Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.mft
File: tLCkwjkjFNKKW2i2-vAgHqCgFLM.mft (raw, json)
Hash identifier: 4QNqj+CKgw1vYXOsmkPX1Hx26xjsZgYBtVj4hK/5Bg4=
Subject key identifier: 3A:92:52:5B:94:C2:52:10:BD:EA:6D:01:4A:99:3A:55:FC:90:B4:03
Authority key identifier: B4:B0:A4:C2:39:23:14:D2:8A:5B:68:B6:FA:F0:20:1E:A0:A0:14:B3
Certificate issuer: /CN=b4b0a4c2392314d28a5b68b6faf0201ea0a014b3
Certificate serial: 01A0FD225F75B8A4284A74B20F191B649D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLCkwjkjFNKKW2i2-vAgHqCgFLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.mft
Manifest number: 58
Signing time: Fri 02 Oct 2026 15:01:23 +0000
Manifest this update: Fri 02 Oct 2026 15:01:23 +0000
Manifest next update: Sat 03 Oct 2026 15:01:23 +0000
Files and hashes: 1: nopMUUJTS0An2jLnhKvhz6wEdPs.roa (hash: 9seqKOVg1xtJT41JqrZrelanQQe9aZs4h0y4Rv603e4=)
2: tLCkwjkjFNKKW2i2-vAgHqCgFLM.crl (hash: ZpTq4pM0/QxwRnl2egp5hm/iYowUup9KcN/6ZeREibU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLCkwjkjFNKKW2i2-vAgHqCgFLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:22:5f:75:b8:a4:28:4a:74:b2:0f:19:1b:64:9d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0a4c2392314d28a5b68b6faf0201ea0a014b3
Validity
Not Before: Oct 2 15:01:23 2026 GMT
Not After : Oct 3 15:01:23 2026 GMT
Subject: CN=3a92525b94c25210bdea6d014a993a55fc90b403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bd:68:36:de:7d:71:e8:33:ce:54:0c:4a:10:
c2:bb:28:98:53:81:8a:b0:55:f8:e4:f6:18:66:7f:
ca:d9:60:5a:e3:71:b6:00:89:3b:6d:3f:e5:b3:5e:
4e:6b:8b:06:b0:fa:43:ff:76:1f:06:f5:94:7c:3a:
f0:0c:09:45:8d:31:b0:71:09:b2:ad:25:50:a1:2d:
a2:d4:6b:ec:e7:f7:09:28:13:9c:ba:89:78:68:98:
cc:ab:d6:b5:cf:61:81:74:0f:ae:4c:ab:85:9b:b3:
40:07:d5:1b:ac:38:e8:0f:9e:ef:96:af:75:25:a2:
e9:48:b5:cb:7f:64:d1:5d:f6:db:28:93:1e:57:ca:
1c:bb:4a:cb:bd:96:93:9f:0f:e2:1c:1f:84:cc:f0:
a4:76:d0:e8:3c:a4:e9:1d:f3:dd:1b:e7:40:f6:93:
c5:f9:0e:62:d3:ec:37:e7:3f:3f:8b:e6:48:61:bf:
0f:1b:33:7e:85:83:ba:67:c6:bf:ba:ff:44:9c:93:
84:b9:67:1d:82:aa:e3:bd:0c:44:73:6f:b2:c3:e3:
7e:1f:8a:32:73:18:f7:4c:4a:59:4e:bb:5d:24:dc:
9b:f5:a7:16:16:89:6d:ff:b6:9f:67:05:73:62:03:
c8:99:29:e1:91:ae:59:6d:e2:a9:89:33:de:84:d7:
cc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:92:52:5B:94:C2:52:10:BD:EA:6D:01:4A:99:3A:55:FC:90:B4:03
X509v3 Authority Key Identifier:
keyid:B4:B0:A4:C2:39:23:14:D2:8A:5B:68:B6:FA:F0:20:1E:A0:A0:14:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLCkwjkjFNKKW2i2-vAgHqCgFLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:19:e5:2d:6e:8d:ff:0d:1d:6d:e9:a8:77:85:f1:31:48:c0:
c1:08:cf:d6:90:03:cf:7a:15:6a:72:08:09:40:c2:34:57:5b:
b3:9f:76:06:e6:db:38:88:2c:c1:ef:c1:73:da:68:36:1b:21:
47:39:30:b7:4e:cb:a7:a7:64:d0:3a:98:b4:de:4b:db:72:dd:
95:ef:b2:d7:4a:e9:67:66:1c:4a:14:b5:cb:fe:65:76:14:84:
71:46:d1:8c:7a:9f:e6:ad:e7:42:86:d2:96:ec:50:c8:9d:83:
02:bd:86:1d:47:7d:76:06:76:8f:75:3f:06:38:da:8b:f9:fc:
95:f2:29:bc:68:7b:5d:60:db:0f:f1:82:43:93:2b:2f:83:88:
79:77:8d:65:5f:8a:95:90:6c:04:a0:60:f4:f6:a4:83:90:9b:
69:02:38:b8:db:98:61:9a:a3:42:ea:30:d3:71:31:a5:8a:24:
60:69:ce:a6:79:76:2a:58:b2:e6:be:16:f2:83:2d:ca:b0:7c:
c7:12:ea:64:dc:28:e2:f6:45:05:cc:46:39:02:a3:5c:9c:2d:
c7:97:bb:af:10:c2:33:7b:1a:fb:2b:af:a1:56:b5:8c:83:ef:
ac:dd:6b:af:fd:d2:c9:3f:f6:97:38:dd:ad:f7:bb:32:7e:1d:
b8:90:85:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 20:02:09 2026 by rpki-client