Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
File: tiuWfFIUXmeksyBrHKSShTyg34Q.mft (raw, json)
Hash identifier: 40qTu6U0ZResDBaLvguBsBXhiNzL1VudvZ6b3CaYoMM=
Subject key identifier: 0F:42:DB:98:67:B9:F0:35:BD:1D:09:12:BA:F1:16:C2:9F:84:35:67
Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Certificate serial: 01A0E098F7DB17FC751E84EB06E6EFF460EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
Manifest number: 1A74
Signing time: Sun 27 Sep 2026 02:01:56 +0000
Manifest this update: Sun 27 Sep 2026 02:01:56 +0000
Manifest next update: Mon 28 Sep 2026 02:01:56 +0000
Files and hashes: 1: A6OsoYIYGh2Z_D1_x4aYKOVS478.roa (hash: R4DsSDCiEh+974EKIZS8RQ1BClrbE9cHjb1aIFSzJGw=)
2: E36OwHqQ6w57Cin5wvtmgpKJp1M.asa (hash: VOikmM+ev8Ka01X1o17ZmNFWB0YN01vxXHPntHlQFIM=)
3: tiuWfFIUXmeksyBrHKSShTyg34Q.crl (hash: b8Z3qiKXuwY1lV1XTzH62voLaE5z5FeNoyQ4MklL9sA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:f7:db:17:fc:75:1e:84:eb:06:e6:ef:f4:60:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Validity
Not Before: Sep 27 02:01:56 2026 GMT
Not After : Sep 28 02:01:56 2026 GMT
Subject: CN=0f42db9867b9f035bd1d0912baf116c29f843567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:38:bf:81:da:d9:84:86:f6:37:f1:3c:2e:c4:
96:89:5b:b2:bb:ba:91:08:22:23:53:b8:eb:dc:ce:
49:72:9b:35:c7:d8:d6:d4:4d:00:a2:e6:48:2e:91:
00:57:0a:cb:db:4a:b1:25:cb:80:3f:b2:1e:49:d9:
23:0c:3d:f7:d2:7b:8d:fb:1d:b2:55:ac:5d:57:8d:
f7:5b:0c:c8:6b:31:84:9d:70:cd:40:d4:c3:f4:1b:
4f:6a:09:a2:81:a6:57:35:eb:67:80:4b:76:e0:a0:
9f:de:26:49:8a:e2:fb:b5:41:6c:40:69:0f:12:a4:
6b:1b:55:81:7f:8f:d5:43:84:3b:fa:9d:40:82:fc:
b5:96:e1:2d:d9:b2:13:c8:ce:b5:49:06:16:39:5c:
7c:57:11:e3:b3:84:48:81:a4:63:b9:32:72:c9:66:
e4:80:03:13:ce:73:e0:03:10:90:0f:bd:4e:cb:ef:
8a:ed:fc:4a:d5:84:e1:aa:e8:1c:3b:de:b3:d1:f1:
45:a1:2d:30:33:b1:3e:df:25:d8:ae:10:9b:d7:c7:
8b:0c:14:12:52:ab:2f:d9:65:99:5d:52:72:2c:80:
ae:51:0a:31:a0:59:6a:18:89:c0:15:10:f5:c1:37:
70:e7:52:58:ba:8c:f9:b6:d5:db:91:7a:11:e0:a5:
9c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:42:DB:98:67:B9:F0:35:BD:1D:09:12:BA:F1:16:C2:9F:84:35:67
X509v3 Authority Key Identifier:
keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e6:7e:e7:29:8c:04:fc:0c:f5:10:5e:ac:be:70:44:94:0d:
0f:ca:ce:cd:86:6b:b1:52:8e:cd:f0:77:b2:44:a9:97:4e:61:
ac:6a:28:e5:c4:a2:90:3d:11:3e:4c:06:a7:72:fa:2f:7f:23:
5e:b8:f4:67:10:8d:ff:49:54:68:a1:50:3a:4b:a2:85:aa:01:
3d:b5:6c:b2:9b:4a:5a:37:06:00:9e:5e:66:be:db:51:92:b7:
f5:32:3c:e4:15:a1:97:e4:b0:99:c4:89:1e:e9:a5:44:f9:c7:
e3:89:79:65:11:5c:a1:15:05:81:b2:9d:98:d4:a9:34:53:05:
0e:54:44:1c:38:9a:5b:b4:c7:1f:b0:b5:96:63:7d:d0:fc:27:
da:11:68:6f:46:ae:d4:6b:70:ef:59:11:c4:37:35:a8:9b:4a:
77:42:9d:e4:f9:bf:a6:05:3f:97:76:13:f6:1a:a6:6e:1c:db:
6d:3f:bd:a4:39:b7:7b:f1:2b:af:de:30:3d:d2:bc:79:27:ba:
82:b3:92:e2:6f:7b:86:80:de:91:70:ba:ae:be:be:2b:9f:67:
6a:e4:81:19:cd:2a:ae:d1:ff:2d:4b:90:1d:1f:46:eb:c7:1b:
64:ef:77:59:3f:27:86:f9:5b:6e:94:41:10:30:f0:e7:c3:12:
ee:8f:79:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:46:49 2026 by rpki-client