Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
File: tKkPaJZnhEKvruG6qqayot7KzTs.mft (raw, json)
Hash identifier: RBWp++im/EZAB5WnI7o/kO/4LmUcVmaWV5jquBF7pBg=
Subject key identifier: 27:3A:F1:42:69:3A:83:68:9D:14:F1:39:2C:4B:A8:72:A9:E3:71:B1
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial: 01A13C6E8F92305081BE43F069005073239F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
Manifest number: 1AA9
Signing time: Wed 14 Oct 2026 22:00:40 +0000
Manifest this update: Wed 14 Oct 2026 22:00:40 +0000
Manifest next update: Thu 15 Oct 2026 22:00:40 +0000
Files and hashes: 1: DjRcKjGf481KpSn3dS8opbsCTRQ.roa (hash: q4qSCDk+u7QWlYigOct6W9NgvEFiQbOazsiPpD4B9fE=)
2: KMdcbWWp5MyTzP2tDi5ljSFkPgs.roa (hash: rr/RZr6IyiOAVd9654gWzYqEL3pIM32RlUlY8qv46PE=)
3: eNHn6hiUVOxJ-_Y5SJktOte6hXk.roa (hash: jPd38RvXr6qVEzTNTT/Ft+c1V1MvmsnZDnEJANdwKuo=)
4: tKkPaJZnhEKvruG6qqayot7KzTs.crl (hash: DiLgFNj0cUEylnyT8qQpb5b+TU6V+KD8UpzQlNYvhDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:8f:92:30:50:81:be:43:f0:69:00:50:73:23:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Validity
Not Before: Oct 14 22:00:40 2026 GMT
Not After : Oct 15 22:00:40 2026 GMT
Subject: CN=273af142693a83689d14f1392c4ba872a9e371b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2c:cd:bb:41:e9:bf:da:8d:24:03:94:ad:d6:
f7:a9:db:bb:fc:70:c0:d3:13:f5:2b:dd:ca:2a:45:
51:9a:77:eb:3d:86:9a:dc:a1:92:99:7c:40:bc:28:
46:d0:d0:66:bb:c8:64:63:fa:68:2e:5f:46:cd:85:
27:b7:49:77:8a:b5:a6:c5:4a:53:f2:53:e3:dc:e2:
e1:e6:69:b5:d1:06:2c:b7:02:32:ba:ed:31:e0:b4:
5d:71:06:ce:3c:92:bb:12:68:53:b0:34:de:3d:47:
c2:5d:34:0d:95:a4:7e:6d:a1:9c:ed:6c:f4:b3:29:
a9:77:32:c5:88:c6:61:e6:55:f2:92:c9:36:10:91:
90:97:7d:96:92:c7:8e:87:48:0f:19:95:83:44:79:
c1:52:14:80:7e:a0:0b:86:a2:ea:82:8c:f7:35:e9:
53:b1:1a:51:97:e4:9c:a2:18:ae:51:bf:53:e7:a8:
d8:8f:70:b5:bd:f0:e7:4b:d6:79:3b:5e:ea:66:2d:
a8:74:16:3a:be:f0:e0:56:89:6a:78:35:01:0e:bd:
4d:c2:18:1d:ee:bd:5b:76:e1:3e:84:f5:86:d6:60:
5e:cb:4d:86:f9:b9:27:38:7a:27:73:88:38:36:8e:
ae:5c:15:6f:eb:0c:4b:c5:c4:d6:c8:97:3c:3a:66:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3A:F1:42:69:3A:83:68:9D:14:F1:39:2C:4B:A8:72:A9:E3:71:B1
X509v3 Authority Key Identifier:
keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:53:e5:fc:61:7c:e3:70:71:46:83:38:d0:cf:8d:22:46:55:
b9:c4:90:0b:79:8d:0e:5c:aa:c1:ac:da:4c:ad:d8:fe:b1:e3:
1e:d0:c3:b0:ec:4f:6d:dc:3d:5b:7d:10:7e:df:a0:64:cd:07:
8d:64:3f:ca:5f:9c:84:5b:91:d2:4a:75:39:66:76:84:3f:dd:
69:e9:38:3b:c3:d2:63:67:f2:bc:94:d0:cf:78:e8:28:4f:8c:
57:fb:ac:42:aa:85:d6:6d:c3:9c:bd:e9:8b:93:6b:dd:27:60:
79:16:58:6b:2b:f2:d5:f4:4b:c9:db:e9:ab:da:34:c9:c5:ef:
ed:10:18:e9:f8:38:ba:0a:c2:a7:72:32:72:4b:ae:18:6f:a9:
89:ea:35:85:c3:c2:43:e5:d9:46:79:38:91:73:09:25:61:99:
7c:57:96:39:25:48:8e:19:66:04:03:aa:cf:4a:27:66:d4:97:
c7:ff:fb:8d:0d:a0:a0:f2:b1:9d:11:bd:c5:e4:a6:cd:b6:08:
da:bd:0d:f3:d0:dc:16:29:23:85:e8:f9:b6:85:f5:00:69:b0:
c4:80:55:e5:dd:b3:d0:9c:96:e2:c3:1b:9e:fd:7f:92:70:61:
35:8b:e9:41:4d:2b:71:f8:bd:53:86:26:98:20:15:a4:02:0e:
72:d5:4e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:31:03 2026 by rpki-client