Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
File: tUMb1z4KfwN965fYLRqV_NZxBRw.mft (raw, json)
Hash identifier: J+AhSJ/Q13wLSh6pqATtBs4/A9nK/AjjvKHxzHLNrBk=
Subject key identifier: F0:D6:38:63:C6:C5:07:20:5F:3E:1F:12:1A:A4:5E:80:3E:9A:A2:65
Authority key identifier: B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C
Certificate issuer: /CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c
Certificate serial: 01A0E407BA67B2C88472DFC8392A55C94AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
Manifest number: 0349
Signing time: Sun 27 Sep 2026 18:01:46 +0000
Manifest this update: Sun 27 Sep 2026 18:01:46 +0000
Manifest next update: Mon 28 Sep 2026 18:01:46 +0000
Files and hashes: 1: ptIvn2G44nmjMz4OoTPMvDGmQ4g.roa (hash: mVPD346A3srmdFGJdgacd5EA7ZXTURNtKW04Yxreb0M=)
2: tUMb1z4KfwN965fYLRqV_NZxBRw.crl (hash: tq9jW8W8UuK4jANWC4fdvPbwHdr2jwYXaIcntPN5TeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:07:ba:67:b2:c8:84:72:df:c8:39:2a:55:c9:4a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c
Validity
Not Before: Sep 27 18:01:46 2026 GMT
Not After : Sep 28 18:01:46 2026 GMT
Subject: CN=f0d63863c6c507205f3e1f121aa45e803e9aa265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:73:ec:4b:97:0c:dd:90:15:fa:2c:f0:2a:
e8:32:8c:0a:aa:a1:85:71:5e:52:40:cb:3c:53:85:
0d:ef:5e:d5:fb:5b:34:09:06:26:d2:5a:b6:61:2d:
c0:01:e5:bb:e6:08:b7:66:9c:3f:06:b4:b3:e4:fc:
b0:d1:b0:b8:ea:a8:ba:b6:57:64:78:ff:0f:e8:73:
fc:1e:39:50:f0:56:4a:97:d7:cd:de:04:d1:7f:a9:
f5:79:b3:a9:8d:88:ca:54:94:00:3f:a7:e4:8d:07:
da:13:f0:71:06:3a:5c:3d:7e:df:ae:d5:44:a9:2b:
b2:ea:07:32:cd:de:cd:41:f2:7c:6f:82:01:4e:65:
54:ad:4b:63:f1:cd:1f:10:bf:86:08:a5:28:ca:73:
46:6d:2c:f3:88:40:86:59:dc:44:a6:ee:85:a8:6c:
cb:54:bc:28:ff:66:3d:6f:44:47:61:b4:df:c1:7a:
9a:e1:06:1f:79:bf:22:93:52:4f:f0:a9:f3:35:04:
f2:7c:5a:1a:18:29:0c:bb:d1:e7:8f:54:78:9d:fe:
f9:b7:fc:7e:3c:eb:69:15:60:e4:8e:b9:52:64:8c:
ba:dc:60:de:24:18:ab:44:27:0e:fa:e1:25:2f:a5:
ff:3f:50:47:be:a6:e2:c9:57:89:a0:f0:b9:84:70:
f7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D6:38:63:C6:C5:07:20:5F:3E:1F:12:1A:A4:5E:80:3E:9A:A2:65
X509v3 Authority Key Identifier:
keyid:B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:29:61:34:f0:08:08:29:74:7f:29:b7:75:5c:ff:4c:86:06:
8b:f6:4c:ea:c3:19:eb:4a:88:66:57:7d:34:6d:9b:ea:86:4e:
63:96:ea:2c:ca:13:50:cf:df:b9:12:3a:69:fe:d8:38:b5:3c:
c1:ea:df:53:84:4e:d4:15:fc:10:a8:b5:29:62:1d:03:7a:6d:
89:1a:e8:ba:50:30:cd:96:e1:26:93:55:7e:f3:5e:29:d5:cd:
c1:7d:f3:a1:42:42:5b:6d:3b:8a:39:04:93:c3:df:d3:51:d9:
56:51:2c:80:3d:5b:3a:2d:91:3f:7b:71:7d:df:04:aa:2b:13:
f8:95:77:e7:f9:20:dd:59:77:0f:42:76:4d:73:f8:09:af:64:
df:bb:9d:52:02:65:ae:ab:2b:3e:ea:a9:fe:a0:77:32:66:d0:
41:38:0e:40:b5:2f:aa:6a:54:22:e6:80:57:88:4c:ef:a0:9e:
a0:f7:93:77:19:3d:ec:49:5f:ea:24:88:86:07:23:b0:7c:2e:
25:37:ce:01:3a:5d:cb:d5:a0:3d:2a:c3:06:b0:a8:24:55:36:
1a:6a:b0:2f:fc:1e:3e:62:03:f1:2a:ed:72:0f:00:22:42:ba:
2d:82:6c:82:c1:96:9a:74:4b:41:bc:d3:a5:a8:5c:7e:18:1f:
52:aa:93:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:15:33 2026 by rpki-client