Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
File: tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft (raw, json)
Hash identifier: ZLwHKo3PQ3xpKhOT/evasnoquMDXSGEp6y4eE+Llf9E=
Subject key identifier: 71:C6:0E:C4:5B:1A:71:E7:3B:D7:E4:77:FB:64:D1:BA:98:F1:58:11
Authority key identifier: B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
Certificate issuer: /CN=b443b3486de7826fd6b0e2aec026597b6207b373
Certificate serial: 01A0D538A7A68E2BD31358EF30FA91DD87A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
Manifest number: 0AD2
Signing time: Thu 24 Sep 2026 21:00:54 +0000
Manifest this update: Thu 24 Sep 2026 21:00:54 +0000
Manifest next update: Fri 25 Sep 2026 21:00:54 +0000
Files and hashes: 1: sy5oGQjck-d2g9h80CULm1W8bto.roa (hash: emX5coGh9f+3oxTyFscmv5YiBYISS6FAufBHJnJSvLA=)
2: tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl (hash: H19Bp+GbDc98R+2Rgn3MaKT5tsTd81AFq3iI9FQbwqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:a7:a6:8e:2b:d3:13:58:ef:30:fa:91:dd:87:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b443b3486de7826fd6b0e2aec026597b6207b373
Validity
Not Before: Sep 24 21:00:54 2026 GMT
Not After : Sep 25 21:00:54 2026 GMT
Subject: CN=71c60ec45b1a71e73bd7e477fb64d1ba98f15811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2e:78:ea:78:12:96:b2:87:b0:fd:d9:ff:45:
af:f3:d9:81:20:e9:1d:6b:4a:4e:3d:3c:71:3a:55:
a7:8b:f0:2a:86:9e:32:67:38:27:3c:ca:d4:57:12:
c5:35:4d:5d:e4:73:bd:ef:67:85:e2:45:10:d6:c7:
f4:18:71:d1:70:36:0c:2f:55:84:68:96:37:7d:36:
7a:13:18:62:c3:f2:ff:42:f7:a2:29:55:5b:e2:25:
5f:21:29:75:9c:56:66:76:0d:33:4b:e0:7d:45:55:
41:d2:f3:d1:68:c7:a7:d3:11:bc:80:f6:d4:10:8f:
3c:2e:40:91:18:0b:d4:a4:eb:f9:fa:dd:65:ad:ae:
ac:39:72:49:41:85:dc:50:e0:e1:ef:b2:ba:88:65:
7d:c3:a5:64:be:14:15:d9:41:f2:bf:44:ab:a1:02:
eb:cc:51:a8:fe:ee:99:25:b7:9c:eb:a3:89:56:55:
28:14:48:d5:f5:d4:d6:f4:f8:fd:87:e6:b8:20:17:
12:3f:d9:a3:6c:bd:d3:7c:43:45:a6:28:fe:6e:c4:
83:94:19:72:7a:e6:c1:a7:f3:0e:57:3b:d2:f9:18:
1e:3b:37:5d:5d:f4:ba:bc:3e:c7:ea:6b:c7:f3:fd:
b2:91:dd:c7:5f:62:f5:3e:f4:85:7b:d6:3a:55:4b:
c4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C6:0E:C4:5B:1A:71:E7:3B:D7:E4:77:FB:64:D1:BA:98:F1:58:11
X509v3 Authority Key Identifier:
keyid:B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e3:f8:11:32:bf:bb:b7:fd:29:95:84:c0:e0:1f:f1:c1:a4:
a9:78:7e:2b:71:11:88:f9:d1:3c:c3:cd:8c:b5:3a:ad:11:54:
68:45:a0:32:fe:e9:9a:3f:21:04:ad:0e:04:91:9a:c6:ac:81:
2a:50:1b:e0:c0:a2:7f:d7:97:cf:4c:07:79:ca:4c:e3:f3:9a:
57:c8:81:1c:e6:66:bf:e2:79:49:8a:9c:1e:a6:9c:5a:4a:dd:
12:f8:0f:69:a8:2e:6b:16:d1:6d:de:aa:42:42:24:0b:a0:f7:
3e:2f:e4:c3:29:c9:d9:ec:cc:e0:bc:56:45:90:e8:30:f1:76:
7d:a6:b9:e5:57:bf:57:d7:7d:89:98:47:17:17:6e:57:8c:6c:
f5:9b:41:2d:45:49:a1:f2:df:72:b8:ee:67:29:f6:a4:b4:79:
34:2e:a2:20:cf:41:d9:2b:32:c4:57:f1:d9:d7:6b:26:6a:d3:
e4:c0:ee:4d:6d:7f:a5:cb:4c:bb:7d:e3:cf:ea:31:02:a6:73:
88:c4:cc:77:9a:a6:c6:b3:10:dc:0b:29:de:c4:7d:3b:c6:46:
91:ed:9e:82:5f:e1:6e:0d:82:44:58:10:26:f0:48:b8:43:dd:
ad:13:cb:41:7b:69:26:20:d1:b4:6a:94:6a:20:33:72:01:dd:
a6:76:e0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:57:02 2026 by rpki-client