Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
File: tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft (raw, json)
Hash identifier: JQdytDpmbcOYXwU4yx53lXWQHI8RmMAgVvjs+0p6NPU=
Subject key identifier: CF:E3:6B:DE:F1:23:53:A7:01:1E:F2:E5:B0:8B:16:86:0E:A7:4A:43
Authority key identifier: B5:49:EF:86:FE:B4:29:B6:07:BB:23:73:F9:16:FA:54:D2:79:97:52
Certificate issuer: /CN=b549ef86feb429b607bb2373f916fa54d2799752
Certificate serial: 01A0DD604DD80863EC003CBDD3BB0F71BB03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
Manifest number: 01F5
Signing time: Sat 26 Sep 2026 11:01:11 +0000
Manifest this update: Sat 26 Sep 2026 11:01:11 +0000
Manifest next update: Sun 27 Sep 2026 11:01:11 +0000
Files and hashes: 1: B_M_pSDYnQq_v2dspjpisJOp3eI.roa (hash: fnEBYCIgV363yh16vBQAS+8SDA4YNK4W+uJelnRAVc4=)
2: tUnvhv60KbYHuyNz-Rb6VNJ5l1I.crl (hash: lkbMCQLXZC+mcH+ApFNz/wTK2iQhGOHMmOsWQhCNSx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:4d:d8:08:63:ec:00:3c:bd:d3:bb:0f:71:bb:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b549ef86feb429b607bb2373f916fa54d2799752
Validity
Not Before: Sep 26 11:01:11 2026 GMT
Not After : Sep 27 11:01:11 2026 GMT
Subject: CN=cfe36bdef12353a7011ef2e5b08b16860ea74a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0c:0d:00:ee:5f:db:2c:cb:f7:7b:3a:1b:99:
05:1a:f8:ae:47:21:ac:1a:2c:64:1e:93:13:70:88:
b3:66:5f:b4:41:3b:87:42:58:6a:69:f1:74:ef:fe:
c4:f1:43:67:71:3e:21:14:73:17:4a:3d:81:9f:a7:
27:e0:5a:96:4a:bd:80:85:4f:4a:40:65:03:db:cf:
c0:45:83:16:5d:ab:5b:75:65:bb:0f:7b:11:c6:f2:
9a:a4:fb:e9:5e:c1:5f:fd:fb:25:f7:8f:30:2b:bd:
81:a5:6c:e0:23:01:4a:43:57:9d:d0:f4:ab:42:fd:
d2:43:a5:17:63:f4:48:e9:74:fb:79:eb:60:cf:57:
cd:86:e5:a1:71:7d:c6:a8:55:ea:f1:58:8f:8c:37:
46:2d:2f:dd:a3:95:04:49:4a:8a:ac:b7:4d:d6:0e:
e3:58:bd:eb:bd:8b:61:be:cb:4e:0a:57:ee:20:ab:
4b:86:3c:1f:ab:68:aa:1a:a4:ef:9a:9f:a4:82:fb:
73:07:bf:b6:27:9c:fd:93:80:34:41:74:cb:91:b9:
bc:7d:66:2b:e4:c2:c4:5e:51:0e:11:2b:36:71:96:
56:98:50:53:59:29:1f:71:ba:0c:ee:1b:91:e7:9e:
09:90:64:b1:a6:ee:f7:cd:30:09:f9:a5:80:ba:cf:
e0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E3:6B:DE:F1:23:53:A7:01:1E:F2:E5:B0:8B:16:86:0E:A7:4A:43
X509v3 Authority Key Identifier:
keyid:B5:49:EF:86:FE:B4:29:B6:07:BB:23:73:F9:16:FA:54:D2:79:97:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fb:e0:71:6f:37:91:d8:68:a3:19:bd:6d:fb:4a:1f:51:e9:
66:9c:16:3e:26:52:e1:92:bf:83:88:90:d9:34:60:5e:3b:95:
28:90:b7:69:4c:ee:cb:1a:e8:22:47:40:cf:f6:45:bf:cb:fd:
44:c5:56:79:d6:5a:fb:93:1b:13:92:26:e8:6f:04:8b:a1:b4:
9b:77:15:d2:ff:70:16:32:a0:3f:2b:75:5c:29:dd:fe:26:3d:
a3:3c:25:13:71:13:43:d5:0b:3f:d7:9f:6c:0f:4e:88:08:81:
91:61:f3:fc:b6:d5:83:8e:09:24:3c:ce:8e:36:5e:6f:2b:b5:
cc:13:da:38:f0:d9:01:45:71:49:1c:2e:45:f7:c5:91:2b:c1:
c3:f4:fe:6a:df:34:95:1e:ac:b1:6e:81:05:a8:a3:e0:2b:96:
6c:ae:99:c8:1f:c6:92:b0:a7:f7:81:6d:b9:e5:62:9b:db:6c:
2b:8e:a7:5a:29:f8:e4:8e:a1:8d:d1:af:29:6b:aa:bb:28:af:
38:5e:28:19:76:11:60:8a:7f:a2:aa:eb:b3:b1:50:b7:e5:9a:
48:3f:d3:8c:fb:0b:72:64:a9:77:18:a5:1c:63:94:e8:a1:f7:
a2:c5:b0:a4:2a:e1:4f:12:fa:33:f0:e2:4d:66:59:49:ac:7d:
73:9b:ea:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 21:02:48 2026 by rpki-client