Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
File: tHRnMbQxArluui3l04w9zShLj-Y.mft (raw, json)
Hash identifier: IefoJnRcASGyK3nBQU0BT34vyhBAs5KR7Iusc1kmYE8=
Subject key identifier: FB:6B:E2:9A:EE:6E:3D:36:17:EA:B2:6A:78:02:76:06:B9:66:2D:5F
Authority key identifier: B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
Certificate issuer: /CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Certificate serial: 01A0D5A6DBDD037ECA1244454C975F54C621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
Manifest number: 0286
Signing time: Thu 24 Sep 2026 23:01:17 +0000
Manifest this update: Thu 24 Sep 2026 23:01:17 +0000
Manifest next update: Fri 25 Sep 2026 23:01:17 +0000
Files and hashes: 1: fpHEmukzCf8sEZN1-1ROK3M58Hg.roa (hash: VqNpGMHhla64QbrRVajda2AOnqhRXGh5QpCi8IhSSCc=)
2: tHRnMbQxArluui3l04w9zShLj-Y.crl (hash: tiwToKYUvSqosLpiZWWUdAGg/fT68NSsYOKWnjArCNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:db:dd:03:7e:ca:12:44:45:4c:97:5f:54:c6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Validity
Not Before: Sep 24 23:01:17 2026 GMT
Not After : Sep 25 23:01:17 2026 GMT
Subject: CN=fb6be29aee6e3d3617eab26a78027606b9662d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:12:80:f0:08:28:07:24:48:bc:5d:8f:e4:ad:
7a:5c:d0:d6:79:c0:84:30:2e:bc:bf:fe:db:56:02:
7b:9f:0d:e5:88:59:8d:dd:ca:dc:cd:25:6d:69:c6:
7c:e0:7f:f9:4c:a5:6e:df:8e:3c:26:fd:a2:5b:3f:
0c:4e:c2:93:5b:e0:d3:2e:ee:b6:a7:76:c5:e2:57:
22:2a:24:91:16:33:87:8e:58:a1:1e:e0:91:e8:c8:
96:2c:a0:d7:70:af:bb:db:f1:53:b7:ae:70:0c:65:
44:50:ad:ab:ab:2d:4b:20:84:fa:13:0c:37:c2:e9:
01:db:f0:29:d0:f7:ac:df:6f:82:01:4d:5e:02:ee:
42:03:69:6b:fa:af:8d:a2:63:88:e2:27:4b:87:de:
75:68:b6:c2:27:95:89:eb:2e:9d:a0:17:e1:cd:44:
bd:5a:da:d5:9b:ad:c3:96:fc:80:c4:8d:f7:1d:5c:
76:6b:da:81:02:19:08:96:ce:a9:2b:f3:d9:93:6b:
2d:c5:f9:5b:2c:48:60:8e:38:8b:48:4a:7a:d0:56:
7c:21:81:06:5c:89:e3:a1:a5:65:22:60:e6:d7:7f:
19:14:9b:66:bd:71:b9:d1:45:ae:80:84:25:b9:a0:
9f:50:76:e8:50:74:13:a9:96:32:db:d6:b5:2d:c1:
5d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6B:E2:9A:EE:6E:3D:36:17:EA:B2:6A:78:02:76:06:B9:66:2D:5F
X509v3 Authority Key Identifier:
keyid:B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9e:a6:85:3c:78:e1:03:e9:da:64:26:4a:67:90:69:05:c9:
54:1e:b1:1f:26:7f:fe:46:7e:7c:56:0a:cb:49:2a:0c:3f:d8:
00:8b:a3:36:46:05:46:79:64:06:e0:7b:52:bd:88:02:c9:23:
b2:d5:4d:d3:69:d7:ee:c0:29:21:27:09:ac:7b:c3:b3:39:ce:
31:1b:d2:ea:55:4a:c6:70:20:ae:20:5d:3c:be:90:34:25:7d:
90:55:1a:5e:e4:d4:e1:a3:12:b8:f1:0f:99:44:22:5a:a0:c4:
af:55:f4:5c:ec:0e:0b:f2:bf:20:ac:62:65:48:91:40:ad:06:
1a:ed:81:cb:88:b1:e2:26:2f:2d:74:8b:32:8e:24:53:30:b3:
e1:f7:d8:dd:e0:00:6d:04:b1:1a:cf:e9:91:8c:93:c4:c8:e3:
57:56:b7:5f:34:2e:ec:9b:5a:9a:33:f3:dc:40:ce:8d:59:f2:
92:a9:25:1e:e7:c2:3c:ec:f7:bb:14:50:3f:99:78:ab:db:40:
7f:a0:bf:9f:67:99:19:be:72:8a:3c:73:cc:c4:b4:75:42:16:
d0:b4:48:c3:96:18:9a:50:f0:23:f6:86:5f:02:02:b2:92:98:
0d:82:79:41:4b:ce:ca:d5:9d:da:08:43:31:1b:54:5c:b9:56:
8b:d6:7c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:50:32 2026 by rpki-client