Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
File: tj8U3_NUhamVlBKGMDe4XfqfE9g.mft (raw, json)
Hash identifier: N3DqsnAiPM6FY+othZ2km33MQeSqB5M5ULO2ylbcnto=
Subject key identifier: 09:E1:4B:96:54:FF:50:ED:0D:26:5F:6D:40:0D:EF:C8:E2:65:2E:05
Authority key identifier: B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8
Certificate issuer: /CN=b63f14dff35485a9959412863037b85dfa9f13d8
Certificate serial: 01A0C7464C452FAC2595FCD9D540AE50C1E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
Manifest number: 099D
Signing time: Tue 22 Sep 2026 04:01:08 +0000
Manifest this update: Tue 22 Sep 2026 04:01:08 +0000
Manifest next update: Wed 23 Sep 2026 04:01:08 +0000
Files and hashes: 1: peQzSQauXfwCnj1XOoxXNpModLw.asa (hash: aU+6Zd5A23QFKgJ/5iTQvPKb5QHkcwusyV0JPmRTkOw=)
2: tj8U3_NUhamVlBKGMDe4XfqfE9g.crl (hash: 8/IRrGrkVmOcQ7SHWZdldK+ze7oDDKTIKbgKfjvcDkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:4c:45:2f:ac:25:95:fc:d9:d5:40:ae:50:c1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63f14dff35485a9959412863037b85dfa9f13d8
Validity
Not Before: Sep 22 04:01:08 2026 GMT
Not After : Sep 23 04:01:08 2026 GMT
Subject: CN=09e14b9654ff50ed0d265f6d400defc8e2652e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2f:2c:23:ff:e8:9e:f9:9a:ce:25:a2:74:f2:
f9:5b:a1:39:c5:01:6a:5a:7e:b2:61:4c:b0:ca:35:
26:18:0b:f0:c4:ac:45:5a:a0:00:61:1e:84:31:78:
b1:88:2c:75:a6:4b:11:2f:62:c7:46:82:50:bc:aa:
de:97:8c:c2:04:1d:dd:bd:c2:d8:67:80:8e:f6:4e:
ef:6b:72:40:72:47:45:9e:cd:e0:5c:20:db:ef:74:
d1:2b:a6:c3:e6:63:d9:d7:81:c7:7b:6a:fd:82:73:
f6:69:d7:df:d5:b4:61:c5:34:18:57:63:1e:6e:30:
1a:9d:f4:bf:b6:15:3e:43:e9:36:1a:a8:61:10:81:
2f:4d:7a:5e:c8:b2:f3:e3:a3:42:bf:96:34:d9:2e:
83:b8:fa:cf:d5:db:96:2c:1d:cf:54:fd:9d:8d:03:
8f:a6:0e:18:26:dd:4b:b6:3b:1f:f4:29:85:f6:c7:
9c:0b:02:31:aa:37:c1:7c:1b:b8:ee:7b:76:e0:53:
6a:17:00:2d:e1:5b:ac:54:e5:aa:74:45:a8:53:d5:
0c:03:c1:4d:e2:16:19:17:be:a8:c9:de:71:06:be:
c8:c8:ee:8c:40:10:6b:e0:b9:dd:58:e9:83:f7:81:
22:ef:01:51:18:d7:47:3c:78:56:f2:b9:ef:1d:8f:
4b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E1:4B:96:54:FF:50:ED:0D:26:5F:6D:40:0D:EF:C8:E2:65:2E:05
X509v3 Authority Key Identifier:
keyid:B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d1:43:2e:78:a0:0e:75:2c:ee:a1:24:8d:f5:ca:23:3a:04:
94:c8:9a:25:2e:0d:1f:ba:5d:8c:f4:00:6a:92:bf:31:2d:75:
51:f1:16:e9:88:40:82:05:49:8c:a7:3c:2f:7c:d7:40:a1:42:
a4:95:e8:1b:69:9f:6e:ae:15:a4:93:56:01:7e:75:cf:2c:e1:
bf:65:30:51:75:ee:64:92:10:05:7b:76:56:ff:e9:be:a4:10:
0a:6f:3f:5b:9b:14:52:d9:2c:5f:ae:c8:aa:92:fc:62:47:30:
bb:6f:c9:02:4b:34:5d:36:81:1f:4e:03:bd:59:a0:03:aa:f0:
98:27:02:37:94:e3:a0:3c:e3:bb:9c:f7:bd:9f:48:97:dc:68:
0a:ae:76:63:55:14:76:d7:5b:ab:a1:09:fb:c1:e7:71:be:4b:
94:24:5d:79:91:9d:20:7f:66:d8:cc:f9:36:8a:8e:a0:ad:f7:
0d:bd:b0:94:0c:02:0e:5b:a6:31:30:f9:dc:00:9a:29:15:e0:
e4:b6:25:cb:b6:12:8b:98:88:fd:98:4f:ff:00:e9:d6:a6:16:
97:62:87:2f:1d:04:b8:06:77:dc:a0:d3:b4:d9:e3:f8:0c:ad:
77:c7:8c:40:c7:fb:83:7a:8d:de:97:50:5f:b7:5f:39:9d:4d:
93:92:fd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:07:29 2026 by rpki-client