Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
File: tKfQVIK4TTu2BPCZvK-eftNGiJo.mft (raw, json)
Hash identifier: /G4Ea2hCP2gedmp17+jXReCdMPV8HCYfWtmgPzh2s5o=
Subject key identifier: 1C:61:EB:4F:C1:A4:CA:98:37:79:9C:BE:D8:80:D0:93:DC:F9:28:73
Authority key identifier: B4:A7:D0:54:82:B8:4D:3B:B6:04:F0:99:BC:AF:9E:7E:D3:46:88:9A
Certificate issuer: /CN=b4a7d05482b84d3bb604f099bcaf9e7ed346889a
Certificate serial: 01A0D98416452FC9107A71F46083895CD411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
Manifest number: 1A6E
Signing time: Fri 25 Sep 2026 17:01:47 +0000
Manifest this update: Fri 25 Sep 2026 17:01:47 +0000
Manifest next update: Sat 26 Sep 2026 17:01:47 +0000
Files and hashes: 1: awToJLBsyk0T4IcWFD08IQBrMn8.roa (hash: D6jszyrJ34yNygrEuO9QJPaleqlFTsrRTxhepr3reTI=)
2: tKfQVIK4TTu2BPCZvK-eftNGiJo.crl (hash: ZmMWqkdwsZUB273OJkQNRL/2R3IphXPvudRuPhvBjYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:84:16:45:2f:c9:10:7a:71:f4:60:83:89:5c:d4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a7d05482b84d3bb604f099bcaf9e7ed346889a
Validity
Not Before: Sep 25 17:01:47 2026 GMT
Not After : Sep 26 17:01:47 2026 GMT
Subject: CN=1c61eb4fc1a4ca9837799cbed880d093dcf92873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6a:20:5e:6e:59:ba:f1:ab:ba:d0:5b:20:41:
59:78:4d:b0:ba:e0:3f:e0:59:6f:a9:8c:af:fa:d6:
55:4b:c9:86:d0:88:0d:15:44:2f:80:3b:0a:7f:c0:
5c:34:19:7a:8c:ab:22:8f:70:32:ab:b9:80:2e:66:
59:28:56:0c:d6:66:92:09:63:5c:45:77:30:e7:fa:
90:3f:9e:73:6b:29:26:ac:d4:42:5e:e1:e9:03:c5:
d2:8e:30:9d:cb:80:87:9c:fc:ed:79:bd:5c:44:55:
d8:c1:65:ef:dc:e2:48:21:57:60:ec:9c:60:0b:72:
7a:bf:9a:5b:ee:70:b0:ec:39:e2:41:fe:17:9f:9c:
01:75:db:4b:f0:5d:5f:f6:4b:d5:90:67:3e:db:88:
4b:9e:dd:2e:10:29:12:56:e9:1c:c7:64:e2:3a:03:
84:d8:39:d5:5e:4f:12:e9:e3:fe:27:42:88:2f:99:
f5:c8:f1:b5:1f:10:d9:21:3d:57:94:0c:2a:94:79:
a5:5c:ba:99:98:f1:9f:50:48:e0:ce:fc:82:b7:cc:
2e:3f:eb:a4:84:38:1f:3e:6a:70:f6:4f:7a:e3:bd:
5e:31:37:0f:4a:5d:fc:02:d1:c2:a6:6d:be:94:94:
d6:5f:f4:ce:ee:4d:98:33:35:93:bd:5b:4a:3c:4c:
b5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:61:EB:4F:C1:A4:CA:98:37:79:9C:BE:D8:80:D0:93:DC:F9:28:73
X509v3 Authority Key Identifier:
keyid:B4:A7:D0:54:82:B8:4D:3B:B6:04:F0:99:BC:AF:9E:7E:D3:46:88:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:32:a5:df:fe:03:77:dd:5c:0b:1d:91:34:a9:9d:c3:03:80:
e1:bc:34:38:3f:af:b3:b3:04:79:5d:a6:d3:2b:a5:a0:2e:c4:
00:a0:a8:7c:01:d5:ce:a5:26:75:ee:fa:a2:a3:dd:30:4a:f4:
0d:ff:de:9e:e1:6d:9e:c2:06:5c:c2:2c:94:3d:ae:e8:d0:4c:
98:17:65:49:4e:c0:e7:79:ac:59:87:ea:b6:7a:09:99:69:8c:
14:34:cc:65:ec:d6:ae:14:a6:b9:b7:91:b1:78:1f:ff:83:14:
fb:3f:9b:fd:43:07:97:4b:a9:95:b0:d5:26:7c:ce:16:39:50:
4f:08:ae:e9:9e:7e:46:2c:c6:94:bd:65:88:48:0d:26:3a:9f:
00:0a:35:40:93:e5:b6:bf:f5:cd:42:9f:5c:dd:44:b7:b2:e9:
87:8e:f4:ea:85:8b:60:61:b1:9f:ea:75:ce:66:99:e1:bf:23:
7b:94:5c:1a:c1:b8:ff:59:de:81:2e:52:5e:75:7a:22:56:5c:
35:b5:9d:f3:0f:ca:f5:ca:2d:1c:c0:29:7b:0a:c3:4d:40:19:
50:e2:0b:53:03:a2:f6:ad:51:ff:b7:9e:62:05:49:6c:43:dd:
0c:2b:1a:af:bb:39:4d:05:cc:8e:29:19:5b:38:ec:11:d4:7e:
cc:76:ae:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:10:03 2026 by rpki-client