Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft
File: tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft (raw, json)
Hash identifier: w9zVZDcYHaVQSYlPYUKZ937WICMH+8BKPKZWXTHheD8=
Subject key identifier: B9:B1:E5:F2:9E:07:2F:CC:0E:09:A5:98:46:AA:9B:E0:15:E9:A1:4D
Authority key identifier: B4:FC:47:C3:AB:70:F3:15:B6:64:61:1F:F5:98:E4:C0:ED:1B:1B:A6
Certificate issuer: /CN=b4fc47c3ab70f315b664611ff598e4c0ed1b1ba6
Certificate serial: 01A0D4942B97DAD63C2916F1D7A1AD41A4C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft
Manifest number: 028C
Signing time: Thu 24 Sep 2026 18:01:15 +0000
Manifest this update: Thu 24 Sep 2026 18:01:15 +0000
Manifest next update: Fri 25 Sep 2026 18:01:15 +0000
Files and hashes: 1: 8Z3GQLTW25Ahk8qoPLHpuPsepi0.asa (hash: 9xiyrM4xe6lYaYOQla5bHnzLJ8utsr6+3Nxll/2cul8=)
2: tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.crl (hash: f9vCkW/v57v3i5/bgxFrOvJm5vAnUfV6O1hcI/FbqdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:2b:97:da:d6:3c:29:16:f1:d7:a1:ad:41:a4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fc47c3ab70f315b664611ff598e4c0ed1b1ba6
Validity
Not Before: Sep 24 18:01:15 2026 GMT
Not After : Sep 25 18:01:15 2026 GMT
Subject: CN=b9b1e5f29e072fcc0e09a59846aa9be015e9a14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:16:76:24:75:fc:33:70:67:b8:ee:d6:23:b2:
99:84:94:71:78:26:87:06:d0:1a:1a:5a:80:64:60:
06:7b:43:23:bb:e8:6c:e8:d3:88:ea:d6:bc:bd:61:
28:26:03:f3:07:c8:7f:bf:20:b1:54:58:2b:c2:b3:
fa:44:9a:0e:f6:f8:21:90:3f:03:d2:63:b0:55:9a:
c1:9a:8c:97:e7:9a:be:94:6a:f9:d8:9b:e8:3a:4d:
35:e7:a7:a7:d1:58:48:21:77:5c:25:e5:da:11:4f:
ed:23:70:b3:47:6b:97:08:5d:a8:0c:c0:46:59:2f:
54:19:2b:27:39:4b:b9:6f:e4:3f:01:03:3b:7f:e9:
50:ec:50:48:cd:cc:8f:d1:a1:35:81:28:7e:13:95:
a7:89:da:4c:73:e9:70:11:65:59:af:ef:04:ac:7d:
ea:4a:24:c9:ad:8a:79:1f:cc:85:07:33:d2:89:3a:
fe:99:8c:34:b5:88:8f:b2:f0:f3:6d:47:71:02:ad:
6d:3e:36:d1:39:2d:77:38:99:e2:af:cc:6e:3c:7a:
9c:9f:18:77:c3:0f:67:9b:ae:39:7e:e9:87:d5:00:
3f:31:8c:ba:bb:1a:44:36:af:24:b0:a0:1d:b1:d6:
1a:34:e8:b3:5a:d5:32:e1:c5:4e:d4:88:da:51:fd:
c7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B1:E5:F2:9E:07:2F:CC:0E:09:A5:98:46:AA:9B:E0:15:E9:A1:4D
X509v3 Authority Key Identifier:
keyid:B4:FC:47:C3:AB:70:F3:15:B6:64:61:1F:F5:98:E4:C0:ED:1B:1B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:19:b3:78:97:15:26:68:82:39:7a:69:62:59:83:95:66:24:
ce:91:07:aa:80:51:47:40:59:61:02:45:8c:c3:d0:7a:2e:35:
7d:16:7a:07:8c:5b:b8:15:1e:59:4f:0b:c4:26:2d:9f:e3:9a:
35:25:0b:18:46:b1:7e:ba:ec:14:d9:f5:01:cc:31:66:af:e1:
38:82:d7:f7:ac:1f:bd:55:e3:ef:64:4a:96:5f:55:22:26:57:
59:aa:3b:5f:ec:9f:ab:7a:f7:a3:22:4d:4c:a5:3e:4f:fd:aa:
90:b9:3d:ea:7e:25:63:ca:75:51:62:e9:94:85:ff:f5:b0:37:
f8:44:44:7b:5f:4c:57:2e:8a:eb:f1:5f:c0:0b:b5:c9:a6:f0:
56:ea:21:84:81:30:97:7d:70:75:b1:45:32:55:97:e8:07:09:
2c:11:fa:ed:da:88:41:dd:01:5c:35:af:76:14:80:6b:cd:91:
eb:86:86:c6:bd:28:b2:d8:87:ea:ce:10:20:6a:32:d8:8c:fb:
88:86:df:7e:85:04:31:a4:08:1e:f7:45:04:12:a6:14:20:b5:
67:58:34:b4:72:cd:b1:b2:29:da:e1:43:b0:2b:78:e4:03:76:
69:fa:b4:20:09:19:ae:bf:10:48:79:c2:78:90:88:b8:c5:5d:
c4:53:29:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:36:51 2026 by rpki-client