Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
File: tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft (raw, json)
Hash identifier: lNypDfkYwNhFURaBjcCGsG/hzUs2Oc2Fs6W6bXJw0wA=
Subject key identifier: EB:1B:EB:E7:74:CF:BF:5E:A9:8B:DC:3E:01:AB:89:FE:06:55:D8:DC
Authority key identifier: B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40
Certificate issuer: /CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40
Certificate serial: 01A129FA782EFD7CAF8831B04782A3738084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
Manifest number: 07CB
Signing time: Sun 11 Oct 2026 08:00:42 +0000
Manifest this update: Sun 11 Oct 2026 08:00:42 +0000
Manifest next update: Mon 12 Oct 2026 08:00:42 +0000
Files and hashes: 1: lf0Q27_M7GFPEsgVcJVVxoAfXUM.roa (hash: sqE0Hw0Q3FI2WcAgCLh44TsVF/QN+tcFx9NnmWdf0g0=)
2: tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl (hash: BD+tMHzXh/2NUizWivMubRM5Lz9kL3Z3IvhhA3jZbfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:fa:78:2e:fd:7c:af:88:31:b0:47:82:a3:73:80:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40
Validity
Not Before: Oct 11 08:00:42 2026 GMT
Not After : Oct 12 08:00:42 2026 GMT
Subject: CN=eb1bebe774cfbf5ea98bdc3e01ab89fe0655d8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e8:12:ab:03:b8:5d:32:3b:a8:61:90:dc:83:
e4:b7:01:71:77:8a:3e:fe:0e:40:f4:44:b4:8a:80:
71:c2:08:97:62:0d:e1:ac:4d:3c:f0:f5:c6:b2:40:
18:01:82:fd:5e:e6:8f:d3:d2:ba:dd:fc:1f:78:5e:
83:f1:aa:d5:67:7f:b1:91:8b:b5:8a:d6:8e:fa:6d:
ce:05:35:50:58:19:96:66:ff:6a:e3:74:6e:2e:b8:
93:04:cf:8f:87:18:9e:32:10:92:00:7c:74:38:05:
b3:e7:ab:b8:9c:43:e8:50:82:f1:f2:d0:d5:70:2b:
57:fe:b1:61:31:90:07:69:0b:c9:38:dd:d2:80:2f:
f9:8e:23:c5:53:68:2f:a2:62:f1:bf:ac:61:10:83:
c3:b6:e9:b4:4a:ab:67:2d:6a:f3:97:68:85:11:9e:
4f:31:ca:82:d9:8d:bd:1d:e2:3e:69:41:2f:ef:65:
83:cd:b8:5e:06:f8:97:8f:a9:d4:6f:31:07:0a:25:
42:46:44:a7:1c:94:dc:2f:d2:ce:63:69:0b:3b:9e:
99:63:6c:15:88:89:f4:b2:6f:f1:56:3e:2c:bf:25:
f1:94:ea:f7:ce:71:dd:de:fb:d3:e5:a9:e1:88:3a:
30:7c:c4:fc:30:91:64:4b:cf:5d:e3:5b:2b:6d:19:
df:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1B:EB:E7:74:CF:BF:5E:A9:8B:DC:3E:01:AB:89:FE:06:55:D8:DC
X509v3 Authority Key Identifier:
keyid:B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:30:75:48:33:f2:67:ca:9e:02:7b:39:52:e6:7c:24:df:15:
ca:fc:cc:00:28:be:7a:cf:c6:8a:76:72:34:d9:8c:5b:0a:3c:
e9:aa:f1:e4:38:fc:14:ed:70:e7:6f:70:d4:86:01:ed:fd:fd:
fd:50:27:e3:8d:6e:52:2d:c6:ff:f9:73:5f:63:c6:ed:b8:99:
ee:86:78:a2:ad:6c:9c:78:aa:49:de:95:8b:4d:e4:58:01:21:
cd:52:e1:d7:ea:bc:64:40:b0:2c:8d:0f:5f:9b:9b:29:de:9a:
4b:b1:59:7d:ea:8c:6d:2e:9e:6c:d3:90:36:90:3e:4d:b9:18:
6f:0e:24:75:43:fe:92:d6:d8:24:dc:76:11:4d:86:9d:ec:7c:
d9:88:22:d2:10:6b:f3:e5:73:c3:5b:e3:e2:ed:8f:cf:88:a8:
6f:6e:d5:4b:ed:0d:a2:57:03:c0:80:1f:3c:08:a9:36:df:62:
fd:d0:f8:f8:ea:5f:dc:7f:77:c2:7b:23:86:62:9f:2a:7b:60:
8e:43:c4:ba:26:55:52:57:08:c2:be:e8:f8:1a:5f:de:4e:ea:
11:08:b9:65:90:d2:ca:31:3b:ed:e6:ea:af:0f:bb:42:cd:6e:
78:6c:41:ab:4d:b5:7f:cf:df:29:81:f9:b7:52:a2:12:48:af:
2d:09:0a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:13:04 2026 by rpki-client