Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
File: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json)
Hash identifier: 4J09kFJ/MY+znSCiAb82csqvs50tz1J0AaSvZWvJS90=
Subject key identifier: F9:F9:07:BC:95:F5:D0:DF:6E:94:BB:A6:F9:65:FE:EF:72:B7:AF:10
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial: 01A0F0B07811F96DB91050478B10C56DFE0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
Manifest number: 0DD8
Signing time: Wed 30 Sep 2026 05:01:31 +0000
Manifest this update: Wed 30 Sep 2026 05:01:31 +0000
Manifest next update: Thu 01 Oct 2026 05:01:31 +0000
Files and hashes: 1: MpV_ycO4tTz0-ilBvtKC36nuWAI.roa (hash: vSAtW4LqIhE9X5JdTxt3hPAgyiDA1mTD5qXNu6hLJVg=)
2: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: 5PDBXXEF6CaqivxCoXNr5EV2ekDgRjiiN0VGb+G1yg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 05:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:b0:78:11:f9:6d:b9:10:50:47:8b:10:c5:6d:fe:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Validity
Not Before: Sep 30 05:01:31 2026 GMT
Not After : Oct 1 05:01:31 2026 GMT
Subject: CN=f9f907bc95f5d0df6e94bba6f965feef72b7af10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:1a:86:35:84:f8:95:79:72:15:e7:ce:f0:
cb:97:7e:e6:da:22:44:12:89:a8:e7:a8:9c:b2:98:
c5:fc:27:31:91:9b:76:c7:7a:b9:b1:db:e1:e3:31:
32:df:e4:68:b2:6a:e0:1b:78:32:2d:11:d5:25:00:
07:b1:cb:35:2f:49:11:5d:e6:71:c2:54:e8:79:74:
29:11:cb:ed:ee:03:8d:19:1b:de:3c:62:01:a8:f0:
47:34:4c:6d:3f:73:c8:7b:3b:4c:3b:bd:0c:22:fd:
17:2e:1c:4b:4d:31:98:83:87:e0:c2:f6:2d:f8:7e:
20:d3:8b:a5:6f:6d:49:c7:d3:af:b5:b8:5d:1e:de:
cd:06:0d:43:30:e2:91:81:9b:f5:9d:16:9d:e3:da:
52:f5:53:9c:57:5e:e6:f3:5b:74:af:c1:a6:0c:98:
c6:15:03:7b:aa:61:08:da:6e:37:50:a5:2e:30:86:
a3:aa:ef:1d:09:ce:ec:f3:76:c2:f3:14:20:e0:73:
b8:00:b2:73:dd:93:6f:1c:dd:be:31:f3:0e:f4:d9:
fa:83:31:9a:6a:68:ae:e9:0e:43:19:56:3b:ee:e5:
dd:0b:f2:7a:1f:7f:ef:3a:e7:16:b3:df:7a:9f:6e:
12:77:0c:a8:f1:b7:e0:61:af:25:4d:7a:74:12:60:
3d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F9:07:BC:95:F5:D0:DF:6E:94:BB:A6:F9:65:FE:EF:72:B7:AF:10
X509v3 Authority Key Identifier:
keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:02:33:da:e0:ef:2d:4f:a4:7b:ab:35:ec:ac:3c:40:37:c2:
6b:53:e5:b0:87:5d:17:ac:25:13:c0:1a:be:9b:84:09:f8:c3:
2a:97:01:32:7b:a1:54:3d:c6:a9:ec:15:cb:07:1c:9f:19:e7:
de:57:3d:6e:0f:a9:42:3d:67:79:c9:52:43:05:2d:77:6c:fe:
6e:35:87:df:46:cc:79:7e:f4:ef:c5:ca:72:40:b7:3d:04:3e:
37:74:07:9c:8c:c1:94:d8:30:b0:fe:7b:b6:b6:6b:89:43:92:
0c:62:0c:f1:5b:82:56:0b:52:b1:f3:e3:3a:a1:53:76:5f:88:
d5:ae:1f:e1:6f:d4:43:3b:b4:79:6c:83:0a:33:f3:6f:db:35:
0b:95:35:c8:56:47:2a:e4:cf:df:f2:0d:4e:73:95:b0:41:a8:
4a:2e:61:cd:1a:d5:36:be:f1:3d:e8:5e:3b:72:d0:05:b3:dd:
8a:f3:16:5d:8a:36:7f:07:f4:c6:b9:fd:99:10:e9:c0:5d:56:
46:bc:76:a5:7c:01:a4:f3:3a:f3:02:80:6c:10:1f:4b:42:61:
0a:80:73:48:37:c9:d6:86:70:67:f8:dd:12:23:c8:b1:18:e9:
3f:0b:d8:b3:63:db:49:f1:62:a9:f9:f2:74:aa:30:cc:80:bd:
72:3f:bd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 14:55:36 2026 by rpki-client