Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
File: tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json)
Hash identifier: PFGIiLVyKl3XQdeCI+r/51ra2phu5vcFsWYBSo/yQPs=
Subject key identifier: 43:D0:74:BE:04:78:A2:0F:53:01:08:7C:B6:BD:51:B5:09:A9:00:E9
Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Certificate issuer: /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Certificate serial: 01A12AD6E534776DC7C1D1EBBFE818FB9A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
Manifest number: 1A98
Signing time: Sun 11 Oct 2026 12:01:28 +0000
Manifest this update: Sun 11 Oct 2026 12:01:28 +0000
Manifest next update: Mon 12 Oct 2026 12:01:28 +0000
Files and hashes: 1: mRAbVrC4vL4GmozrjHi2i0Iaytw.roa (hash: vC24nQiiHK47q4YRBJHF/HkE+eYaEpAw6ZvG99eAnwU=)
2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: vGzr007pstF1JRCMLpiZwoYigCasxl7+QTJgKWhy9/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:e5:34:77:6d:c7:c1:d1:eb:bf:e8:18:fb:9a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Validity
Not Before: Oct 11 12:01:28 2026 GMT
Not After : Oct 12 12:01:28 2026 GMT
Subject: CN=43d074be0478a20f5301087cb6bd51b509a900e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:9b:30:de:e6:10:b9:53:81:e7:84:f0:3f:
40:27:72:e0:ff:34:01:2a:61:57:82:0d:d0:98:1e:
f4:c3:66:f3:81:24:06:e7:1e:06:89:d8:45:be:34:
d7:02:ec:47:b2:4e:d0:24:e2:d0:88:40:b3:ee:ef:
1d:48:41:41:63:60:fe:43:d9:cd:75:68:66:f1:aa:
5b:53:c6:23:f5:37:e9:d0:f7:2e:8f:ed:64:81:ff:
2e:dd:df:19:fe:61:84:1f:ed:ba:9b:b0:c2:30:31:
b3:f9:71:46:ac:33:b0:8a:7f:74:b3:08:c5:5e:08:
ec:5d:b0:85:24:57:45:3b:0f:a6:9e:cc:09:27:b0:
71:cc:cd:e9:1f:65:63:68:10:29:fd:20:29:9b:de:
52:1d:7a:69:9e:9a:34:c3:84:68:7d:8d:bc:29:45:
0e:30:63:26:fa:21:18:c8:b5:bd:f5:53:52:63:9b:
ea:bf:82:7d:bb:d5:df:c3:42:3a:ba:95:78:b6:08:
65:a5:92:fb:53:64:65:99:8c:44:5f:de:2f:db:cf:
75:e0:77:3d:b9:b2:a0:79:7c:8d:58:27:81:05:03:
a1:70:70:7e:69:cc:14:22:71:ac:5f:4a:e4:4c:23:
00:51:55:c1:af:5d:e0:b5:e1:9b:87:f6:c4:9e:e8:
78:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D0:74:BE:04:78:A2:0F:53:01:08:7C:B6:BD:51:B5:09:A9:00:E9
X509v3 Authority Key Identifier:
keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5e:fb:57:d7:96:79:6a:5a:23:bc:43:05:9c:72:f7:a6:75:
2b:87:42:e0:9c:54:8b:28:72:ba:12:bd:55:de:ca:bc:cc:90:
94:5a:f1:d2:08:b4:25:67:1c:ed:3f:fd:be:23:c4:0a:7c:45:
0c:ec:09:03:c7:4c:1a:09:0a:bc:6d:61:27:2a:0c:9f:a7:da:
37:b2:4a:5b:bc:bd:c1:3d:5c:a7:c4:ee:45:dc:e4:c1:be:dd:
cf:e6:2f:61:25:47:08:c9:70:81:a9:4b:ce:7d:92:87:c6:38:
a5:30:d6:40:24:42:13:fd:b1:47:3a:3d:c2:9b:7d:10:72:7f:
f9:41:e5:4b:80:6c:bb:d1:31:09:24:54:fc:bf:34:80:74:ab:
df:c4:e0:e8:b4:4f:48:da:7f:8f:43:c5:d7:26:4b:d2:3a:2c:
77:86:df:a8:7d:b0:6f:0a:1e:fc:3a:8d:64:e5:85:8d:e2:14:
97:97:b2:11:94:e8:6c:5e:33:42:60:c0:6a:e7:4e:c6:34:e1:
f4:44:7e:29:5c:41:25:53:e1:f5:33:a6:be:98:0c:21:7c:fc:
c7:f2:e2:e2:81:08:55:4e:08:1a:c9:d1:8a:e3:4d:24:b0:3b:
85:1a:80:bb:82:eb:29:dd:91:ee:22:39:d8:f4:36:e6:90:54:
84:18:89:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:41:14 2026 by rpki-client