Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
File: tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft (raw, json)
Hash identifier: laI464FTBfa5gA0yoFTpaDiKZCYES9sn9DXWxV+hQ08=
Subject key identifier: CE:15:92:29:F6:81:73:AA:E9:74:5A:63:8B:0F:BB:24:AD:8A:B1:A2
Authority key identifier: B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
Certificate issuer: /CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Certificate serial: 01A12C1FC14E55CF4B1A0C60D38B2116AB84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
Manifest number: 073B
Signing time: Sun 11 Oct 2026 18:00:40 +0000
Manifest this update: Sun 11 Oct 2026 18:00:40 +0000
Manifest next update: Mon 12 Oct 2026 18:00:40 +0000
Files and hashes: 1: 1-wdXyksXxlLDyQtMvZB97X44g4E.asa (hash: x3mjAJ81jhoijkN7mDxEpKfeq5jWDk7cC1bIIT5rjM4=)
2: JaJgHNZlSAbtuKvLA3-BudJJTlo.roa (hash: uT77HGoSLR7ak2tNmSlHYY46dhCnEltA+vTWyDTCj6Q=)
3: tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl (hash: tUwlQj9mjIk1+XaqbEtzXxTf62xzBicmmuHQVPaspeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:1f:c1:4e:55:cf:4b:1a:0c:60:d3:8b:21:16:ab:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Validity
Not Before: Oct 11 18:00:40 2026 GMT
Not After : Oct 12 18:00:40 2026 GMT
Subject: CN=ce159229f68173aae9745a638b0fbb24ad8ab1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4c:09:1a:9f:3a:eb:f8:3f:14:a6:24:88:22:
9e:90:ab:d7:55:b1:90:b2:7e:68:b9:42:5a:95:08:
f7:9a:01:23:f4:3b:0e:8f:0f:83:53:e9:0e:2c:71:
2b:a2:fa:b5:be:03:77:f6:5c:6e:93:d2:71:19:85:
2b:bc:3b:f6:d9:c4:6a:63:8a:09:3f:d4:ea:37:93:
23:25:74:06:8c:84:f2:40:af:0f:49:56:34:d3:04:
3d:dd:da:ba:fa:bb:02:5e:4f:b8:e0:26:0e:e0:64:
1e:fd:7e:3f:e8:f9:fd:9e:95:3d:ba:50:2c:eb:9f:
57:ed:76:a2:cb:7a:8d:e9:fc:63:c2:f3:21:31:f5:
5e:83:73:67:bd:ec:99:e5:22:ff:f4:df:95:59:e7:
37:5d:03:bb:f4:0c:f3:25:2c:9c:03:f7:fa:1b:8c:
68:73:85:7f:bf:fe:18:36:8d:ca:f3:95:e8:4e:b1:
b8:0f:85:b8:c4:59:fa:5c:f5:e2:d9:13:e3:49:64:
d8:e4:6f:a8:5a:f3:cf:9a:ee:55:0e:eb:9e:53:ec:
fa:86:b6:a0:d3:08:27:23:93:2f:a6:ab:93:30:a7:
ad:65:5a:80:51:f2:3a:1d:df:b0:b8:45:29:a6:dd:
7a:60:46:e6:40:08:66:61:37:7d:3f:50:85:63:03:
82:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:15:92:29:F6:81:73:AA:E9:74:5A:63:8B:0F:BB:24:AD:8A:B1:A2
X509v3 Authority Key Identifier:
keyid:B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ba:dc:4a:02:bf:90:5f:09:06:81:4b:f6:de:32:64:bb:57:
fb:fc:79:8c:3f:2a:1f:76:d1:8f:1d:c4:ec:ed:2a:e2:3e:0f:
de:67:a2:56:b4:20:df:d5:85:e4:21:70:1d:79:b0:fb:d9:32:
db:80:bc:4f:e3:f2:46:9c:58:43:c9:d1:20:61:21:c2:f9:84:
88:89:db:f5:70:ea:0e:97:3d:ac:dc:f8:c7:a8:3c:59:6c:32:
93:9f:d4:06:4f:63:9d:53:dd:80:2a:27:69:88:b2:86:7f:58:
37:7a:22:b9:7f:f4:54:a5:1a:d0:14:fe:3c:ac:1c:fe:60:56:
3c:8b:91:49:6d:42:fe:83:e8:7e:b3:b4:2a:c9:6b:79:68:2e:
17:ec:b1:a4:cd:b2:81:d0:d5:a4:bb:e8:e6:fe:ec:71:57:b1:
17:73:1a:48:de:48:23:8f:9a:b2:4f:8d:aa:15:02:2a:23:76:
3a:aa:01:c2:57:0d:a2:91:78:9b:c4:c6:5b:c8:11:89:3f:12:
3b:bf:0d:c2:f6:12:ee:63:56:a4:a1:d0:20:99:c8:1a:68:af:
b3:ee:cd:3e:e7:ef:91:1f:db:e1:78:01:8e:c5:23:d2:80:ce:
42:47:8f:cf:9f:27:88:9c:2d:d7:c6:44:0e:e6:a6:23:ea:81:
89:a7:82:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:40:31 2026 by rpki-client