Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
File: tCQBfG4cj_1jly4CRJCYR33fF98.mft (raw, json)
Hash identifier: elOHMdCJdnIBKb4qnk+4Bd1A8k4cycTcWmTWzhovfOE=
Subject key identifier: CF:B4:DC:71:73:0E:90:44:D5:BF:F6:0D:D3:BA:2F:F2:01:24:8C:58
Authority key identifier: B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
Certificate issuer: /CN=b424017c6e1c8ffd63972e02449098477ddf17df
Certificate serial: 01A0CDECB94D7F35827F795948380FE5FF77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
Manifest number: 0235
Signing time: Wed 23 Sep 2026 11:00:38 +0000
Manifest this update: Wed 23 Sep 2026 11:00:38 +0000
Manifest next update: Thu 24 Sep 2026 11:00:38 +0000
Files and hashes: 1: Z9tAGQF9StCthIO0Pjcyl0N2xM4.roa (hash: 6AWanwgFbNvMqkMl3YCOopQDUI07IMGf93/6aV4ujtg=)
2: h2S5SOYfIdtYgW2lzny0MQ8S930.asa (hash: rCu8Reo7yVY7Fv0iiMibroZtuw9DHcD5SnkWO03YCtk=)
3: tCQBfG4cj_1jly4CRJCYR33fF98.crl (hash: NP5Mbv3TFnVl3KO4UA8NVLr9oUygq0YmXHL02CfQKTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:b9:4d:7f:35:82:7f:79:59:48:38:0f:e5:ff:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b424017c6e1c8ffd63972e02449098477ddf17df
Validity
Not Before: Sep 23 11:00:38 2026 GMT
Not After : Sep 24 11:00:38 2026 GMT
Subject: CN=cfb4dc71730e9044d5bff60dd3ba2ff201248c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ec:d0:de:cc:8b:24:73:98:26:88:a7:d6:ca:
91:97:da:eb:ca:d8:42:1c:9b:29:46:e1:7d:d2:0a:
f4:4f:2a:f5:8e:3e:18:74:bf:37:56:ef:41:35:d5:
d1:91:17:53:26:00:dd:b0:75:27:bc:01:df:b1:4e:
48:50:0a:23:9e:2c:5b:49:07:78:e9:90:98:d9:6d:
0c:20:30:28:ad:03:cc:49:fd:48:b5:9a:c5:63:9d:
ce:a8:af:46:10:55:5c:f5:7f:55:8c:20:c1:c1:4c:
76:82:27:14:47:6f:fa:04:2b:34:fb:ba:7b:d3:83:
18:69:cc:b1:3a:e8:83:73:db:2c:a0:24:a6:e0:7e:
09:02:21:0b:a9:87:0e:d5:0b:62:7d:e4:10:c9:e1:
47:cd:5c:12:68:73:3c:96:12:dc:e2:62:0a:7f:d1:
28:21:80:4c:9c:41:8a:d4:ec:1a:b5:89:bf:3a:1b:
2e:69:0b:3a:02:4d:a9:3c:35:e1:59:8a:9b:f7:61:
25:79:74:81:9b:d2:11:20:65:74:07:a8:e8:59:4f:
0c:cc:e8:ea:87:92:14:75:a8:58:ed:5a:05:93:a1:
00:22:18:d2:dc:4e:46:92:f5:e6:99:98:f5:21:18:
c5:ef:46:6c:8f:e0:ec:fd:05:a4:cb:3a:b7:26:20:
33:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B4:DC:71:73:0E:90:44:D5:BF:F6:0D:D3:BA:2F:F2:01:24:8C:58
X509v3 Authority Key Identifier:
keyid:B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:66:ec:ce:18:72:e9:42:97:cb:ac:c8:ff:14:96:d7:ac:40:
81:a3:de:2b:91:1c:5f:89:20:36:ed:bb:0f:3d:e3:60:84:23:
71:1d:e9:1a:10:da:d8:9d:86:31:62:f3:51:a2:47:c9:d6:c9:
1a:d8:46:48:1c:06:0d:97:ac:70:2e:e3:14:da:e2:61:d2:1f:
d2:54:7f:58:1e:d8:52:6f:98:10:63:3e:4f:a5:da:83:d8:77:
8c:3a:6e:f6:5d:8d:b4:3c:b5:99:43:52:a0:85:5c:2a:da:13:
64:cd:90:45:84:72:5f:33:86:c6:cd:fe:a0:7a:ce:91:7e:65:
95:3c:a8:6c:62:96:da:fa:c3:b2:d9:f5:ab:0d:14:11:13:a4:
a8:b3:f5:b9:ea:c0:26:7e:d6:ea:06:7b:67:a0:cb:1c:01:e1:
11:63:78:33:e5:e9:a5:01:2a:4c:03:9a:46:0e:92:a6:83:d6:
43:6f:79:5f:5e:d6:a1:bd:c7:d2:f3:99:b4:90:2f:d4:42:d1:
c4:5d:0a:30:d1:7a:bb:70:44:1e:44:b7:1f:7a:db:e4:d3:d4:
f3:e5:0b:37:76:6c:1d:99:bf:cd:60:ac:1e:2e:29:53:f9:f2:
00:24:b0:51:63:2b:cb:bc:10:98:d1:11:41:31:33:fc:82:82:
49:81:fb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:40:23 2026 by rpki-client