Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
File: TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft (raw, json)
Hash identifier: jIiEa6sABM+nVhSWuLX1ZmEb1qoeskFdXd9G+0LPwRk=
Subject key identifier: 45:F5:57:E4:C0:C0:6A:EF:08:5C:95:AA:D5:54:66:26:66:0C:49:EE
Authority key identifier: 4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
Certificate issuer: /CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Certificate serial: 01A12AD6A815DCFA984ACC93A809F1B7C442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
Manifest number: 0C35
Signing time: Sun 11 Oct 2026 12:01:13 +0000
Manifest this update: Sun 11 Oct 2026 12:01:13 +0000
Manifest next update: Mon 12 Oct 2026 12:01:13 +0000
Files and hashes: 1: NSzxR15lxLwAdc7Ga165-6mKacc.roa (hash: 3N9qBcothKO0rosVFxeggNkLbRm7QTKDO+BXyY2NEkk=)
2: QXNEa0rLZxlRlsB-8HuZ_VSJWP0.asa (hash: 6rji+pOpggUWT3pycZRN/hU8sc0Lzb5vIQ3TtjqmA1k=)
3: TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl (hash: pt1d0ZChKeu4wE536NPceFe5vjKr56nGbXii9eVcUjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:a8:15:dc:fa:98:4a:cc:93:a8:09:f1:b7:c4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Validity
Not Before: Oct 11 12:01:13 2026 GMT
Not After : Oct 12 12:01:13 2026 GMT
Subject: CN=45f557e4c0c06aef085c95aad5546626660c49ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:53:57:b7:c9:f4:c4:c8:56:3b:56:99:3d:
b8:0b:d2:69:07:bf:54:b6:51:2b:7c:1d:d2:a9:df:
09:70:93:01:a7:7f:87:b5:32:2d:2b:eb:23:cc:cf:
d7:cf:30:2b:5b:50:8e:a2:87:ce:1c:a9:f7:f9:07:
1d:e9:32:37:55:1b:a5:a1:27:38:59:9d:be:90:3a:
20:a8:c7:f7:39:64:31:b8:39:bb:f9:a4:6d:69:9c:
72:c6:df:04:d6:54:b2:ab:ab:1b:84:b6:9f:fc:2e:
35:a1:d2:00:b9:ef:74:ab:af:60:43:42:cb:74:9c:
e5:fe:17:18:34:f6:82:c3:d4:8a:7f:fb:87:95:14:
6d:1c:b2:30:80:2e:2a:b9:d4:8e:62:15:2e:54:3c:
4d:63:ce:76:e0:11:76:e7:33:cc:83:d5:21:a9:9e:
61:d1:e2:91:53:34:b1:a0:ce:25:d6:59:ab:cf:17:
8d:36:46:93:4b:eb:97:d4:f4:cc:ec:83:5c:fd:89:
0e:bb:a0:95:5b:82:c9:c3:4c:41:4c:01:ee:5e:05:
68:c4:01:83:26:c6:d0:c4:41:2a:eb:dc:cc:72:56:
9b:13:07:73:21:d1:7a:2c:66:15:b2:04:b4:d2:cc:
db:4f:a5:df:f0:24:f8:b3:a4:b4:a8:35:b0:0b:40:
ac:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F5:57:E4:C0:C0:6A:EF:08:5C:95:AA:D5:54:66:26:66:0C:49:EE
X509v3 Authority Key Identifier:
keyid:4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:69:be:1f:08:bf:88:09:60:72:88:0e:4b:24:ec:32:d0:66:
7c:dd:82:18:bd:48:6f:af:26:cb:5f:9b:d6:ca:0c:f5:3d:9d:
70:46:b0:a1:62:d3:b9:ef:f7:c9:71:f9:1e:73:df:ac:01:a5:
4a:b0:79:a9:a7:dd:64:22:24:6e:2b:68:95:4c:ff:af:fb:6f:
3a:c7:54:1a:10:9a:cd:2d:e9:3b:07:f0:e6:92:bd:40:d7:b0:
73:5e:9f:f5:3c:b2:e6:23:53:8b:6e:66:16:8d:fb:37:ea:cf:
6a:6d:36:2d:fc:c2:81:85:d6:d5:ef:8e:41:7d:79:2e:86:48:
97:19:01:c8:66:83:1c:fb:7c:80:3e:7f:9d:30:b1:33:e5:9a:
2d:a9:15:b8:a7:79:81:e8:df:75:f0:20:dc:c0:19:77:a1:f4:
e6:58:54:c9:67:ec:c6:77:4e:12:e9:a9:f6:dd:c2:52:f5:ae:
0d:3d:c7:e7:54:3e:b4:0c:8c:11:0b:52:c6:2e:41:1c:52:2e:
78:16:5e:55:d8:ad:ef:8c:a2:12:b1:a2:03:09:e3:33:a8:f3:
a7:b8:78:c1:26:85:71:de:6c:c0:27:cf:b1:36:26:e8:99:7d:
1b:8c:42:94:a8:9a:ad:b4:c3:85:52:53:1b:50:df:16:ff:c5:
a2:e9:f3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:33:51 2026 by rpki-client