Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
File: tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft (raw, json)
Hash identifier: 29L38Kz05qtsebPncFhwLezD74m/EuDPCG+dTvMH240=
Subject key identifier: 2B:98:09:BF:D3:7E:74:24:B9:2A:48:80:A6:36:87:F8:6B:8B:21:AB
Authority key identifier: B6:91:FF:C8:65:9E:2E:63:A6:DE:CE:C7:D6:F3:6D:60:B6:64:09:61
Certificate issuer: /CN=b691ffc8659e2e63a6decec7d6f36d60b6640961
Certificate serial: 01A0D501D3BD591630B7A1B5B46D34D31EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
Manifest number: 0318
Signing time: Thu 24 Sep 2026 20:01:01 +0000
Manifest this update: Thu 24 Sep 2026 20:01:01 +0000
Manifest next update: Fri 25 Sep 2026 20:01:01 +0000
Files and hashes: 1: jWmjtGD2Z4RaU3asc-wZbXQbm6s.asa (hash: bGy022JMTuJ7OIunwosKl/bvxi77UE2f0xMastYG87k=)
2: tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl (hash: TlGDJEdR9PcZPbNn0A4Q74LJXRVvpxpbJN6wX0uWg+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:01:d3:bd:59:16:30:b7:a1:b5:b4:6d:34:d3:1e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b691ffc8659e2e63a6decec7d6f36d60b6640961
Validity
Not Before: Sep 24 20:01:01 2026 GMT
Not After : Sep 25 20:01:01 2026 GMT
Subject: CN=2b9809bfd37e7424b92a4880a63687f86b8b21ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:1d:8d:95:05:06:fc:31:88:33:b4:cc:8c:
1a:f7:d8:06:2f:97:37:dd:e9:69:fe:bb:6a:c6:27:
4a:f3:8a:7a:9c:f0:ff:b5:b4:bc:53:27:f0:40:2c:
7d:fb:2f:e9:e3:b3:6f:bc:36:16:f3:f4:a6:39:09:
c0:34:90:23:a5:f2:42:5d:ae:bb:c7:3f:46:c8:3a:
44:be:dd:9c:d8:ab:8b:e8:28:b7:00:16:38:3f:27:
3e:41:97:fc:e4:78:d3:ac:28:6c:eb:0d:ae:d0:09:
f2:73:fe:5c:b9:0e:66:31:31:56:13:f5:5b:09:60:
76:3d:e6:51:70:d2:1e:4b:dd:30:fe:61:49:35:1a:
5d:49:29:73:07:60:28:97:37:0b:08:da:1c:7d:b2:
df:81:37:f5:d0:d2:eb:b7:b7:8d:de:e3:08:cf:5d:
57:21:34:7a:c9:a8:2a:74:00:59:69:d9:92:12:71:
dd:d5:cc:c9:6d:ab:a2:36:a0:28:39:27:9e:05:0c:
3c:3e:e7:1c:58:e8:18:40:30:d4:af:43:fe:87:60:
7a:e2:76:55:2b:93:fd:44:ca:27:42:6c:43:17:06:
be:f4:1e:a4:89:26:0c:e1:b0:33:74:73:21:a7:c9:
e2:04:73:6a:44:90:7d:86:d7:5d:8b:a1:e6:8b:fd:
0e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:98:09:BF:D3:7E:74:24:B9:2A:48:80:A6:36:87:F8:6B:8B:21:AB
X509v3 Authority Key Identifier:
keyid:B6:91:FF:C8:65:9E:2E:63:A6:DE:CE:C7:D6:F3:6D:60:B6:64:09:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f9:93:66:43:37:e6:95:e3:95:b4:5c:13:cb:d1:fa:8c:78:
68:f3:2b:1a:d5:e5:12:d6:c6:77:c4:cd:7d:fe:cb:8a:83:79:
96:8c:98:cb:9a:1d:d4:bf:2c:fe:dd:17:c8:3d:be:4e:42:a5:
80:05:ea:2e:c1:91:f5:80:50:0f:63:62:84:8c:b4:66:9c:78:
49:95:b7:e6:6a:05:3f:e5:71:fb:b0:ea:c4:e4:75:dd:d8:de:
d8:9d:1a:4d:7f:67:0c:b4:ee:b3:ee:68:fb:ec:6d:c8:23:3b:
5a:21:93:0e:4c:d8:e4:c4:6c:c7:0a:6b:da:e3:9e:48:1f:9e:
ca:a7:0e:84:1c:cd:1f:95:86:28:b9:81:6c:f9:d9:f9:6e:60:
0e:ec:b4:ef:37:99:43:4d:f4:b3:2b:9d:6e:00:6c:d3:c5:8a:
8a:28:88:75:96:77:0e:6d:c9:2a:2f:2d:df:7d:b4:51:4e:81:
48:3e:5a:6c:9e:2e:0d:0b:69:9b:3d:b6:eb:2e:2f:36:97:2a:
35:d1:a3:8a:fe:ed:c7:6e:8a:67:77:50:fe:31:c6:1c:48:19:
0e:8b:59:e4:cd:30:63:aa:99:68:9d:9b:89:4f:27:53:74:c9:
ee:0b:50:df:03:94:03:14:24:fc:dd:b1:05:0e:13:bd:cd:79:
c5:d5:c9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:23:09 2026 by rpki-client