Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
File: tK4oip3bDvUKKUs8rpY-FHycfck.mft (raw, json)
Hash identifier: WUdc+ug3x9mPaV0oZd31KKH8iW3QtxcPOXhXfiJZ5O8=
Subject key identifier: 55:F3:9C:9E:FF:A5:17:36:A0:9E:5B:99:12:F7:6D:20:FF:E5:DE:12
Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
Certificate issuer: /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Certificate serial: 01A0DE059B26726C258C97902E8F44678D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 14:01:44 +0000
Manifest this update: Sat 26 Sep 2026 14:01:44 +0000
Manifest next update: Sun 27 Sep 2026 14:01:44 +0000
Files and hashes: 1: TWgMkDcy_HR5XMg6rXv7Ax4ipk8.roa (hash: H/mEg4ne87MR+9DERthNodFmmxJcKV/plF/1hfT1FKo=)
2: tK4oip3bDvUKKUs8rpY-FHycfck.crl (hash: nf+Pm3RXrqLrtOLm6YMM07l03+K9w8nqd53n7+4Zmx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 14:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:9b:26:72:6c:25:8c:97:90:2e:8f:44:67:8d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Validity
Not Before: Sep 26 14:01:44 2026 GMT
Not After : Sep 27 14:01:44 2026 GMT
Subject: CN=55f39c9effa51736a09e5b9912f76d20ffe5de12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:bc:30:c5:8f:07:55:da:2a:7c:0a:67:e2:
99:ff:3d:2d:e5:82:7f:d7:53:0b:85:a9:76:89:6e:
a1:f4:7a:7e:6c:63:36:95:8d:d0:aa:d8:38:4e:df:
e1:d5:df:2f:49:c7:0f:a6:1d:ed:37:0d:3a:0c:d2:
5f:4d:1a:d8:db:02:64:77:46:b0:95:bc:90:0c:41:
5c:82:d2:d3:8d:80:bd:51:76:da:e5:e6:8c:9e:a8:
99:66:79:e1:0c:14:29:1d:a4:a0:08:27:50:97:98:
9a:c6:52:76:b6:77:47:6a:50:18:9f:74:df:58:cd:
38:11:15:f6:59:39:83:c2:f2:b8:e0:c1:fb:bb:db:
b0:9c:7e:19:fd:a6:33:05:20:60:e6:a4:1b:d3:a1:
fb:57:3f:a3:e5:b2:63:2f:f4:15:c5:41:54:9a:12:
8f:d5:09:17:29:ae:c5:a5:81:b7:9b:d8:f2:9c:85:
6b:be:e2:25:8b:25:95:b4:b5:ed:e3:20:d2:bb:be:
2e:db:cd:ff:52:21:18:04:1d:5f:9a:f5:11:02:a7:
49:90:e8:9e:c2:67:bc:5d:d9:9e:d6:05:c2:ac:29:
03:45:9c:0c:dd:4e:51:df:b9:77:ec:e2:d9:30:48:
8d:a5:56:33:b0:50:97:5c:8e:3d:6f:d9:37:e1:e0:
21:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F3:9C:9E:FF:A5:17:36:A0:9E:5B:99:12:F7:6D:20:FF:E5:DE:12
X509v3 Authority Key Identifier:
keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b3:a9:1f:06:20:6f:62:cb:db:47:14:4e:6d:56:5f:9a:a0:
1a:ea:ff:ec:ff:a0:da:05:02:e0:78:7e:6b:6d:b6:d3:14:9e:
ca:2a:de:79:50:10:66:43:62:6e:95:ae:d5:38:78:2e:39:27:
7f:05:95:b0:20:e5:4e:26:cd:6e:72:3a:c1:a0:32:6a:74:b1:
64:3e:46:d9:23:ee:74:c0:ad:35:39:f7:d8:21:e3:b7:6c:22:
10:bf:d6:24:44:17:70:6c:48:85:33:4d:f1:76:bd:59:51:7e:
4a:d2:75:1a:ec:81:b8:77:d3:83:ea:66:4b:9e:6a:43:2d:94:
47:f6:56:cb:78:9f:a3:7f:f0:60:9e:d0:6d:03:60:70:36:46:
ca:b6:aa:9c:0d:15:6c:fb:5d:9f:3e:1c:c3:c5:18:a4:b2:17:
85:9f:cc:76:2c:ec:ce:47:04:d8:67:19:6c:74:0b:67:34:7d:
0c:7f:09:cd:28:ef:24:66:7c:be:0e:92:ef:fd:d9:19:11:a7:
c0:04:d3:dc:e1:f7:78:d1:fd:5d:f7:11:80:c0:7a:f3:e8:02:
48:78:b3:f6:70:b7:f1:26:4f:49:b2:85:8f:48:b2:00:d1:ae:
6e:4c:22:58:0b:10:a9:fd:9c:3b:29:4f:fa:81:35:9a:57:cb:
e0:a5:4d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:19:22 2026 by rpki-client