Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
File: tBuxzdW4a-d4BoidLhsgKswnsiU.mft (raw, json)
Hash identifier: 6YeuJO22fpZGK0sP+bylLF+fH4SGYoWzik78dn6898E=
Subject key identifier: A9:8C:73:FF:CF:17:ED:D5:CA:E4:F7:75:CD:04:E5:5E:77:71:11:0D
Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
Certificate issuer: /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Certificate serial: 01A1DBDD01A670753ADDC0E44F8BFFA08D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
Manifest number: 07C8
Signing time: Sat 14 Nov 2026 21:00:56 +0000
Manifest this update: Sat 14 Nov 2026 21:00:56 +0000
Manifest next update: Sun 15 Nov 2026 21:00:56 +0000
Files and hashes: 1: 2bWalxPeCQJ8hBsQRSAPBex2fq0.roa (hash: cNxILQXB6Mynw64tQNRAKKJy7J8sm0Mm5cAcElFdefE=)
2: EJ3x2IdwfHH3UH5syh_4ZfSWYxA.roa (hash: MlUbpIDVvfA4UHQUJSKo2vmPPZS7Hen8jUTVtn35kQ8=)
3: HV5FOEiZp7NQ8X1h7iy1X9p--3k.roa (hash: EOzdMc3GskmF40wiE+yrzgPDbCivBZJb96Tu2M3IGvc=)
4: kpqcS9iGD3Rpk_iaEfzT0Q1dgkM.roa (hash: tIu+noXL+FL6T6WamJRVDXq32TLBt1UuchPxTpkYd9s=)
5: tBuxzdW4a-d4BoidLhsgKswnsiU.crl (hash: oGNUDlg6Vl0mM0Hq2HMQKByg5EItL39pIwKkG9RSok0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:dd:01:a6:70:75:3a:dd:c0:e4:4f:8b:ff:a0:8d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Validity
Not Before: Nov 14 21:00:56 2026 GMT
Not After : Nov 15 21:00:56 2026 GMT
Subject: CN=a98c73ffcf17edd5cae4f775cd04e55e7771110d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:08:91:47:c4:60:cd:c1:d5:9c:58:e2:00:ca:
80:f4:66:e6:3e:8f:ae:96:b8:34:84:52:c6:ca:eb:
d5:f0:9b:7e:4a:8f:c5:84:5f:48:d8:75:7d:c8:ad:
0e:8f:57:b1:b2:c1:cb:4c:d5:62:ac:03:c6:bf:a7:
71:5f:71:35:3f:82:fb:8a:81:84:33:ed:de:46:48:
e3:2a:f1:9d:f5:74:2f:76:76:1d:72:1c:f8:c6:6d:
07:52:b0:3e:04:91:c0:fa:83:0c:d6:13:8b:df:ea:
31:7e:4f:a7:8d:01:11:74:b0:c6:4f:db:c5:bf:56:
d3:85:21:b4:82:61:b1:4f:26:81:8a:51:da:6f:23:
35:80:63:5c:c5:92:d0:8e:88:c6:6e:e3:c4:57:82:
44:f2:eb:f4:a9:25:93:48:05:21:69:32:b3:51:5b:
54:58:61:d9:26:4a:84:06:fc:1c:52:a3:8c:51:a4:
98:1a:82:cd:86:fe:3d:69:e1:6a:68:4f:a6:25:7c:
38:80:df:43:2c:5b:95:79:d3:d8:6a:e6:f7:0d:d4:
2b:34:6c:59:9d:f6:4e:36:76:6d:f6:6b:1a:09:85:
c9:82:71:77:34:64:f8:7c:28:cd:94:04:50:e6:92:
82:c0:10:91:b9:08:a9:f2:ae:f3:3d:1a:d7:3d:4e:
05:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8C:73:FF:CF:17:ED:D5:CA:E4:F7:75:CD:04:E5:5E:77:71:11:0D
X509v3 Authority Key Identifier:
keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:39:b0:dd:3e:b1:53:a2:67:2b:40:31:40:fa:5f:0b:28:b1:
6e:30:d7:34:12:77:b4:f8:7c:26:a2:b0:97:09:dd:5c:73:bb:
82:fe:43:4e:47:0a:bf:46:18:0b:e6:16:c8:a6:e5:fb:f8:19:
03:24:6f:a4:7d:a9:fb:9b:52:a3:94:f6:4f:6c:6d:02:aa:19:
a9:8a:c6:91:a5:3a:12:12:7e:1c:b8:84:01:78:55:54:54:9e:
a3:35:5a:17:b3:7b:e9:de:aa:a6:b9:53:c0:3f:b9:b5:90:75:
9b:c2:2c:6c:61:16:5a:6f:dd:5f:4c:64:e3:08:a7:fc:5d:ab:
cd:5e:e4:1c:b6:c4:12:65:ba:d6:53:00:e5:f6:0f:bb:40:de:
ae:d8:b5:cc:c0:40:32:3b:67:d4:4c:42:21:f1:66:98:f8:df:
45:f7:bb:de:87:c2:23:2f:37:7b:cc:53:02:8c:5f:83:66:d2:
c5:9a:6d:d1:26:93:a2:27:38:78:93:c3:83:73:01:ac:54:1d:
6d:26:36:38:9d:a0:32:f7:11:69:90:a6:31:ab:5f:4c:60:bb:
a2:01:8c:27:a1:00:31:41:77:02:95:d3:85:b0:a6:76:7e:7a:
03:93:8e:f0:26:e9:eb:2e:e8:24:96:12:32:e8:44:e7:ff:09:
ad:a4:db:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:22:56 2026 by rpki-client