Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
File: tZtlS0KDPTZojjeakhvrrswwd2I.mft (raw, json)
Hash identifier: jyhIB5VckKZ61KuIW8HhPb4VjJ6yD4WBCweGst3Z8jU=
Subject key identifier: B6:29:0C:9C:38:C7:CA:CD:B4:0E:09:C6:45:A9:11:0C:7D:40:9F:2F
Authority key identifier: B5:9B:65:4B:42:83:3D:36:68:8E:37:9A:92:1B:EB:AE:CC:30:77:62
Certificate issuer: /CN=b59b654b42833d36688e379a921bebaecc307762
Certificate serial: 01A10A0307B0F5E6CCD8EC4A8A8A368F2D93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZtlS0KDPTZojjeakhvrrswwd2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
Manifest number: 0103
Signing time: Mon 05 Oct 2026 03:02:12 +0000
Manifest this update: Mon 05 Oct 2026 03:02:12 +0000
Manifest next update: Tue 06 Oct 2026 03:02:12 +0000
Files and hashes: 1: P1tf3TOfH-5BUA4TlKHVZFLsg9E.roa (hash: Ou5jVY+Wu+51dLZB22miAYmWfU4viS5vwM+gRlM0aZU=)
2: tZtlS0KDPTZojjeakhvrrswwd2I.crl (hash: PCxsrKgf4q37NtnM+RwmtNEEFuJGYIKOAWEDsKTfmGs=)
3: whrEFYh55PfP3rH9r88LFTEnY0U.roa (hash: TH01oABU19/I/IoXNBdj7bjG3uEgkQpDazrpyE0JmkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZtlS0KDPTZojjeakhvrrswwd2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:03:07:b0:f5:e6:cc:d8:ec:4a:8a:8a:36:8f:2d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59b654b42833d36688e379a921bebaecc307762
Validity
Not Before: Oct 5 03:02:12 2026 GMT
Not After : Oct 6 03:02:12 2026 GMT
Subject: CN=b6290c9c38c7cacdb40e09c645a9110c7d409f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:27:e0:89:51:f1:8e:53:2e:b0:7d:cc:5b:4f:
ab:c4:68:97:1c:63:19:49:30:b4:ff:f3:3f:36:c4:
e2:69:cc:da:43:bc:01:af:3d:96:11:a5:a1:02:de:
cb:c8:d5:c3:1d:bd:bb:db:16:e4:e4:11:0e:6f:ea:
20:02:c7:0c:2d:5a:ba:55:48:6b:ac:c2:24:47:07:
2a:79:61:b7:1a:f8:10:83:3a:72:83:02:71:dd:22:
73:eb:7d:9f:17:a8:dd:c5:84:ff:1c:95:21:ac:7a:
01:0a:3d:4d:5a:d2:4c:8e:4c:ff:77:3e:c0:b9:00:
7a:44:4b:e7:9b:c6:1b:73:1d:d8:63:e8:3e:ac:a0:
9b:e8:7b:90:a6:34:b1:bb:92:8c:ae:57:01:62:c4:
aa:cf:13:33:93:bb:9c:97:68:b3:07:7b:4c:dd:0f:
38:c5:c2:ad:d6:f6:81:e0:6d:fc:25:23:f9:02:7b:
c1:cb:15:12:52:b2:00:87:a2:74:01:ff:a8:2b:05:
47:58:3f:4e:cd:d5:1a:c5:69:19:bd:e2:18:f0:74:
56:33:1b:fc:49:1f:f3:d1:67:4c:75:e5:6e:83:1d:
28:f3:1f:86:94:93:77:2d:bf:37:97:9c:d9:c9:c0:
28:fb:56:c9:c0:08:38:97:ca:28:44:93:d6:f8:d5:
f3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:29:0C:9C:38:C7:CA:CD:B4:0E:09:C6:45:A9:11:0C:7D:40:9F:2F
X509v3 Authority Key Identifier:
keyid:B5:9B:65:4B:42:83:3D:36:68:8E:37:9A:92:1B:EB:AE:CC:30:77:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZtlS0KDPTZojjeakhvrrswwd2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:48:19:24:73:d6:62:a6:d8:2b:de:6b:8f:2e:eb:38:da:ce:
8d:c2:b2:c3:2c:6d:4f:86:82:b3:cb:a1:f3:53:0c:3a:02:0b:
7b:93:b3:1d:89:fb:86:9f:2b:ee:88:8d:e6:09:f9:00:f3:53:
95:bc:d2:56:35:4b:29:f2:6d:f5:3a:7b:be:e5:e6:b6:94:00:
69:f4:d9:ca:2d:5e:d4:f4:8a:cc:fc:cd:6e:86:fc:4d:0f:15:
a3:50:53:9d:ad:2a:a7:41:02:dc:6f:83:b7:ea:22:49:07:5a:
38:6f:62:3a:e8:d5:5a:4c:82:7a:bc:cd:79:8f:17:32:1f:d4:
56:ed:f9:15:f7:6c:08:23:a6:b8:2e:14:66:d3:e6:d4:1a:53:
8b:2a:63:fd:1f:ae:c1:d5:e4:c2:47:fe:b6:39:bf:d2:63:da:
85:81:bd:8e:a9:0d:8c:59:8f:56:8f:fc:2f:0c:d5:a2:0c:59:
d1:19:45:db:12:c8:ac:a2:f2:e9:48:87:85:f1:a7:40:fb:e5:
34:41:8d:59:e4:f9:a9:c5:d5:c8:0c:d9:ef:7c:87:7b:76:e4:
02:9a:45:18:f6:02:63:10:90:b3:da:76:ac:c2:9c:75:53:60:
5e:09:20:ed:07:8b:6f:6e:08:bc:da:99:45:46:6f:14:3e:46:
f3:2c:e3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 07:38:02 2026 by rpki-client