Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
File: tK_MhnJK4o7jZE0b6ehSCj7zia0.mft (raw, json)
Hash identifier: beqF98dlPzbZbCxcnUqJkypOr2+rO3/oKJg42F2zcV8=
Subject key identifier: 23:6E:DC:91:19:74:A5:55:A0:29:C6:A3:BD:97:F0:E5:52:BD:B4:06
Authority key identifier: B4:AF:CC:86:72:4A:E2:8E:E3:64:4D:1B:E9:E8:52:0A:3E:F3:89:AD
Certificate issuer: /CN=b4afcc86724ae28ee3644d1be9e8520a3ef389ad
Certificate serial: 01A0DF85ECA7632A1996B3FE21F2D12A39E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
Manifest number: ED
Signing time: Sat 26 Sep 2026 21:01:30 +0000
Manifest this update: Sat 26 Sep 2026 21:01:30 +0000
Manifest next update: Sun 27 Sep 2026 21:01:30 +0000
Files and hashes: 1: tK_MhnJK4o7jZE0b6ehSCj7zia0.crl (hash: UBsIfv47EGqa+RdM8tGBkIlod8IqOpGLZZUUfeMGquM=)
2: xknKtTv3aOJfGX6wPs3f3yNuujM.roa (hash: UAJG/h4ZBqmm+2hMDaAp1u3zKvAAvYZrIBtFkvMHGHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:85:ec:a7:63:2a:19:96:b3:fe:21:f2:d1:2a:39:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4afcc86724ae28ee3644d1be9e8520a3ef389ad
Validity
Not Before: Sep 26 21:01:30 2026 GMT
Not After : Sep 27 21:01:30 2026 GMT
Subject: CN=236edc911974a555a029c6a3bd97f0e552bdb406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:eb:f7:59:5e:61:cd:16:fd:2e:e9:ee:20:
2d:39:d0:66:aa:26:d1:1e:12:b1:0e:17:31:1f:91:
c8:61:b2:ad:2d:67:01:fe:ec:65:a0:3f:be:34:cf:
34:3d:a4:f5:9c:85:01:bd:e6:e1:a3:f9:ff:f0:91:
19:3d:96:d4:03:2a:92:7d:e7:a1:fb:71:cd:9e:86:
d3:d9:ae:ae:e6:99:a9:b6:38:d1:02:f4:44:25:f2:
b2:f8:c9:e0:ac:78:88:57:80:d5:c5:21:7f:81:c9:
91:30:0b:ab:49:0e:dc:0b:8f:ef:e1:ef:6d:3a:1e:
0f:52:aa:71:75:2b:3e:fb:d8:ac:26:94:ba:86:56:
bc:28:3e:ff:1d:3f:43:92:47:60:5c:3c:8c:aa:88:
c6:a2:40:4f:34:0a:80:f2:56:5e:21:44:64:6a:82:
51:5c:f6:d0:14:e1:64:e8:bd:34:d7:7c:57:1d:59:
17:8c:66:b8:72:34:90:9d:e7:52:df:32:78:eb:02:
02:09:63:fe:0a:f3:37:1c:75:8e:ed:28:e4:c7:d5:
32:fb:e5:b0:82:5b:e3:83:31:c5:a1:c9:71:ac:c3:
67:b9:db:69:17:60:02:e7:e9:f7:b2:0d:6a:b1:24:
7a:a2:a0:40:44:64:b5:62:97:fe:7a:f8:84:1c:c2:
c1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6E:DC:91:19:74:A5:55:A0:29:C6:A3:BD:97:F0:E5:52:BD:B4:06
X509v3 Authority Key Identifier:
keyid:B4:AF:CC:86:72:4A:E2:8E:E3:64:4D:1B:E9:E8:52:0A:3E:F3:89:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:26:88:85:b1:d4:e0:57:51:84:16:6c:f0:3a:57:28:7f:7a:
67:70:ed:a3:34:bd:82:22:32:0d:a1:56:19:4c:6f:23:71:8b:
ac:e9:77:c0:6f:2f:7d:e9:57:c3:e0:02:0f:f4:e4:c1:5f:4e:
67:62:38:a2:2c:70:90:a1:79:46:47:95:0e:db:1b:74:59:be:
ea:31:22:a5:44:65:c8:76:34:5a:a4:09:4e:6f:f5:02:e6:fd:
a3:4b:62:ae:89:4a:4d:cc:f8:1b:fd:e0:b8:a0:45:f9:f3:fb:
48:cc:74:6a:09:51:d6:fb:17:56:31:02:67:64:76:5f:d4:1c:
fe:15:4e:b1:f4:c1:5d:0e:b4:7b:f0:03:06:50:d6:53:f0:4a:
4f:83:dc:ef:a4:d6:b1:9e:11:03:4e:68:ea:89:ba:9c:cf:3a:
59:f0:59:ef:e9:49:74:79:67:6a:a4:34:39:cf:22:32:d1:b5:
8a:da:29:69:54:47:82:15:80:76:7f:ae:99:b4:53:e4:db:fe:
d6:f2:4d:ea:c1:a3:93:41:e4:89:08:f9:65:63:b8:fb:70:2e:
fe:72:b4:0a:d0:ff:2e:76:88:71:ee:86:4e:52:9d:36:3b:12:
4f:d0:05:02:6b:78:c7:fa:cf:74:3c:11:70:44:50:3d:08:1e:
89:54:7f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:51:16 2026 by rpki-client