Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json)
Hash identifier: L9fl3X5/ctPDBrXTRrAYDoBPlaW0n4DXbr07u23Mp1U=
Subject key identifier: 38:F8:A7:4C:BD:3E:C2:BA:F1:3D:55:5C:F5:6B:59:40:09:18:1D:76
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial: 01A0D3B8B19A16474C46CBA547CD14046D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
Manifest number: 14DE
Signing time: Thu 24 Sep 2026 14:01:31 +0000
Manifest this update: Thu 24 Sep 2026 14:01:31 +0000
Manifest next update: Fri 25 Sep 2026 14:01:31 +0000
Files and hashes: 1: 58ydFFoOvrTPYA8iOIAgZMf_cpo.roa (hash: F/vDL/5heMjU5cUbUY7RNuovDGPBXC3rXD0ZADSlfk8=)
2: roH8dSJ1cyQiwOhgeOOscUYpa4E.roa (hash: 3JORgmdPZaQ8xXUzauNxbxZQHf1X4hPOhgbsIE182Bg=)
3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: 1gFbsL96JK5g3Mvzmdq7EorVOMC2MtUsoliXLEuNEPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:b1:9a:16:47:4c:46:cb:a5:47:cd:14:04:6d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Validity
Not Before: Sep 24 14:01:31 2026 GMT
Not After : Sep 25 14:01:31 2026 GMT
Subject: CN=38f8a74cbd3ec2baf13d555cf56b594009181d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a4:14:c6:f7:5e:d9:56:6f:b4:f9:7e:c8:a7:
60:1d:9f:04:de:10:cb:10:45:17:ac:3e:7b:f1:93:
c8:4d:58:9f:c9:18:ac:3b:1e:db:2c:cb:fa:32:da:
6c:3b:34:95:ba:bb:b0:a1:7d:12:37:dd:db:88:14:
06:08:b2:1c:3c:bc:e8:ce:4a:36:65:3b:42:f2:ab:
39:ca:8f:06:cf:fe:cd:f5:7b:68:71:96:69:65:a3:
91:ef:b0:c1:84:c5:c8:92:27:b3:2f:9a:04:15:ba:
4a:72:10:b5:f6:1d:ea:df:13:ac:cf:5c:8f:49:aa:
b7:bb:0b:65:09:2e:06:de:24:5c:75:0a:82:c6:ce:
b2:14:91:08:6f:2b:dd:0f:d3:29:64:2d:7c:d0:1e:
4e:d9:d2:27:87:39:65:43:6f:02:16:2d:a2:86:13:
0b:0f:de:2d:b9:6a:c6:c6:74:88:00:fc:f1:39:69:
03:07:f4:af:af:e0:09:40:71:1d:f6:f4:4a:9b:41:
2b:8a:3e:e2:29:3e:7c:43:e9:09:0e:45:5a:d0:f8:
77:6e:57:dc:c0:97:de:22:e7:13:a3:5f:12:d5:15:
7e:0c:ad:b1:a7:ec:39:3e:e5:ef:e8:59:73:74:b3:
0d:72:ac:3a:b3:b5:9d:11:e9:66:83:7a:73:b7:06:
0e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F8:A7:4C:BD:3E:C2:BA:F1:3D:55:5C:F5:6B:59:40:09:18:1D:76
X509v3 Authority Key Identifier:
keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b1:8c:85:33:d1:dc:e5:45:7e:ab:65:61:a4:02:28:67:fb:
f1:1e:91:70:ca:85:69:60:3d:83:26:72:10:68:d1:11:76:3f:
b0:a9:fa:45:af:79:a4:f1:2c:0e:80:8e:11:6d:18:31:19:1e:
5e:89:01:9e:fd:fb:cb:12:d6:2e:e0:29:be:db:d1:e0:03:a2:
10:c1:96:71:3c:23:00:84:5a:d3:04:53:a1:ba:e5:2b:2c:05:
15:d4:16:80:ce:0e:1e:54:7a:83:3a:cf:62:eb:4c:2e:10:9f:
a1:de:a9:39:6f:83:c1:a9:d2:e6:8f:90:af:4c:e2:65:ab:34:
7e:45:b3:26:35:55:e6:b7:99:21:ec:ed:47:ad:82:31:f7:f4:
3f:c5:e6:51:2f:bc:e9:99:ef:a3:5a:bf:82:f3:45:c3:56:9b:
e6:88:2d:a6:6a:fb:60:ee:07:27:5a:75:93:4a:76:e3:dc:65:
bf:ea:77:44:6d:f8:7b:39:9a:7a:42:9f:d3:84:9c:52:15:cd:
80:9f:13:29:69:7a:2e:23:fa:c8:8a:59:8b:58:3d:46:db:f6:
25:7c:89:ca:23:28:0b:cf:d0:7b:e3:3b:25:32:74:4a:d5:09:
0c:16:d1:e6:33:05:59:2e:01:15:31:b6:d1:bd:8a:23:e9:e7:
dd:62:bc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:40:14 2026 by rpki-client