Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
File: tYUi2sa83oxIEzNZkTKhYgDmpb4.mft (raw, json)
Hash identifier: +maa0KoxP6hKTpdzvmBkSp8cwtog+PmabxTzm5vKJqI=
Subject key identifier: 65:E2:94:9A:E8:9F:30:D2:C3:40:99:1D:7B:C7:87:83:60:F9:E2:3E
Authority key identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
Certificate issuer: /CN=b58522dac6bcde8c481333599132a16200e6a5be
Certificate serial: 01A0EF2F84666E2F13610A98F6D5AC220DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
Manifest number: 0DD6
Signing time: Tue 29 Sep 2026 22:01:03 +0000
Manifest this update: Tue 29 Sep 2026 22:01:03 +0000
Manifest next update: Wed 30 Sep 2026 22:01:03 +0000
Files and hashes: 1: 18A7L44_0ILwZodGFUSDQ2eubuc.roa (hash: TWAVfWQBRDutGoFMNTBpWa6veuSEAlw+UuaoPc+ikg4=)
2: 2BnXbJN0-tuiSw2yPhv5M-hIP_g.roa (hash: 7StJAAew0duMZOz948e0I6qxBTgJCwCzq3+RHVzjmKc=)
3: tYUi2sa83oxIEzNZkTKhYgDmpb4.crl (hash: fD75pspHMTV7QcnUrTfWxghZ3xIogZQuvXj9Q48DWCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:2f:84:66:6e:2f:13:61:0a:98:f6:d5:ac:22:0d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b58522dac6bcde8c481333599132a16200e6a5be
Validity
Not Before: Sep 29 22:01:03 2026 GMT
Not After : Sep 30 22:01:03 2026 GMT
Subject: CN=65e2949ae89f30d2c340991d7bc7878360f9e23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:bb:03:2b:88:07:73:9d:8f:a4:26:d5:8c:
9e:0f:f9:02:8f:b8:f4:16:29:d6:2d:5b:b3:48:ae:
af:b0:fb:86:b3:3a:f2:1d:49:83:f1:32:e3:ae:f0:
fe:dd:4b:a6:7a:55:06:a7:5a:75:0f:2e:6e:8c:96:
14:87:99:a4:47:77:54:2d:54:37:c9:a8:c3:b4:7c:
98:99:3f:a9:08:33:30:67:72:77:98:52:30:a3:27:
46:7d:00:ea:c4:b5:bb:49:8a:02:e4:87:67:24:1d:
5c:0c:12:a9:ee:6e:d3:61:13:99:ca:6c:0e:b2:d6:
06:2a:80:01:ec:4e:69:e3:36:bd:06:47:ef:ee:47:
95:ae:01:3d:39:3b:21:5a:4b:6a:c2:7c:1b:d7:01:
4b:49:1f:fa:79:7d:4a:23:05:d5:c9:ea:ad:77:2b:
fc:00:a1:96:4e:f2:13:c9:60:82:7c:5b:d3:90:87:
3c:9e:81:3c:49:7f:49:4d:3c:28:17:ac:e7:74:72:
70:d5:63:46:4c:36:d6:15:89:44:34:79:f9:3a:88:
71:05:08:7c:e1:4f:bf:7f:54:4a:63:6f:b3:ed:b8:
ef:de:bc:70:f0:9b:d4:01:1a:df:6a:9b:b5:0f:95:
05:63:05:72:3e:9f:1c:86:16:b9:76:e5:bd:19:cf:
2c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E2:94:9A:E8:9F:30:D2:C3:40:99:1D:7B:C7:87:83:60:F9:E2:3E
X509v3 Authority Key Identifier:
keyid:B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:88:67:9f:41:85:8d:44:f7:5f:51:48:91:f7:e7:11:32:d5:
c5:45:15:52:bb:e6:2a:4b:7f:38:da:2f:8e:85:8f:5e:f7:05:
47:a1:9d:5b:6d:3a:25:25:fb:c9:b4:1c:0c:18:a8:f4:27:15:
20:08:17:cd:5b:03:c5:df:96:e2:40:85:41:e4:0d:25:bc:39:
f3:b1:05:c6:30:be:4a:13:89:ab:4f:c0:83:6d:85:d3:15:0b:
75:bb:fe:1e:9c:23:70:bd:27:11:88:ef:8f:36:74:01:2e:42:
da:ff:e9:dd:40:33:01:12:e3:30:09:a0:3f:c7:ec:3e:4f:df:
bd:c3:5a:50:be:f0:7e:78:a0:47:eb:94:25:b2:9b:d2:e9:9a:
67:b2:d0:07:e1:41:8f:18:b8:40:24:9e:db:c0:3c:f1:99:3a:
d0:b9:42:6c:78:4a:a8:2e:c4:e5:bd:24:f1:42:0f:21:ed:57:
7d:19:c7:d7:b7:73:97:2a:65:3d:ed:f8:4f:5c:49:1b:77:bb:
10:96:e9:dd:c3:07:1d:05:ce:7c:ec:9e:43:c0:5a:9b:6f:e3:
48:1d:75:00:8a:32:5e:a7:d8:0c:0f:c3:ce:ae:95:6f:d1:4b:
36:0a:22:f6:e1:b4:11:26:77:01:1f:b1:41:3d:20:b7:5a:dd:
cc:4b:21:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:46:21 2026 by rpki-client