Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
File: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft (raw, json)
Hash identifier: lPbAy84yAunJKZ+5BJNIAhHOkepaxxguik3TqG6Pv2I=
Subject key identifier: 47:B0:9D:93:01:90:F8:F3:DD:AD:4A:C8:4C:3B:4C:88:B6:A7:16:30
Authority key identifier: B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
Certificate issuer: /CN=b48184549e12e9934bffb7615bca3d0c25681360
Certificate serial: 01A125B02C3597608EA6180E83A68D4639F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
Manifest number: 1A99
Signing time: Sat 10 Oct 2026 12:01:04 +0000
Manifest this update: Sat 10 Oct 2026 12:01:04 +0000
Manifest next update: Sun 11 Oct 2026 12:01:04 +0000
Files and hashes: 1: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl (hash: qvxiEZZXlwUk5pXuvnNoe3gmXVNfix29VSZFAUBIhPE=)
2: tuDCv4lvmfDzJRQ3OOYakiJXpLk.roa (hash: B9WwSI4TdVDoQmekvK0lWtI32JXbnkCFS/fzwW4JyBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:b0:2c:35:97:60:8e:a6:18:0e:83:a6:8d:46:39:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48184549e12e9934bffb7615bca3d0c25681360
Validity
Not Before: Oct 10 12:01:04 2026 GMT
Not After : Oct 11 12:01:04 2026 GMT
Subject: CN=47b09d930190f8f3ddad4ac84c3b4c88b6a71630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:4b:bb:cd:55:39:da:7c:1f:22:42:22:6d:
b9:94:b5:f0:28:9b:3b:91:41:8d:ae:40:90:3b:35:
fa:1e:60:ea:f9:a0:7f:0c:1d:3f:b9:1c:e7:72:66:
1d:e4:db:73:6f:75:e0:b4:17:c4:42:b1:1d:79:10:
53:6c:eb:d8:7c:d1:58:76:43:06:a3:ed:e2:92:23:
94:09:49:14:76:70:ea:31:12:e0:92:47:f4:86:ea:
75:5e:4d:1c:9a:a9:ce:33:91:da:17:b5:e7:c0:58:
68:14:be:e2:4a:40:1e:36:af:33:9d:47:ba:64:86:
21:1b:98:7a:b5:8f:04:1f:6d:a9:df:f9:6b:83:5f:
55:9f:40:1f:e9:3e:ba:e7:87:df:d2:31:ef:f5:b2:
24:fb:b0:68:6b:c9:d8:83:b6:89:a3:d1:24:6f:03:
dd:fd:dc:d5:44:a2:2e:b6:a9:5a:70:2c:ea:50:b2:
cd:d3:4f:e4:48:40:6c:9d:5d:04:af:40:da:c8:51:
8a:2f:90:1b:b6:23:3e:95:3f:55:a8:82:4c:40:68:
5f:ee:44:26:7b:38:6b:52:db:85:8c:f8:1c:7b:e1:
0f:5c:8c:9b:9c:20:00:5e:11:2a:9b:ae:d5:48:da:
8d:31:75:f8:56:97:fa:b7:b1:51:83:f4:ee:ce:ce:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B0:9D:93:01:90:F8:F3:DD:AD:4A:C8:4C:3B:4C:88:B6:A7:16:30
X509v3 Authority Key Identifier:
keyid:B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:96:a4:da:3a:9f:70:3c:0b:b2:b4:8c:de:e4:ee:3f:12:03:
52:7c:c6:26:41:69:35:ef:8f:66:39:d8:d2:2b:98:af:3d:57:
8c:60:0a:98:30:84:c6:5c:73:cc:88:8a:95:f9:49:40:b8:51:
ef:64:a2:b3:73:6e:51:8e:80:cd:e3:07:43:9a:70:ba:8e:3d:
e3:93:9f:5a:16:d4:af:f3:71:11:82:c4:00:96:e7:7a:c1:0d:
75:11:cd:88:7a:d7:49:6f:3b:45:32:fb:b2:5e:73:16:af:37:
80:be:b3:3c:19:59:2f:2a:ad:95:da:c4:38:0c:46:d2:d0:18:
fc:59:39:8d:b1:f9:70:3e:68:9e:94:90:a2:35:1f:0b:b7:09:
73:60:93:fa:1c:73:ed:4b:20:71:0c:c0:fe:d7:f7:b0:5c:99:
68:d2:5d:61:6f:f2:6a:4c:80:c1:9f:e3:1e:25:ad:0e:ce:1a:
ac:ed:4b:be:4d:a2:f1:09:5e:62:93:e6:bf:8c:ba:41:0e:97:
bc:99:9b:27:27:2f:a8:1b:8e:2d:e5:e9:f4:d3:d2:2e:99:c0:
a4:73:05:4d:41:eb:dc:37:c4:99:62:2c:c9:24:b7:92:58:2d:
1a:59:7a:8f:26:6b:7d:e6:0a:0f:51:a1:75:6c:7f:35:1b:b3:
f9:92:c9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:28:59 2026 by rpki-client