Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
File: tRidnqgtX7tm1sEfGHYzR2A04N4.mft (raw, json)
Hash identifier: PQByPOIadwjRxdtFJt9+N/2hPWRqFNQ6uU3OqHwyOEo=
Subject key identifier: 34:8B:96:E9:99:DB:2A:1D:B8:86:EC:92:DF:A2:04:32:AD:06:38:89
Authority key identifier: B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
Certificate issuer: /CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Certificate serial: 01A0D0801743E6B71283A6050F65E4E0F569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
Manifest number: 0251
Signing time: Wed 23 Sep 2026 23:00:50 +0000
Manifest this update: Wed 23 Sep 2026 23:00:50 +0000
Manifest next update: Thu 24 Sep 2026 23:00:50 +0000
Files and hashes: 1: 72DmjSMw_29l_MO3IEi6OHdN1xU.roa (hash: 8Q2q436xMShLzuSw0XiF5YubpeOEkzT16ilKpEr4WNs=)
2: PoRIN0dVSAqaAWKn9ELbCUPN7Jg.roa (hash: LsqKFis/T/54SQiHP5UPnUKT29GNEt5RyIpD8UjP9yM=)
3: TeVnupeK_YGYnRPsXm4BzJfTjS8.roa (hash: +to8DEmlcRGaEadfSEWc6hlZ2GarI7KNFF5xKs1DZR0=)
4: UgRQ-S_2_jSMHR28Yfy4B7uMcDM.roa (hash: 2q1tfYfhbbmDrJeuTIKGf6ksnLxn1XENXGZ1v4ftHM8=)
5: a73ilWUc_Nrs3Jl6BZxzTzmJLZs.roa (hash: WvDo87B2C+QVONEixLsbWJGXRyfPQL9c6V0kT+6W0SI=)
6: cwmNk6bauKUzUIBHxMYj4Ucw8iM.roa (hash: h5yQVWC+XIfRSSbHYLwBKmXd6G/qYJCUqPZaJnYQNT8=)
7: gCEAfeGtC7sCDWjwRgdE41W_tBw.roa (hash: shPX6M61gEwMPP1QY1pi1KXBEKTnDFJ7aoQzTSjSFHw=)
8: p3wpRRs-f7GQUm8KtIUlma6wjSs.roa (hash: 90E81RrURGxHLOrJQ2EQ5/Y8TtYWMesX5r41cRtv1NA=)
9: tRidnqgtX7tm1sEfGHYzR2A04N4.crl (hash: t7IecfofLM/651IDQMihOnn2wycOPHBDzJaXlhoNPns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:17:43:e6:b7:12:83:a6:05:0f:65:e4:e0:f5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Validity
Not Before: Sep 23 23:00:50 2026 GMT
Not After : Sep 24 23:00:50 2026 GMT
Subject: CN=348b96e999db2a1db886ec92dfa20432ad063889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b5:aa:2f:6a:b2:09:44:e7:ed:f2:56:0b:b4:
cc:9e:0a:07:e0:f2:61:de:8d:12:f3:06:7b:1e:19:
e9:0b:8b:1c:fa:80:36:b2:52:57:be:2f:37:6b:c9:
17:35:f8:5a:90:7d:d7:10:58:c7:62:47:6b:6b:87:
74:67:18:80:32:43:e8:37:45:12:1d:26:72:9a:cc:
64:d2:1a:f8:b1:7f:27:2a:90:6d:fc:07:00:e8:e2:
40:0f:3a:a1:c4:55:d4:15:24:f7:17:c1:25:66:66:
c4:f9:cd:34:c0:cd:d5:d3:16:7f:01:d9:1f:60:63:
2e:fd:8f:6c:29:59:50:3d:51:e9:3e:30:09:f2:95:
d3:a5:b9:34:1b:2f:da:f6:dd:d8:1a:c8:37:70:99:
37:4a:10:24:eb:49:22:02:4c:80:eb:7d:aa:3e:c4:
4f:eb:b8:ed:b3:75:dd:ce:bf:e2:d5:83:b5:be:eb:
0d:a1:bf:bf:16:0d:84:b4:d4:c2:07:f2:7e:08:56:
f2:d6:dd:ad:f7:50:00:4a:f8:67:ec:75:5e:63:d1:
e3:a0:77:d7:90:b4:c0:27:25:1b:a7:f6:3c:d9:23:
5d:80:51:8b:e8:68:30:e2:d2:a4:a5:0a:70:4e:59:
7c:7e:72:9c:fa:af:9f:bd:9d:ef:f0:cc:c6:04:9f:
f7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8B:96:E9:99:DB:2A:1D:B8:86:EC:92:DF:A2:04:32:AD:06:38:89
X509v3 Authority Key Identifier:
keyid:B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:68:fc:e4:38:1f:1a:cd:25:8b:09:08:9c:b7:82:95:3b:89:
9c:31:fd:27:e8:8d:fb:af:55:a8:d9:87:a3:39:d2:11:e7:77:
b9:29:88:bc:a5:35:4a:be:8a:61:15:06:3a:52:52:38:73:7f:
11:d3:31:f4:d5:8e:0f:cc:dd:00:6e:8f:1c:1f:3f:51:ff:d8:
67:2d:f8:63:48:dc:26:25:cb:ee:ca:05:1b:1d:42:82:fb:94:
10:a3:3b:a3:c8:15:31:ea:82:1f:bb:b3:08:1f:66:90:9b:58:
df:16:77:5d:7c:9f:ed:ba:44:14:62:82:d1:18:57:19:35:5e:
d7:d8:93:6f:57:9b:e5:15:64:cb:a0:4a:22:b2:a0:07:1b:4b:
c9:f0:3f:c4:be:f6:51:9e:41:8f:3e:7a:44:e6:02:07:8b:78:
f9:cf:3a:31:f9:b6:26:79:d7:8b:d9:c6:b7:0e:97:62:e7:ce:
f4:a6:4b:7e:fa:e7:46:2d:6c:8b:49:c2:37:27:ce:ce:90:8a:
44:4f:e1:4a:bc:7e:15:6b:d3:a2:97:ae:49:6f:58:e2:b7:42:
d0:56:7a:11:5a:8f:f4:ec:65:04:c0:7c:81:e5:bf:25:51:a7:
fc:c2:00:fc:bf:c8:e9:d9:a2:de:15:2d:2a:00:cc:61:d6:a5:
0c:b7:b8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:31:51 2026 by rpki-client