b:51:f1:51:e4:73:44:33:6f:ac:75:c8:34:e2:
ec:82:7a:ad:b9:5d:72:2e:2e:df:6f:8c:98:56:c6:17:bc:04:
87:6a:9b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:32:51 2026 by rpki-client