Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
File: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft (raw, json)
Hash identifier: cBiXC6tzpy2nCEHvk9VzTBNLI/725AYGqUj0PJEjzIw=
Subject key identifier: 23:90:FF:50:FC:F1:29:45:34:E6:B6:E3:07:22:3A:6E:6A:CA:A1:E7
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Certificate issuer: /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial: 01A0EB8998D315F50F663BE0EDAADD21FAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
Manifest number: 0B51
Signing time: Tue 29 Sep 2026 05:00:58 +0000
Manifest this update: Tue 29 Sep 2026 05:00:58 +0000
Manifest next update: Wed 30 Sep 2026 05:00:58 +0000
Files and hashes: 1: pf4imHRU2e6GfZe8rQKhzIc5LBg.roa (hash: dsJgVjGxo4nm0IH9s2QS1ktYyvlCS7K764cL/mH8BNg=)
2: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl (hash: aRroaXH03jR/r26827cw85NHz2fTfPZ4VSBclXqi2Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:89:98:d3:15:f5:0f:66:3b:e0:ed:aa:dd:21:fa:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Validity
Not Before: Sep 29 05:00:58 2026 GMT
Not After : Sep 30 05:00:58 2026 GMT
Subject: CN=2390ff50fcf1294534e6b6e307223a6e6acaa1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:d2:5e:c2:95:36:17:fa:fb:94:89:e3:e9:
7d:45:64:6a:34:4e:14:05:f4:4b:d2:b7:f6:da:76:
d8:a4:ba:0d:3b:1b:6b:64:1e:f5:4e:e4:bb:1b:81:
ef:62:02:fa:74:c3:4a:2c:29:55:c3:6c:f2:cb:4c:
0d:8e:3d:8e:8b:78:c3:43:95:ff:e2:48:ff:3b:2f:
c8:47:a1:30:4f:d9:c2:d7:7d:38:e3:96:6e:b2:34:
94:b7:79:1e:56:7c:c1:a2:a0:5a:ab:b2:03:97:ff:
33:9b:d1:31:83:fb:c0:02:82:e9:b4:c1:4e:c0:09:
12:c8:4b:76:81:6f:5a:54:20:68:d5:12:99:02:5c:
33:e5:65:e6:2f:ee:49:b5:c9:eb:90:24:7e:e0:78:
7d:0b:f2:c2:85:fd:25:1f:92:56:be:a3:55:f5:fc:
bf:74:19:40:d2:ff:6b:8d:e2:c7:0a:a9:37:b8:fd:
b5:9f:af:20:b1:a7:0b:ed:1b:7f:3d:d9:ba:c0:d0:
d2:7e:5f:eb:b0:b7:a5:4d:8b:5b:1e:e6:95:9a:a2:
44:7a:c0:af:d6:1f:7b:03:c9:27:6e:9d:5f:ed:4d:
84:88:fe:24:ed:6a:51:37:4a:ef:29:01:e5:e5:45:
24:1d:1f:99:b2:eb:21:5b:f5:67:c0:4b:c0:f5:77:
03:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:90:FF:50:FC:F1:29:45:34:E6:B6:E3:07:22:3A:6E:6A:CA:A1:E7
X509v3 Authority Key Identifier:
keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9f:c2:08:be:ad:7e:08:0a:34:77:74:5b:9c:24:d7:db:8e:
2c:11:39:d8:36:72:99:fa:c8:fe:b2:3f:13:59:8f:8a:1e:20:
f9:52:f2:5b:a3:27:c2:ee:48:6b:a4:8b:a7:49:4f:aa:04:a5:
52:bb:36:1a:fd:26:9f:18:6e:94:01:46:d3:37:4c:79:14:1d:
f7:82:bb:1c:05:0f:a4:ef:a1:2d:68:4d:84:36:d8:8e:20:52:
6a:76:ed:0e:ca:82:f3:1a:7a:b2:a3:b7:25:fc:c9:5b:3f:84:
c4:cd:0a:8a:27:9b:85:69:65:c8:1f:ec:49:72:f2:e7:97:4c:
c4:db:7a:9b:49:e8:2b:dd:27:89:7c:ce:b1:17:a8:2a:be:82:
fd:fc:6c:c0:7c:6b:1d:93:ee:20:41:96:b6:a7:7d:ee:ba:52:
fe:a5:ff:39:96:74:36:1f:a6:62:cb:67:82:c6:d7:b8:75:0a:
64:dc:56:06:2a:85:17:ff:ca:2a:f5:c1:8c:6f:73:8b:c5:8b:
cf:4e:39:f4:25:4c:e7:4e:43:07:c4:9d:37:58:e8:23:72:fd:
ed:65:92:23:ee:f6:b2:51:b1:2c:16:6c:72:0e:49:de:2e:10:
52:21:b0:f5:54:0f:3f:9c:4d:3d:76:79:b4:8a:ad:41:63:4b:
f4:8c:41:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDriZjTFfUPZjvg7ardIfryMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTNhMmIzZmI4M2Q4NmM3ODA2Y2MwNjYwZDgyOTExOWQ5
Mzc1YjQwHhcNMjYwOTI5MDUwMDU4WhcNMjYwOTMwMDUwMDU4WjAzMTEwLwYDVQQD
EygyMzkwZmY1MGZjZjEyOTQ1MzRlNmI2ZTMwNzIyM2E2ZTZhY2FhMWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVbSXsKVNhf6+5SJ4+l9RWRqNE4U
BfRL0rf22nbYpLoNOxtrZB71TuS7G4HvYgL6dMNKLClVw2zyy0wNjj2Oi3jDQ5X/
4kj/Oy/IR6EwT9nC130445ZusjSUt3keVnzBoqBaq7IDl/8zm9Exg/vAAoLptMFO
wAkSyEt2gW9aVCBo1RKZAlwz5WXmL+5JtcnrkCR+4Hh9C/LChf0lH5JWvqNV9fy/
dBlA0v9rjeLHCqk3uP21n68gsacL7Rt/Pdm6wNDSfl/rsLelTYtbHuaVmqJEesCv
1h97A8knbp1f7U2EiP4k7WpRN0rvKQHl5UUkHR+ZsushW/VnwEvA9XcDiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOQ/1D88SlFNOa24wciOm5qyqHnMB8GA1UdIwQY
MBaAFLRTorP7g9hseAbMBmDYKRGdk3W0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9iZjc0OGQtYzRjYS00ZmQxLWE1OWQt
NDA2MGYyMTFmM2MzLzEvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9iZjc0OGQtYzRjYS00ZmQxLWE1OWQtNDA2MGYyMTFmM2Mz
LzEvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5/CCL6t
fggKNHd0W5wk19uOLBE52DZymfrI/rI/E1mPih4g+VLyW6Mnwu5Ia6SLp0lPqgSl
Urs2Gv0mnxhulAFG0zdMeRQd94K7HAUPpO+hLWhNhDbYjiBSanbtDsqC8xp6sqO3
JfzJWz+ExM0KiiebhWllyB/sSXLy55dMxNt6m0noK90niXzOsReoKr6C/fxswHxr
HZPuIEGWtqd97rpS/qX/OZZ0Nh+mYstngsbXuHUKZNxWBiqFF//KKvXBjG9zi8WL
z0459CVM505DB8SdN1joI3L97WWSI+72slGxLBZscg5J3i4QUiGw9VQPP5xNPXZ5
tIqtQWNL9IxB6w==
-----END CERTIFICATE-----
Generated at Tue Sep 29 12:33:01 2026 by rpki-client