Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
File: tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft (raw, json)
Hash identifier: fEACehqeAbQP/aU4xQlx38AyejqCeFZCUaG+2f/h+GQ=
Subject key identifier: A7:3E:38:4A:41:AE:AE:A1:F8:0C:98:3E:CF:1F:1B:11:D5:65:C3:68
Authority key identifier: B4:50:D3:13:2D:E1:BC:2D:D2:65:D6:E1:AF:C6:FB:16:B6:EC:1B:08
Certificate issuer: /CN=b450d3132de1bc2dd265d6e1afc6fb16b6ec1b08
Certificate serial: 01A0CA0FFED4ACB5B2B7D64E72B84B66A358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
Manifest number: 020F
Signing time: Tue 22 Sep 2026 17:00:40 +0000
Manifest this update: Tue 22 Sep 2026 17:00:40 +0000
Manifest next update: Wed 23 Sep 2026 17:00:40 +0000
Files and hashes: 1: tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl (hash: m0y76k7ae25nqqpNb9/n1vlK0p5ZudduT9WeoXIIvM0=)
2: vqtiNCqmFTgZhluRAF9PxU_CVW0.roa (hash: SZBzR5bl2Fh4kMVH7fOKYHImik+Vj2jtIZ9kmUmZ24o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:fe:d4:ac:b5:b2:b7:d6:4e:72:b8:4b:66:a3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b450d3132de1bc2dd265d6e1afc6fb16b6ec1b08
Validity
Not Before: Sep 22 17:00:40 2026 GMT
Not After : Sep 23 17:00:40 2026 GMT
Subject: CN=a73e384a41aeaea1f80c983ecf1f1b11d565c368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5b:f6:61:f6:7d:6d:e9:b6:d9:22:2b:04:67:
85:04:db:23:ee:cf:a6:3a:d6:fa:f0:22:ff:ae:93:
cc:8d:ea:90:9d:5d:94:e0:7d:39:08:c9:2e:59:2e:
e8:33:31:33:40:0a:c9:7b:3e:bb:74:4c:2c:92:cf:
e0:83:d5:4c:cd:8e:57:5e:ef:40:17:21:5c:ce:03:
7f:63:ce:9c:ea:26:5b:a4:35:23:f9:5a:0f:40:02:
99:0c:a6:fa:4e:13:2d:15:ce:b0:5c:fd:e5:c7:14:
b8:e7:28:1e:aa:0b:cf:a9:04:b6:ed:d3:5f:1a:2e:
c1:0e:d2:79:32:26:d6:91:c4:bc:e3:ec:02:b9:52:
81:5b:ce:75:6d:9e:4b:41:25:1f:6e:81:8b:fc:f7:
9f:98:b7:25:8b:59:78:2d:44:e5:88:35:bb:e4:29:
d0:df:6b:c3:9f:ec:56:2a:30:c5:f9:72:34:e4:c1:
8c:8c:0f:f5:57:30:b1:17:d5:a4:23:84:d6:ea:28:
ea:fd:ca:c4:a1:86:cf:de:89:6c:c5:53:fd:47:26:
45:31:57:8b:9b:e6:0a:f1:13:7c:92:bf:85:ff:ec:
4e:31:bc:09:98:73:71:10:45:be:e5:96:44:09:93:
e5:98:8c:e5:5a:cc:71:a1:c9:07:b2:76:62:b7:9a:
25:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3E:38:4A:41:AE:AE:A1:F8:0C:98:3E:CF:1F:1B:11:D5:65:C3:68
X509v3 Authority Key Identifier:
keyid:B4:50:D3:13:2D:E1:BC:2D:D2:65:D6:E1:AF:C6:FB:16:B6:EC:1B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:80:98:79:27:f1:69:fc:01:a6:94:ab:2f:b7:83:1c:bd:4d:
2a:53:f1:6c:b5:65:88:af:2a:b5:0b:8e:c5:46:37:44:0a:ae:
42:71:82:ec:1c:cc:84:d8:20:94:e6:62:e9:50:29:a7:34:40:
71:b4:97:93:f5:85:19:82:ac:86:46:f9:5e:c6:98:b0:af:0f:
8c:e2:ee:ab:4f:e7:76:42:39:ad:19:88:a2:77:e5:38:af:16:
3f:ac:24:05:cb:78:e3:62:fa:8d:c5:68:f0:47:a8:bc:ec:4b:
d1:e9:05:f8:d7:e8:30:a7:44:8a:d3:f3:17:6c:48:12:f2:44:
c4:c3:cf:05:1c:50:c7:20:11:a0:d5:21:cb:f3:06:f9:75:e7:
25:6b:34:a3:dd:ce:59:70:e8:c5:9f:cd:65:14:aa:43:ff:54:
d5:86:71:53:81:41:24:65:5a:97:68:ea:2c:70:61:94:56:25:
72:93:33:f4:fa:3e:53:a6:76:ec:1c:7e:62:82:4d:f3:2d:10:
41:b2:4a:e2:3b:d4:48:a6:29:cb:cd:b3:a9:f3:2e:5e:c4:c7:
07:9a:66:a3:9e:72:b1:4f:99:75:ef:80:23:de:bc:a2:be:2a:
da:93:09:d3:5c:87:92:81:99:56:2b:15:68:cb:03:12:04:84:
5d:f3:34:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:41:44 2026 by rpki-client