Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
File: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft (raw, json)
Hash identifier: e8AttNwwps7Rj8SB+HIxon9PoAgvD0l1HJD9YIVWknE=
Subject key identifier: 36:7F:CE:9D:44:A0:EB:53:85:CF:13:89:97:A5:C5:F2:66:B0:19:88
Authority key identifier: B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
Certificate issuer: /CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Certificate serial: 01A0FCB458DA15B66EC1019A6E2AFD6C2AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
Manifest number: 1A87
Signing time: Fri 02 Oct 2026 13:01:12 +0000
Manifest this update: Fri 02 Oct 2026 13:01:12 +0000
Manifest next update: Sat 03 Oct 2026 13:01:12 +0000
Files and hashes: 1: VIjK-dF1RkU8oL9JO5ackgQvQqk.roa (hash: EuZj5CNsImrt381xNpJVt+ICs2RyaQvBUySYpPa5Un8=)
2: tBz0by2NzKIkh_m261Gzm8WL1fA.roa (hash: HsCmK+FnFFM5EN4UPd625pAFTouSWoOu/R7Evk3aoN0=)
3: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl (hash: B3suJceXRwi6fdj22Fa9hpHnpE1BGIhIVCoCN+fpISs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:b4:58:da:15:b6:6e:c1:01:9a:6e:2a:fd:6c:2a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Validity
Not Before: Oct 2 13:01:12 2026 GMT
Not After : Oct 3 13:01:12 2026 GMT
Subject: CN=367fce9d44a0eb5385cf138997a5c5f266b01988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:40:c7:8e:eb:d7:ae:a3:da:c3:c5:cb:b6:23:
8a:95:7e:64:41:a8:a1:90:07:7f:56:b2:82:6f:17:
07:dd:42:cc:76:d6:d7:c1:0b:6b:4d:fc:6d:fa:73:
4a:da:63:68:df:f5:d6:66:4a:12:9a:4b:e3:5a:d5:
59:ca:27:ce:1f:48:07:25:59:07:35:b8:93:1f:6f:
86:fb:39:7c:76:13:fd:e0:16:0f:f7:d2:56:0b:b2:
d0:d0:fa:f3:30:ed:53:83:d1:ff:00:de:97:60:48:
54:bf:de:ac:40:e5:c8:f3:b7:9e:a3:07:c8:ef:6c:
64:87:b0:77:79:b3:d4:de:f6:19:c1:77:6e:0f:ad:
b3:3b:89:b2:80:11:ab:33:e6:50:50:72:b2:a6:2e:
62:d0:10:ee:41:74:bd:08:75:9a:a1:9a:fa:eb:13:
1b:9f:31:a0:e7:98:1f:26:b0:9f:8d:6d:2b:e3:13:
d6:72:dc:52:d0:0a:24:2b:d8:c6:d0:5f:07:0a:9a:
48:30:c6:1d:66:e3:3d:2e:ef:40:18:f2:cc:1e:b9:
87:5b:ad:63:f3:d6:1b:95:9d:6c:64:82:e1:e2:de:
d5:00:38:f1:27:03:84:3a:74:99:97:0b:a9:19:60:
15:98:6b:c6:b4:63:fe:e8:74:f0:2b:b8:37:89:d5:
e8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7F:CE:9D:44:A0:EB:53:85:CF:13:89:97:A5:C5:F2:66:B0:19:88
X509v3 Authority Key Identifier:
keyid:B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b5:a6:67:0d:8c:a4:54:71:04:92:1f:65:d7:23:19:f8:56:
81:06:70:87:53:76:a4:c5:77:0d:2c:39:15:88:04:bc:fe:3e:
42:4f:9e:1c:20:5f:12:77:32:fa:b2:7e:14:17:c1:e8:38:e5:
c3:5f:78:98:89:d8:17:96:a0:df:76:93:bd:2a:b9:c2:ab:76:
a4:c4:cf:ba:c3:99:dc:7a:b0:28:d1:da:bf:52:5d:72:18:3d:
df:15:07:c9:11:16:9e:54:17:3e:ed:50:93:da:a2:f9:02:4e:
41:97:e3:c3:a4:cc:ad:5d:a5:b6:59:fe:03:0e:c0:9d:2c:78:
06:a6:f0:af:56:ff:83:34:c2:60:b0:69:2e:36:de:41:da:2f:
8c:36:de:53:b3:ea:97:e6:8a:84:24:2b:78:b6:03:ee:09:43:
f8:dc:3e:37:48:09:7e:82:45:ba:fa:ce:fe:f9:36:d7:21:21:
36:b6:f8:09:5d:6b:a0:a6:8c:86:9b:b6:9b:dd:8e:64:2a:c4:
ac:92:a9:fd:c9:a3:ea:a3:cf:d0:e2:00:09:6b:5d:8b:77:24:
6c:b1:b2:e6:1a:2f:e6:71:56:78:70:aa:c7:36:5b:8e:80:05:
a2:81:2c:cf:48:fd:a9:c2:02:a3:f6:b8:0e:60:d6:b8:74:aa:
71:9a:7b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 20:58:37 2026 by rpki-client