Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
File: tKOwBTZrDhDVAulBSQHNhPri3JU.mft (raw, json)
Hash identifier: J0RnXlQA+3GvkzK0Qui8zb34t9eklPvWZtb9Jq4JDZc=
Subject key identifier: F9:F9:20:C4:73:D8:4A:1F:11:3B:B2:80:D9:C5:77:0C:9B:9F:27:88
Authority key identifier: B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95
Certificate issuer: /CN=b4a3b005366b0e10d502e9414901cd84fae2dc95
Certificate serial: 01A0D1243D5C98608FC4315E0A1BC61AED42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
Manifest number: 0303
Signing time: Thu 24 Sep 2026 02:00:08 +0000
Manifest this update: Thu 24 Sep 2026 02:00:08 +0000
Manifest next update: Fri 25 Sep 2026 02:00:08 +0000
Files and hashes: 1: 6ZCReiMt-9O5qTlHfdRp0QA32Z4.asa (hash: bKgoE+JkmS262GXXwRqyLtBEgk05ptq2r34ReJuCtP0=)
2: Rh-ZUnz6j4kgwPiltUC2WNESJv8.roa (hash: KaJ3DV/t9W6woGLoKmszOfnkxPqXiwxsukUttzUDmPU=)
3: tKOwBTZrDhDVAulBSQHNhPri3JU.crl (hash: vgTr0wZyvOheTMZntYxKkaRixL6RAYUvi8/dtwMnsE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:3d:5c:98:60:8f:c4:31:5e:0a:1b:c6:1a:ed:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a3b005366b0e10d502e9414901cd84fae2dc95
Validity
Not Before: Sep 24 02:00:08 2026 GMT
Not After : Sep 25 02:00:08 2026 GMT
Subject: CN=f9f920c473d84a1f113bb280d9c5770c9b9f2788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6f:ff:05:d2:fd:b1:99:d0:86:9a:a7:d9:79:
25:bf:80:d1:4b:41:20:8e:34:37:5e:f9:90:a7:e1:
0d:f2:4b:3b:b3:b8:c3:b4:a2:18:e8:be:95:8b:e6:
92:75:87:33:22:fc:c4:eb:6b:c9:e4:29:84:9d:5d:
c6:36:b6:cd:4a:03:51:3d:c6:3d:63:55:75:db:ce:
67:a8:8e:f5:d1:82:03:e4:a9:79:4d:b6:f8:38:5c:
f3:4a:2c:6c:34:cd:c5:9f:5c:1e:07:66:27:69:0d:
3e:1e:be:a8:3c:bf:68:4f:a3:7b:a2:68:ee:99:43:
a6:e2:80:e8:0c:bb:42:62:a5:d1:ac:b1:48:46:7d:
08:aa:3e:cb:eb:50:70:34:7f:5f:38:49:74:64:af:
20:5d:9d:c8:b1:c5:8a:8b:ee:e4:5a:3a:fb:41:d8:
90:7c:a8:c6:26:f6:11:35:a3:e0:3e:43:de:66:a8:
2c:ae:45:ce:7d:ca:58:7b:33:e0:1b:b6:3c:08:32:
ad:b6:b1:95:3e:c2:cf:be:b3:8b:3f:5e:16:5f:ba:
29:7b:a0:73:58:3a:d9:90:0d:01:5b:b7:75:ab:bc:
7c:c9:b3:ba:6b:e8:59:0b:e4:00:ec:83:65:6c:22:
ac:a8:23:6d:ec:e6:14:83:83:98:ca:4f:9a:bc:67:
6f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F9:20:C4:73:D8:4A:1F:11:3B:B2:80:D9:C5:77:0C:9B:9F:27:88
X509v3 Authority Key Identifier:
keyid:B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0e:65:0d:e0:e9:d4:17:df:ef:1a:01:3b:00:d4:07:a7:86:
26:c5:94:52:a8:b5:9d:6e:e9:5f:b9:a2:17:f7:77:15:d6:d5:
af:c2:1a:72:61:d8:f1:35:1b:a3:2a:a1:12:9f:ac:20:16:c1:
fc:dd:18:70:24:5a:ff:b3:f1:e5:7a:50:26:28:96:5e:6f:98:
86:db:6e:d6:68:35:fc:74:b9:7d:67:26:c7:18:bc:63:a6:92:
4e:53:66:09:4e:dc:4d:15:a6:c3:f5:36:61:e8:1c:06:e6:45:
f1:3f:44:59:bd:fb:e1:e1:55:8c:5c:26:0c:f4:29:49:0e:d7:
db:cb:01:00:cf:2c:7e:ee:cb:03:c3:f0:ad:a7:3c:c5:99:3a:
e0:15:ab:fa:63:05:c2:ff:15:a9:34:99:f8:12:6c:53:f1:7a:
11:85:95:20:3f:61:7e:7e:fd:64:78:3f:90:54:e7:c1:e7:40:
9d:9c:c9:5b:d8:98:5f:63:6c:cb:8c:a5:49:59:71:26:08:78:
e5:1f:db:af:a2:d7:ba:c7:dd:8d:2f:a2:ed:35:74:f9:40:29:
6d:64:30:3c:f1:cd:5f:e7:89:f2:f7:70:96:a8:89:c3:f4:c1:
e3:5f:70:6e:c8:bd:6d:79:b0:74:aa:5e:14:20:79:88:d0:1d:
8a:f2:f2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:49:46 2026 by rpki-client