Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
File: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft (raw, json)
Hash identifier: 3mM7Z7hBIGuBCHvuIxpIPRTPChvDadCpOUwbfdxMfZQ=
Subject key identifier: BA:82:B4:0D:03:01:08:AF:49:47:1E:6D:7A:26:62:07:7B:DA:5B:6D
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Certificate issuer: /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial: 019E1F114CB55609261EA746447D6FCFBF8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
Manifest number: 09DE
Signing time: Wed 13 May 2026 02:01:27 +0000
Manifest this update: Wed 13 May 2026 02:01:27 +0000
Manifest next update: Thu 14 May 2026 02:01:27 +0000
Files and hashes: 1: pf4imHRU2e6GfZe8rQKhzIc5LBg.roa (hash: dsJgVjGxo4nm0IH9s2QS1ktYyvlCS7K764cL/mH8BNg=)
2: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl (hash: 8jdMU8c66V2LgPG7IhwWA98L37STGjieZKvL9kWsiyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:4c:b5:56:09:26:1e:a7:46:44:7d:6f:cf:bf:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Validity
Not Before: May 13 02:01:27 2026 GMT
Not After : May 14 02:01:27 2026 GMT
Subject: CN=ba82b40d030108af49471e6d7a2662077bda5b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8e:a6:0f:ae:b4:b2:e6:c1:aa:8a:ea:15:5c:
63:0d:0a:df:ca:01:81:45:2a:38:9b:49:7d:dd:71:
46:df:08:22:c7:1b:51:e7:3c:20:e5:db:6d:14:de:
fa:0c:bf:26:6e:fa:97:67:c1:2a:41:3c:44:e7:05:
d9:09:00:69:8e:cc:b0:7c:57:2d:88:06:83:b6:cf:
36:cf:59:5b:6c:f8:16:0c:ff:05:ab:eb:b2:0f:6d:
11:5c:c5:65:fa:22:3d:e5:ac:80:f8:79:35:8d:c7:
12:3f:7f:04:95:b1:2e:f7:c8:53:8a:74:56:fa:95:
96:a3:1c:7d:0a:7e:c8:93:10:2e:1b:cd:7b:22:34:
82:4a:4e:76:f0:87:e3:4f:f2:2d:ea:3e:33:8d:79:
5b:66:7a:bd:af:f3:3b:bc:f7:3e:08:24:ae:b1:a0:
5c:77:28:7e:20:fd:9b:59:d3:48:16:1f:12:4a:3c:
d7:19:08:5e:03:e7:96:f3:a2:c7:a3:e5:ee:39:06:
3c:81:25:b4:8e:43:46:21:3e:43:fb:95:0f:43:1f:
fb:a2:06:19:37:2d:9a:e0:34:6b:ff:75:4e:e7:ae:
df:de:7d:57:ce:67:42:08:c6:e2:4f:27:a9:5b:f0:
4f:47:9e:f4:31:00:a0:b7:00:0c:86:bb:4e:44:ee:
e3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:82:B4:0D:03:01:08:AF:49:47:1E:6D:7A:26:62:07:7B:DA:5B:6D
X509v3 Authority Key Identifier:
keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:84:97:38:5b:6e:a5:a4:6c:55:14:61:7e:e8:7c:3e:ca:33:
ec:fa:ed:14:59:f8:e0:3b:33:72:cc:e0:ac:d0:58:3f:eb:a9:
63:ac:70:03:33:af:35:2b:62:43:b0:32:74:6a:ac:16:f9:a0:
76:7b:cd:99:89:a5:8c:1b:3b:6b:b7:e4:8a:49:81:36:e5:b1:
46:0d:30:eb:1b:d1:4c:01:ab:a7:86:7c:b2:81:cb:8f:b6:42:
6f:a2:79:6c:3e:f2:40:91:64:85:72:c6:bd:2f:2f:22:c3:f0:
df:d6:3c:1e:e8:7b:e6:a6:9d:9e:2f:03:90:4a:c6:b7:6a:f8:
00:46:d4:62:dc:cb:fc:ba:63:7c:d2:b7:c7:5a:79:07:db:e8:
11:5f:a2:9d:a2:b4:9b:85:e7:b9:39:da:6e:0c:23:66:9b:85:
38:ee:89:84:ae:63:f3:c7:7c:25:59:fc:21:18:91:3c:cd:59:
98:46:79:d5:6b:1a:54:17:03:bf:ae:69:cc:27:b3:9a:d1:1b:
20:fb:4b:dd:e7:88:95:1e:c6:fa:a0:af:00:38:ba:62:ed:3b:
c8:b7:f1:65:b1:18:fd:71:fb:c0:56:53:8a:7b:a1:ca:50:a4:
df:56:32:bf:1a:f1:24:95:02:f3:be:07:64:3f:e3:83:1e:eb:
0e:c3:45:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:45:57 2026 by rpki-client