Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
File: tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft (raw, json)
Hash identifier: 9SEk1/ThUJMMG55Z58/TVOhXiXzQrefIU2Siqab47A8=
Subject key identifier: 3C:2B:32:A3:1C:82:94:8F:94:DB:E7:99:54:71:2E:6F:68:D4:D5:F9
Authority key identifier: B5:39:83:18:35:C8:7C:75:01:F6:C3:7C:B4:8E:60:A7:95:A3:94:BB
Certificate issuer: /CN=b539831835c87c7501f6c37cb48e60a795a394bb
Certificate serial: 01A0E24FC47767DA073434C11244E8C1EB48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
Manifest number: 1A74
Signing time: Sun 27 Sep 2026 10:01:13 +0000
Manifest this update: Sun 27 Sep 2026 10:01:13 +0000
Manifest next update: Mon 28 Sep 2026 10:01:13 +0000
Files and hashes: 1: SXqmp5RLfEZyA8P9uCzH5CgbQUA.asa (hash: h4SDtU0VDA6Kn7INYcKrGuZ7EVqBrSakqgFgTW1ueEc=)
2: tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl (hash: JA8p3jBYvmWI/J9MXwcu+vmEcrpZmzEAl/+gyjnKQuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:4f:c4:77:67:da:07:34:34:c1:12:44:e8:c1:eb:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b539831835c87c7501f6c37cb48e60a795a394bb
Validity
Not Before: Sep 27 10:01:13 2026 GMT
Not After : Sep 28 10:01:13 2026 GMT
Subject: CN=3c2b32a31c82948f94dbe79954712e6f68d4d5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:00:c1:22:d8:bb:3c:f0:4b:3b:a5:6b:af:
0b:f0:19:f9:66:f1:e5:01:41:22:d0:69:2c:9f:76:
6d:8b:28:06:f2:1a:dc:e8:f7:e2:e0:a9:87:7b:61:
a5:4e:76:84:22:bb:e1:cf:d6:a4:32:dc:9b:35:84:
a0:cb:18:9e:38:e6:f7:67:7a:87:3a:64:b9:f1:59:
1f:2e:9d:d8:fd:15:7e:9d:c7:53:75:ea:48:b4:5c:
13:a9:2c:75:49:1c:0b:dc:ea:76:88:86:46:b5:f9:
a1:19:35:bf:9c:63:b6:ff:ae:3f:dd:df:98:24:37:
e8:51:f1:4b:7e:0c:ee:35:a6:0c:bc:ee:4a:45:72:
69:fb:a5:7b:82:c9:1f:7a:c8:86:e0:4f:cf:c3:b6:
ad:94:82:20:e1:38:d3:dc:76:2d:d8:52:34:aa:15:
a4:05:22:c4:1c:e5:0d:b6:4e:b1:7f:ed:26:c6:4f:
5c:7c:62:2e:9d:c2:40:27:e1:64:aa:de:ab:56:50:
80:95:34:9b:e9:8e:f9:d6:af:51:70:6e:c7:d6:4a:
10:df:26:30:83:7f:84:d3:98:15:72:f2:5e:05:57:
a7:bc:cf:56:86:9c:73:c9:53:18:a3:68:65:7a:74:
f3:6e:98:29:87:ed:90:25:01:b2:d7:c9:e1:84:63:
95:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2B:32:A3:1C:82:94:8F:94:DB:E7:99:54:71:2E:6F:68:D4:D5:F9
X509v3 Authority Key Identifier:
keyid:B5:39:83:18:35:C8:7C:75:01:F6:C3:7C:B4:8E:60:A7:95:A3:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:72:dc:b3:da:86:6b:05:60:52:dd:ac:c3:35:e2:8e:b0:58:
9b:4b:01:51:7b:85:7d:ad:6f:5c:3e:48:ea:bc:10:8a:be:fd:
cb:e6:fc:22:35:eb:fa:e5:5b:37:c4:14:93:69:c8:5c:2f:6f:
26:87:eb:86:64:e3:68:49:c3:b3:07:db:2f:ee:83:0d:c8:5e:
cb:6c:a8:83:b8:6f:fe:b7:d4:fa:41:55:52:e8:fc:98:ae:77:
16:5f:2b:b2:89:a3:c2:f0:56:30:f3:3e:8d:fe:73:37:36:c1:
93:f3:3f:fb:9e:0f:63:28:57:d9:15:65:cd:c7:4e:9e:69:fc:
f2:19:4d:8c:cd:09:a3:a1:40:2b:31:f1:6e:b0:88:a3:3e:63:
3d:a4:60:b2:91:64:c4:fe:ff:d1:d0:d1:6a:40:68:1c:86:68:
e1:23:3a:48:f4:05:1e:66:5d:72:5b:c5:89:61:75:47:67:46:
bc:bc:0f:87:9c:ad:62:4e:d4:60:60:3b:21:74:57:30:4f:de:
44:59:82:84:f6:07:a6:c0:18:ee:1c:ba:48:0a:8a:51:79:d8:
24:b4:ff:b9:1d:aa:1b:4b:5b:ce:7f:3a:2b:ec:bf:38:58:2f:
f4:c9:88:33:ab:b3:76:c4:96:b2:f2:e7:b2:a5:e4:92:39:ed:
42:b3:6e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:51:13 2026 by rpki-client