Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
File: tyDzzrDmtZejgUXFp0M2nH9JZuA.mft (raw, json)
Hash identifier: kAz5tIgmOE7otCbbmNRuiZ3EvQI4LGNjl2vVYqj177A=
Subject key identifier: 46:77:55:47:B8:26:3B:01:57:00:1A:D0:18:5E:4A:84:B2:25:FB:BB
Authority key identifier: B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
Certificate issuer: /CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Certificate serial: 01A11184D9FB6242E0979ED0AAACB4A1C14E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
Manifest number: 14CA
Signing time: Tue 06 Oct 2026 14:01:21 +0000
Manifest this update: Tue 06 Oct 2026 14:01:21 +0000
Manifest next update: Wed 07 Oct 2026 14:01:21 +0000
Files and hashes: 1: 5S5p1A69IpQT_81jOo3SJqobCIE.roa (hash: 1vieN4Wv6S8/BM0aKo61+XBIoswJKgLdB3MXca2J5eM=)
2: Kng8WN3TArrnNPoyNaNDEEsmxbw.roa (hash: zHx9dAEAvR3nmTiDNacQD/5h5khoJ8N9qawCWG7hAtw=)
3: tyDzzrDmtZejgUXFp0M2nH9JZuA.crl (hash: EZs+GK45BFGDNQdjLupRbpC5CrGAc/PiVIgLZIxJGNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:84:d9:fb:62:42:e0:97:9e:d0:aa:ac:b4:a1:c1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Validity
Not Before: Oct 6 14:01:21 2026 GMT
Not After : Oct 7 14:01:21 2026 GMT
Subject: CN=46775547b8263b0157001ad0185e4a84b225fbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c9:5d:d3:6e:86:7b:ce:3b:9c:bb:40:02:8c:
1e:2a:69:ee:16:4a:8f:86:64:29:6a:16:73:f1:40:
38:60:60:7b:8b:df:14:59:8d:d1:a5:9e:34:ac:7f:
07:f0:3a:d7:fd:00:1e:79:4d:a7:e1:7a:b9:60:2a:
31:dd:73:ee:29:aa:8b:5c:de:ad:67:fb:aa:67:c6:
98:a7:4e:53:0b:6b:af:b3:1d:87:7b:a2:82:9f:f1:
0e:83:7b:31:98:fc:7a:7d:36:e2:6f:10:0d:44:84:
27:4b:84:89:b0:1a:af:c4:2a:47:66:38:a5:2a:0a:
63:1c:97:86:82:36:3a:f5:05:7e:a8:b4:dd:0c:25:
15:53:db:61:d2:17:af:1c:93:d1:cd:3c:a8:59:45:
8a:84:c8:69:41:7b:8f:57:ed:e9:e8:a6:25:a5:9b:
3e:1d:8d:9e:44:29:9d:74:73:c7:a9:59:1c:cc:97:
bb:d5:48:7c:38:16:59:50:64:a0:91:88:ae:73:d5:
7d:1b:30:67:c1:3c:c5:42:d6:21:39:39:82:ba:91:
2c:25:1e:34:6e:33:14:d1:cd:28:9f:dd:bf:2c:98:
39:7c:42:b9:ed:45:ff:46:a1:0b:7a:5c:b9:85:16:
8d:08:f9:5d:6f:98:78:97:a0:4a:02:9e:b2:67:56:
da:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:77:55:47:B8:26:3B:01:57:00:1A:D0:18:5E:4A:84:B2:25:FB:BB
X509v3 Authority Key Identifier:
keyid:B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bb:f4:ac:91:e9:b5:31:76:16:df:d7:cd:f6:7a:2c:12:ae:
eb:74:2c:14:5d:e6:04:b9:4b:91:4c:13:b3:38:02:ba:2a:b6:
86:0c:b0:97:f7:1b:7d:63:f7:22:90:1d:40:07:03:90:ec:23:
5f:7a:f4:e5:7b:92:58:42:a2:5f:e4:55:c5:d1:38:ee:b2:32:
39:bd:33:c5:8f:e1:43:5d:be:80:ab:8b:ee:d6:88:17:c5:0d:
a2:6f:9a:de:5b:a6:d3:53:e5:14:e9:ed:c8:d4:53:aa:65:f5:
20:16:2e:d8:fe:09:d1:4f:11:4c:90:7a:0e:24:31:b1:5f:60:
85:d1:27:22:39:63:59:b3:61:b8:a7:f2:70:21:a9:ac:45:cf:
94:2a:f5:bb:71:73:e3:87:d4:07:c9:30:51:54:df:f0:03:96:
e0:36:c6:67:91:c1:92:c4:3b:7f:c3:bf:8f:d5:2d:7e:a2:7b:
83:11:b0:9f:c7:c1:e2:db:8c:d0:44:17:5c:cd:7f:06:d5:c6:
82:58:5c:91:5d:5c:88:53:b8:63:be:3e:0a:f9:de:29:0d:46:
9b:97:5f:b3:25:e2:92:d2:82:c0:f9:62:d0:5f:52:f5:6c:1b:
c4:67:ea:4d:d5:a8:9b:39:8f:4e:1d:af:ab:09:f1:92:6a:cc:
3d:8d:f3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 00:16:00 2026 by rpki-client