Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
File: tDuXodIfY3tUkTDwhXpoHMf2iEw.mft (raw, json)
Hash identifier: 6/mD+lkvAnJbtZwm/RCGitxCaSjpShsXoahsoXlvAa8=
Subject key identifier: 43:F0:A6:3E:BA:08:8D:A8:C6:D7:11:9F:2B:AE:A7:FD:56:1E:9B:B4
Authority key identifier: B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
Certificate issuer: /CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Certificate serial: 01A0E2F44988103DC518F1D2A6757281AE94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
Manifest number: 1A78
Signing time: Sun 27 Sep 2026 13:00:55 +0000
Manifest this update: Sun 27 Sep 2026 13:00:55 +0000
Manifest next update: Mon 28 Sep 2026 13:00:55 +0000
Files and hashes: 1: N79dGcqXOAWTraGm-dUGr_n7g5o.roa (hash: izRmr4QFMP3HYYiVhDYKTcRuMtp1aQuZsgseKcKqny4=)
2: tDuXodIfY3tUkTDwhXpoHMf2iEw.crl (hash: gDs8TdxRLEl1g1Mq0QglGAGThbCYqmsFbeHrmivmRCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:f4:49:88:10:3d:c5:18:f1:d2:a6:75:72:81:ae:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Validity
Not Before: Sep 27 13:00:55 2026 GMT
Not After : Sep 28 13:00:55 2026 GMT
Subject: CN=43f0a63eba088da8c6d7119f2baea7fd561e9bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:70:c4:d3:d3:ee:a9:70:43:f3:88:e5:92:2a:
17:82:4f:29:50:87:4d:b5:01:4e:af:2f:01:d6:f0:
16:c6:2d:d5:cb:a9:e9:ea:f7:b7:c3:f7:5f:89:bf:
99:58:84:0c:6d:07:a8:51:83:3a:73:58:cf:b4:47:
8f:88:ae:88:a6:27:7a:c5:6d:13:eb:9d:3f:c5:2d:
49:fe:28:81:75:5a:03:95:0e:47:9d:20:77:10:89:
cc:70:45:1c:cf:c9:65:b6:34:6c:14:46:36:8e:e9:
31:70:44:4c:13:c3:56:a0:06:c3:7c:76:42:a6:c5:
46:76:65:45:bf:d5:7a:a3:62:f8:1c:82:b2:b4:94:
f7:e9:64:5a:94:84:7c:13:cb:24:de:36:b7:1e:52:
a1:64:98:67:97:f1:c4:a0:a2:bc:a3:90:f4:12:bc:
fd:ce:6a:c1:b4:65:c7:e0:c3:ae:cf:0c:62:58:b7:
8e:da:bd:a4:9b:3a:eb:61:a6:e1:71:11:da:eb:ca:
72:79:1d:7b:8b:e6:52:88:a5:1b:15:c4:fe:a7:f5:
7c:3d:29:17:23:a4:b8:3c:0c:c1:19:17:f0:f3:01:
9e:01:d2:04:25:2c:64:c6:2a:95:b0:95:8d:c2:4e:
27:1d:43:5c:8a:5a:9a:e3:a2:00:17:82:a3:52:7b:
52:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F0:A6:3E:BA:08:8D:A8:C6:D7:11:9F:2B:AE:A7:FD:56:1E:9B:B4
X509v3 Authority Key Identifier:
keyid:B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8a:f5:75:49:b5:5f:1d:12:1a:ba:3f:31:0a:5c:c4:a0:8f:
97:7f:36:e2:8b:87:e8:fa:28:13:2b:00:fa:2a:d8:0d:eb:d7:
a5:b1:38:f7:f8:f3:36:19:ae:37:df:28:07:68:f3:69:7b:70:
a6:06:89:f0:26:f3:c3:ac:15:a5:2b:36:22:c1:94:db:e5:b3:
78:e4:f6:5d:5f:3a:9e:b6:b7:c2:b5:b2:07:b0:40:b1:98:4b:
9d:1f:45:2e:83:f2:c8:04:ab:74:b2:65:f7:cb:c8:43:80:19:
96:a8:5a:2d:83:6a:68:ea:0b:78:1e:28:b3:31:1e:a1:d7:bd:
85:8b:1a:3f:a7:63:82:d7:79:e5:38:d8:8d:8b:be:30:9e:96:
03:f3:8b:3c:c4:4b:d3:14:41:29:d7:14:90:7c:27:6d:4f:50:
b6:02:46:cc:0b:73:b2:36:7d:09:38:9d:5e:33:eb:60:88:de:
1a:c6:66:d1:57:91:7a:8f:1d:a6:c6:25:c5:24:a2:9d:0c:18:
5b:26:0f:2e:b7:5e:bc:e9:36:37:ea:50:3d:27:8c:50:c7:6c:
06:75:35:4a:a5:db:aa:b9:72:f4:e4:76:57:ea:f9:3e:1b:41:
98:61:a3:39:c1:98:bd:34:ff:26:cd:e3:9d:3d:fc:53:e9:42:
ed:37:01:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:51:57 2026 by rpki-client