Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
File: tRhBzcn2NZTd3CulmkATMYK1efo.mft (raw, json)
Hash identifier: +78Gsg95Xg6MMa+Rx4wU/U7RIkiJyOt9uy6jKvzycE0=
Subject key identifier: 99:BF:51:A5:51:4C:6A:F8:3B:96:53:D8:03:48:10:DF:A0:66:B0:86
Authority key identifier: B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
Certificate issuer: /CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Certificate serial: 01A0DFBD182C1EB68FC6460752F98139AD37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
Manifest number: 1A77
Signing time: Sat 26 Sep 2026 22:01:46 +0000
Manifest this update: Sat 26 Sep 2026 22:01:46 +0000
Manifest next update: Sun 27 Sep 2026 22:01:46 +0000
Files and hashes: 1: gn4_joE3Kg7Iuvtn8_CsNV3N_rY.roa (hash: inZ7mhN1iTFUjJSaH+6rFZpFzgOqpsU8gKqes5JxewU=)
2: tRhBzcn2NZTd3CulmkATMYK1efo.crl (hash: lSIMfR5RWWnSVpJ9MtFJRNKf0uo98TnxHFgCbhSzIMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 22:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bd:18:2c:1e:b6:8f:c6:46:07:52:f9:81:39:ad:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Validity
Not Before: Sep 26 22:01:46 2026 GMT
Not After : Sep 27 22:01:46 2026 GMT
Subject: CN=99bf51a5514c6af83b9653d8034810dfa066b086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fa:41:70:a5:91:bc:53:f4:8f:f5:9c:58:95:
43:3d:87:29:6f:33:96:44:bc:7c:f1:e6:58:55:dc:
ba:b9:b0:77:fa:ab:84:f8:59:56:81:02:7b:a8:44:
ec:9a:ae:f0:f8:17:62:26:8b:6d:c5:65:f3:87:00:
ee:b6:53:56:02:43:75:fd:ee:a6:02:77:48:02:65:
0b:0c:1f:56:db:db:12:b0:b0:f6:f7:80:ee:a8:6e:
84:9d:4e:d2:00:51:33:3e:8a:25:c8:79:03:45:8c:
da:ed:6e:dc:63:2b:58:36:6e:f4:46:57:76:39:f4:
69:0a:48:1d:82:70:14:0c:6b:62:ae:8f:a2:98:87:
37:e8:a2:35:87:32:75:8d:66:1c:ff:2f:e7:0f:8e:
5c:03:4a:77:2b:ac:17:60:4e:fa:fe:43:bb:e5:13:
a5:06:ea:12:7f:e7:6d:01:7e:a9:22:dc:03:b5:28:
72:e0:0a:16:46:09:5f:50:2b:df:f4:c0:a8:23:4f:
00:bb:0d:33:09:13:4e:07:44:7a:f3:01:55:58:a0:
d0:77:c5:92:6e:6b:d8:6f:cc:1b:a5:ed:98:32:80:
09:6f:39:b0:2c:fe:97:7b:72:ab:42:f6:24:20:8f:
fc:f7:bf:ba:37:59:43:05:e2:eb:86:d7:7f:b3:74:
9d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BF:51:A5:51:4C:6A:F8:3B:96:53:D8:03:48:10:DF:A0:66:B0:86
X509v3 Authority Key Identifier:
keyid:B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a1:89:0f:4c:93:a7:91:c3:c3:76:82:b0:02:8b:e2:56:d3:
8b:b0:ef:90:82:91:83:48:9c:4f:a3:f8:c6:2b:02:c9:0a:2a:
2b:bb:aa:1a:2a:c8:70:11:e3:2d:b2:19:63:79:e0:71:3e:f4:
cf:2f:c2:d0:eb:02:00:d5:cf:58:06:c1:4d:8a:53:60:b6:64:
e2:52:00:32:8f:66:92:2e:a2:d5:31:e3:d2:2f:7b:34:14:7a:
6b:2b:9e:cb:04:29:08:cb:6c:ad:9a:aa:f4:8d:66:7f:59:27:
a0:7c:44:a3:f1:53:f3:94:7b:ba:3f:31:e4:82:34:3e:6e:26:
57:ed:8b:cf:f8:f1:60:9f:a6:8e:12:47:19:99:1d:0a:e3:c7:
a3:df:fe:bc:65:15:fe:a0:e7:d1:8e:11:45:d9:f4:d0:07:84:
06:96:af:43:08:47:c7:3e:4a:78:2e:e6:c3:28:fe:87:a8:83:
88:09:e1:66:47:99:c7:da:44:cd:2b:7c:be:79:5d:4e:55:60:
78:e5:1f:8c:5a:dd:de:2f:81:ff:8a:68:e0:ab:36:d2:d4:21:
66:71:19:dc:a2:8a:c6:96:e8:67:46:09:69:1c:4c:33:8e:19:
a7:0a:ff:f4:1a:90:91:4e:4d:1d:74:17:50:b2:2e:56:99:9b:
26:e5:7d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:12:46 2026 by rpki-client