
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
File: tPSWmNCOjCg8DfKoLxaZfmJZurY.mft (raw, json)
Hash identifier: iiJ1I4P3lqrnJmbrWo1+Arz9El0B9rbg03Z2f6tgKEA=
Subject key identifier: 7C:C7:9E:6D:0E:6F:20:BC:CB:92:45:2E:FE:DA:83:54:9C:77:6A:2F
Authority key identifier: B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
Certificate issuer: /CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Certificate serial: 01A107DCE2077474DF6DAC934D79C425344D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
Manifest number: 0C55
Signing time: Sun 04 Oct 2026 17:01:18 +0000
Manifest this update: Sun 04 Oct 2026 17:01:18 +0000
Manifest next update: Mon 05 Oct 2026 17:01:18 +0000
Files and hashes: 1: HhEHXcVrA4jYly_4JLZyYZncnvg.roa (hash: 6iTpuhytQNXUI4g8368tGo5DhJ/PIFrnzj+J0UysgLI=)
2: tPSWmNCOjCg8DfKoLxaZfmJZurY.crl (hash: f0yIMJOflJYypGZlJrYwI+e8h99CSbLQ9YA4X3ast3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:dc:e2:07:74:74:df:6d:ac:93:4d:79:c4:25:34:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Validity
Not Before: Oct 4 17:01:18 2026 GMT
Not After : Oct 5 17:01:18 2026 GMT
Subject: CN=7cc79e6d0e6f20bccb92452efeda83549c776a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:af:3a:a5:0f:9b:8f:ac:9d:94:de:26:4b:14:
77:35:35:75:80:7e:80:2b:1e:fc:56:9c:74:bf:0e:
b4:47:18:29:2c:45:76:2a:b8:ee:78:32:74:9f:4d:
5e:f3:50:34:33:d2:d9:5c:b1:00:36:12:6e:80:a9:
97:7a:ff:cb:bc:10:78:61:27:a6:9b:de:41:a6:3e:
01:a6:1c:91:fa:12:eb:75:29:87:5e:0e:76:6c:df:
66:c4:27:7f:e5:57:91:8f:9c:8c:c7:c0:b2:4a:e9:
d4:97:dd:a1:5a:bc:cd:d2:58:e5:24:bc:53:8d:95:
d4:fc:77:b9:da:87:59:ee:83:2b:d9:d0:9d:c0:bf:
20:c7:07:25:f1:73:57:73:a4:ce:be:fe:52:83:b5:
8c:c6:88:b0:e9:44:fd:1c:4f:d4:9e:02:32:4c:b3:
c7:53:29:33:c0:5e:a2:9a:7d:6c:5d:f0:76:ce:0c:
e5:06:3c:27:08:42:a2:72:d6:63:0d:94:ee:66:9b:
db:5a:97:d1:27:70:8a:db:10:84:ed:54:93:7d:96:
4b:5f:ef:bd:46:84:39:52:10:95:74:4d:3e:2d:12:
64:f6:72:8f:cc:00:49:44:86:ce:b4:2b:a6:b6:fd:
99:0e:f5:5c:aa:5e:e4:f6:ff:36:08:51:fa:bf:3b:
bd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C7:9E:6D:0E:6F:20:BC:CB:92:45:2E:FE:DA:83:54:9C:77:6A:2F
X509v3 Authority Key Identifier:
keyid:B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:50:a3:e3:4a:fe:06:40:a9:3e:4d:b6:0c:8f:50:f9:f9:7e:
dd:e2:d9:c3:ee:48:55:e8:fd:2c:29:1d:56:bd:1d:0c:51:75:
fe:31:b1:3f:67:ba:a9:e8:1f:71:15:7d:fb:63:86:01:3f:db:
e0:6a:ed:08:a0:c2:92:02:cd:eb:4f:b2:ed:7a:27:5d:ac:3b:
a2:7b:74:cb:71:ad:e9:b1:bb:fe:e4:c8:ef:ad:bb:19:50:e6:
fd:14:ad:50:15:8e:0d:de:7c:3e:f5:d5:e5:3e:4f:77:9a:fd:
d6:52:ee:36:5e:3d:76:c0:47:b2:9e:eb:05:49:8e:96:5d:66:
80:24:be:53:e1:e0:80:ac:6d:c8:4b:6a:1a:59:3e:06:60:a0:
8f:ee:eb:7b:19:f6:b2:eb:60:7d:ea:e5:d5:24:c0:87:3f:4c:
82:a9:6b:8e:b7:ba:46:7e:3a:4a:e0:cc:f3:52:5d:5b:86:c6:
44:93:65:07:a3:e9:54:ad:f6:b6:bc:f5:31:23:d0:be:f7:30:
48:c3:47:e7:4b:f1:f0:40:c9:c2:dd:94:ba:cc:2e:ec:e4:60:
16:69:16:60:79:e0:dd:e3:45:15:89:92:e2:10:f6:7b:d3:63:
24:6c:d8:e6:ad:8d:57:e3:1e:3b:68:be:96:05:64:76:bc:e5:
85:a6:43:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:59:23 2026 by rpki-client