Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
File: tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json)
Hash identifier: jFMwZtaKcQFJWU3qmdJxK9JdzZeKjdDfcWxAf0HIBgA=
Subject key identifier: F1:30:C9:8F:A2:E7:D4:AE:EC:43:79:13:BB:75:07:60:77:E7:20:D5
Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
Certificate issuer: /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Certificate serial: 01A0D5020887BF6254B6493326A4067CCFD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 20:01:15 +0000
Manifest this update: Thu 24 Sep 2026 20:01:15 +0000
Manifest next update: Fri 25 Sep 2026 20:01:15 +0000
Files and hashes: 1: bXgR8m5zIy_GMOS_a3seOOEoPYQ.roa (hash: dQET79lWM3bPQ1IRR0iZoVaViZjUeP97gYh31kK/K0E=)
2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: Og14XX1epb0S51jOcPqWE3U9+nDFKcWz8eN2lytQmqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:08:87:bf:62:54:b6:49:33:26:a4:06:7c:cf:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Validity
Not Before: Sep 24 20:01:15 2026 GMT
Not After : Sep 25 20:01:15 2026 GMT
Subject: CN=f130c98fa2e7d4aeec437913bb75076077e720d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:3c:71:a2:b3:ba:0f:ad:d4:6e:b2:e9:f1:
b6:6b:25:62:e7:78:d0:df:e1:a0:d8:74:cb:5f:f2:
29:bd:4a:70:22:22:3b:e4:b8:41:7d:ee:f1:31:89:
a0:33:47:0e:0c:a2:e8:69:fa:a2:23:53:90:f5:d3:
17:db:f5:45:1a:18:4c:7e:eb:62:63:7a:ec:b8:27:
74:81:5e:f5:7e:4f:ee:65:a4:5d:a0:72:c1:75:53:
6a:4a:1b:08:90:61:a1:f2:83:14:81:f1:12:67:6a:
b1:e7:08:81:8a:45:3f:15:bc:c5:f9:8c:05:4d:c0:
1b:50:9f:0a:82:15:91:06:be:6e:d8:5f:37:5e:d8:
1b:92:cf:f5:09:a1:0f:31:82:c8:68:9e:23:3e:dc:
4b:38:82:ea:c3:a1:09:1c:68:f6:67:7a:09:3a:27:
c1:fd:a4:40:50:94:75:65:de:4b:ef:ec:92:a2:3b:
17:be:f3:23:42:32:ac:9f:26:7c:28:3f:19:6f:13:
8b:c5:d1:fd:0c:a8:d0:74:b7:26:b9:c0:b3:29:91:
a3:5a:17:23:d7:9b:e8:d3:c2:09:dd:32:eb:5e:ce:
68:e6:42:8c:fa:47:84:5b:77:4f:89:91:f8:0b:c4:
9c:77:57:e4:6b:fc:0a:4b:2f:3c:f2:f2:d2:a1:93:
a7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:30:C9:8F:A2:E7:D4:AE:EC:43:79:13:BB:75:07:60:77:E7:20:D5
X509v3 Authority Key Identifier:
keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fa:26:ad:73:42:d7:6b:1f:07:7e:76:70:36:4f:f3:4e:df:
f5:6c:05:45:7c:4c:33:93:75:8e:a2:22:39:18:5a:2c:cd:6d:
32:fe:0d:43:a2:24:3e:61:25:d3:9d:06:a1:86:5a:6f:f3:99:
d7:24:c8:2f:0a:99:7a:c3:f5:27:29:38:c9:ae:33:1c:f2:9d:
ac:74:78:89:bf:64:cf:4a:c2:40:e9:f8:03:10:9b:15:d6:21:
69:c0:d4:13:33:3d:64:4c:e4:2a:0f:35:13:d3:33:71:67:32:
26:b3:78:9c:f3:69:46:76:7e:f2:c4:0e:54:b9:33:96:92:08:
be:f0:fd:ca:08:31:26:ab:21:9d:24:d0:e1:ff:6f:b7:11:cb:
23:6f:89:93:05:42:e0:1d:19:3b:ba:93:1d:08:b5:3a:5a:93:
f7:03:4a:23:7d:51:00:b7:e4:b4:7d:c7:42:4b:48:76:26:67:
5f:86:5e:6c:11:0b:bb:08:03:de:43:63:ca:09:38:e1:1f:c4:
98:6f:59:c1:d7:38:ad:ed:92:35:46:56:e8:7b:42:b0:85:80:
d4:43:51:00:ce:fd:d7:ad:5f:5d:6b:b5:10:3c:14:2d:e9:4c:
8b:bf:71:66:a8:71:79:61:73:a2:47:74:9b:a0:dd:9a:3b:d7:
75:0d:3c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:42:18 2026 by rpki-client