Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
File: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json)
Hash identifier: 0PYRyFHYmiSeRX2I6ENu6Ix6jqV7rxele15CuuvFc1w=
Subject key identifier: 34:C7:4B:59:BA:7D:64:B6:84:83:81:62:21:49:3B:1E:4B:5F:9F:F6
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial: 01A0ECD349A548EC920BED68493954B91179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
Manifest number: 0DD6
Signing time: Tue 29 Sep 2026 11:01:04 +0000
Manifest this update: Tue 29 Sep 2026 11:01:04 +0000
Manifest next update: Wed 30 Sep 2026 11:01:04 +0000
Files and hashes: 1: MpV_ycO4tTz0-ilBvtKC36nuWAI.roa (hash: vSAtW4LqIhE9X5JdTxt3hPAgyiDA1mTD5qXNu6hLJVg=)
2: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: 2xWid0rt+ZNDG9q1nrc4TCmm+MG03TUrSWlq7BIkolQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d3:49:a5:48:ec:92:0b:ed:68:49:39:54:b9:11:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Validity
Not Before: Sep 29 11:01:04 2026 GMT
Not After : Sep 30 11:01:04 2026 GMT
Subject: CN=34c74b59ba7d64b68483816221493b1e4b5f9ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e8:95:3c:d0:4d:21:53:fc:22:4c:35:d1:0e:
4f:cf:77:70:b9:be:96:d0:7e:e1:da:33:d5:68:5c:
e2:61:10:5c:c9:c7:83:1f:4c:80:e6:d4:39:45:b8:
64:e0:99:49:77:18:12:60:7f:80:df:45:7a:c2:27:
9f:95:b3:cd:ba:2c:db:de:02:1b:1f:39:81:dc:9d:
d5:1f:c0:ed:54:bf:dd:99:2d:59:12:bd:c2:ad:bf:
d7:93:85:a4:ac:f5:95:0f:55:1a:5c:1e:04:4e:b1:
22:1f:f7:5f:22:5a:fc:17:19:aa:ec:b0:d8:5b:27:
c1:4f:54:9b:46:ad:bf:f6:d9:f6:b0:31:85:a1:08:
a2:89:ee:28:7b:e7:9d:07:96:f3:5a:42:55:20:d6:
eb:15:cf:f7:24:f2:19:a1:78:7e:fa:19:92:a9:3d:
58:88:f9:4a:07:32:ea:43:41:8a:ee:17:ea:16:0f:
b4:63:71:02:59:bb:06:7b:e6:ff:fb:c1:7a:c9:9e:
0a:21:b8:72:ff:40:01:3c:27:8d:e5:a3:8f:70:63:
7e:56:9f:0e:f4:cf:3d:84:53:0a:0f:d9:54:a3:ba:
4b:21:5e:a6:0b:44:d8:91:80:7c:da:8b:0b:07:16:
08:be:ac:95:88:a3:be:f1:c2:cc:e8:4a:0e:f0:55:
08:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C7:4B:59:BA:7D:64:B6:84:83:81:62:21:49:3B:1E:4B:5F:9F:F6
X509v3 Authority Key Identifier:
keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:20:34:c7:5a:07:2b:35:7b:91:18:1e:0f:0e:b0:e1:54:46:
cd:08:d0:39:28:cb:7b:2a:df:cc:2a:58:26:4a:dc:03:e1:6f:
08:41:d0:43:49:c2:be:59:cc:8b:fa:bf:50:36:bb:31:78:5d:
17:43:2c:ae:f2:f8:f2:3b:f1:68:61:c0:37:9c:6e:4e:3c:d0:
e2:d5:5d:1e:9f:78:93:d1:7b:8a:89:97:65:cd:a9:ed:f1:1c:
d2:5d:85:ac:fa:a7:bf:de:ba:e3:3a:1e:63:bf:a7:0c:7e:c3:
ac:97:d6:b3:28:34:4a:d5:c6:3e:29:77:57:d1:8c:04:04:95:
dd:5a:bf:c9:ac:11:db:f3:51:5e:a7:da:ba:58:e1:c7:0c:64:
6b:cd:52:d3:53:81:46:09:ba:79:ec:44:47:41:2e:fd:4c:43:
15:de:3b:f2:c9:21:11:f4:fe:38:46:fa:fc:d5:5e:4c:75:31:
86:99:13:07:7e:1f:ee:c7:9f:11:7e:2d:bd:9f:4a:44:01:d1:
5f:47:4c:de:85:2d:07:5e:81:79:bc:70:25:76:6b:f5:03:75:
a3:5f:23:ab:fa:40:f0:d2:c3:e4:5a:05:8b:78:39:b9:1c:0b:
57:fb:5a:f9:6e:b0:28:3d:8c:ba:c1:5e:56:38:70:a0:51:2d:
01:00:ff:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 23:25:25 2026 by rpki-client