Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: vUUYLT9Kvmuv19PEOCZwND7Pw8f4UWiA9ms4qvOPJaM=
Subject key identifier: 1B:5F:02:14:F7:E1:AB:CF:46:8C:96:9F:D5:EC:C2:AB:FD:37:D3:95
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 01A0CFDACE6CF74CD710C69A935BB50DE4BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 20:00:18 +0000
Manifest this update: Wed 23 Sep 2026 20:00:18 +0000
Manifest next update: Thu 24 Sep 2026 20:00:18 +0000
Files and hashes: 1: 1-XW1Sz2PaZ2CH23FH35lEDI1Dvg.roa (hash: OwzM/XrJoESuDpIjRWGFQ9kHnBpSBVpQxsgx+bma9vw=)
2: t8HbGCUUFDZ79HOoIDzniW_5CjE.roa (hash: bURUeHYTHQjo9pWgWM8FHgpTvl8hZ3bV5mZnZQ6g4Cs=)
3: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: KAlaa+6MQnAovCbFTi1TMrSJNtO45Bg8tKiY8Spqd1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:ce:6c:f7:4c:d7:10:c6:9a:93:5b:b5:0d:e4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Sep 23 20:00:18 2026 GMT
Not After : Sep 24 20:00:18 2026 GMT
Subject: CN=1b5f0214f7e1abcf468c969fd5ecc2abfd37d395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:aa:95:6e:f7:a8:f1:33:25:36:0e:c1:f8:
e0:ba:26:47:66:c0:14:5d:19:13:89:6d:99:4a:06:
0a:f3:95:fc:bd:e1:4a:3f:58:61:20:04:a5:c2:6b:
7d:16:85:3d:04:18:9c:a7:59:d8:63:13:df:40:9e:
58:42:0e:6b:cf:c7:92:b9:b8:68:8f:81:43:5f:17:
1a:cc:7d:6b:c5:50:2b:69:9a:ea:1e:68:e8:5f:8f:
64:20:ff:f9:11:64:53:5a:25:ce:f6:0a:66:69:8e:
4b:fc:6f:42:59:57:85:6b:f9:31:4c:f6:b0:79:f8:
4f:44:51:81:b4:47:b8:51:61:9a:cc:e7:42:67:c7:
51:44:25:29:2a:91:8c:a7:b8:d7:c4:2c:a5:d3:ff:
01:ba:e9:e1:72:c5:7f:3f:e8:e9:9d:e3:6f:5a:3e:
b4:6d:c2:1c:73:f3:55:ee:57:28:95:a9:a5:4c:86:
6e:a4:f6:20:2a:48:6b:09:be:6d:d5:70:13:da:b0:
72:cf:b6:42:69:1f:8a:d9:8e:3c:44:d6:2c:af:86:
b4:72:47:fc:44:eb:d7:f9:8c:31:90:5b:bb:90:72:
36:a2:a1:99:dc:f3:d9:28:89:d0:d7:58:ca:d9:59:
77:92:7f:77:cf:09:f7:90:2f:ca:a6:4d:f7:85:6f:
ef:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5F:02:14:F7:E1:AB:CF:46:8C:96:9F:D5:EC:C2:AB:FD:37:D3:95
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:36:b4:a2:cc:e5:6e:87:7e:75:4c:d1:74:ad:b0:b2:6c:e0:
e3:34:5d:b0:16:92:91:3f:cf:d9:10:de:38:26:4d:28:80:e0:
0f:5c:3a:32:06:2d:32:a3:0e:20:4d:3b:83:ee:c1:0f:f8:1a:
28:4b:3b:e9:38:c8:0f:a5:be:88:3c:ac:9e:52:34:d6:b2:2a:
82:cc:8f:49:d8:f4:a6:67:42:8c:69:a1:1e:fc:82:00:32:c5:
8b:cd:f6:ec:d2:ae:79:08:03:e2:14:e3:32:68:d2:4e:67:a2:
95:87:bc:47:7b:ce:94:0d:36:78:59:8f:03:59:e6:19:6d:9e:
98:b5:27:63:13:68:c7:a9:a7:83:ae:13:49:1b:7a:24:dd:d9:
c7:07:f8:8c:85:a3:31:db:52:7d:e8:72:4f:b7:bd:b0:53:79:
45:ba:46:fe:7d:24:22:ff:82:d2:93:dd:10:c5:ba:cc:e1:d2:
5e:03:0d:c2:a7:12:b8:6a:2b:fe:d9:e3:ff:77:5b:37:7d:6a:
2b:74:3a:f6:86:8f:45:12:f7:dd:d2:97:f7:53:b1:2c:2f:0b:
0c:f0:20:87:48:18:43:b0:d7:d5:8b:2f:e6:f2:4a:3b:b1:56:
bc:3b:98:9b:c6:14:96:0a:46:44:a9:82:db:da:4f:73:41:58:
93:ac:43:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:26:36 2026 by rpki-client