Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
File: tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft (raw, json)
Hash identifier: VldFXOa8rMWauE8/MwDmiqMsJtAxnCuld7csEKeuvyY=
Subject key identifier: CD:AB:48:C8:3E:47:AD:CC:36:EB:45:EA:49:C7:67:66:BA:3D:3B:DB
Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
Certificate issuer: /CN=b573d2dda93e420409163da59e7414ee91a2eef2
Certificate serial: 01A0C66B1C16A38B87CB20E4C8C2B0668B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
Manifest number: 0504
Signing time: Tue 22 Sep 2026 00:01:43 +0000
Manifest this update: Tue 22 Sep 2026 00:01:43 +0000
Manifest next update: Wed 23 Sep 2026 00:01:43 +0000
Files and hashes: 1: 0mP1ztpahebUSVqYXstfQVo6lU8.roa (hash: ROTZ3HoBIhGjMRa1VghM4xscpCElB4RFAaHFDBzcBcc=)
2: tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl (hash: H7giHxqEGbfgJq7hqopAPG5BnyeP3E1XswP+OIY7ink=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6b:1c:16:a3:8b:87:cb:20:e4:c8:c2:b0:66:8b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2
Validity
Not Before: Sep 22 00:01:43 2026 GMT
Not After : Sep 23 00:01:43 2026 GMT
Subject: CN=cdab48c83e47adcc36eb45ea49c76766ba3d3bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:95:fb:75:d6:d4:84:0c:85:26:9f:82:04:
92:03:fb:75:d6:e1:c4:1b:0a:8b:67:0d:fa:64:39:
26:2a:ed:91:20:ef:ae:fe:e4:e4:62:7c:f5:e5:44:
63:67:ef:39:ce:d8:e1:84:5a:10:ed:7e:09:c4:d6:
ec:57:60:10:50:76:de:42:1b:d2:32:89:fa:b1:9d:
6e:a3:9c:35:01:31:ac:e8:49:57:f3:0b:f3:f6:47:
75:58:08:9e:da:d0:ec:7c:e2:3d:82:77:a7:a5:52:
f7:1e:d9:0f:ae:25:e4:cd:3b:77:0f:b2:15:3f:ef:
ed:54:19:85:e7:8d:d6:26:ec:13:e3:83:cb:3f:a7:
f2:a0:f5:3b:00:8f:29:a3:b6:84:f5:8b:ad:68:7d:
07:ad:d5:f9:3f:c9:ff:1c:4a:b9:4b:85:07:54:21:
93:9a:6b:78:1d:25:1c:21:51:2e:47:69:6f:9a:f2:
bf:4e:d5:e6:03:b1:e9:f0:82:58:02:4e:ec:7c:00:
8f:62:ec:63:f6:c4:28:a5:be:da:8d:cc:78:df:c2:
72:15:3e:db:b6:4f:14:f5:53:0d:74:3c:2f:c8:ac:
61:f1:a4:10:c2:e6:85:8b:71:9d:e0:bd:85:7d:47:
c9:21:cc:4b:4e:81:eb:45:83:b6:8f:82:94:65:e4:
69:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AB:48:C8:3E:47:AD:CC:36:EB:45:EA:49:C7:67:66:BA:3D:3B:DB
X509v3 Authority Key Identifier:
keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:04:cf:a1:e9:27:65:78:a6:50:c5:48:0e:fc:a4:06:c9:7f:
f8:4c:1c:9a:fa:45:6b:49:2f:8e:3a:5d:5e:e2:91:83:e1:70:
75:a7:a3:ce:18:6a:11:30:05:0e:2e:74:d8:b2:aa:59:2c:27:
c5:c3:f5:89:cc:45:e9:c1:04:1e:4a:57:d8:a1:9e:7a:4d:1f:
c8:0c:17:56:99:60:d6:76:59:d1:84:c9:c8:0a:56:10:fb:93:
f4:5d:9a:6f:ab:d1:4f:09:3a:fe:f1:ee:bd:31:4d:f2:7c:0c:
b7:cd:7f:e3:56:21:ca:75:af:de:d5:2c:38:54:4b:dd:09:6a:
3b:bd:ee:ba:09:26:55:5e:38:a8:c2:04:d3:21:04:76:37:98:
40:64:15:3c:50:e7:6f:26:9b:8b:99:4e:cd:44:7e:dd:49:0b:
c5:cb:5f:a3:16:5f:e6:75:e8:ff:27:ac:68:b3:8a:1b:97:55:
81:fe:ff:c1:f8:bd:cd:33:06:20:92:c5:8c:28:69:ca:13:66:
15:c7:bf:5f:64:d6:23:a5:a1:36:cb:fe:10:b1:92:55:6e:3a:
e8:3a:c3:9c:da:30:a8:f1:e0:05:59:38:fc:46:bb:b7:6c:f8:
1d:0a:c4:1b:7a:ad:c5:4b:77:39:cd:e1:6a:6f:bd:e6:e3:99:
81:37:a5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:37:46 2026 by rpki-client