Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft
File: Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft (raw, json)
Hash identifier: 4nyNcg0bUElKKkkMW8h29BZJXZncuPSNfRj8q21GU0s=
Subject key identifier: 86:77:3B:61:1F:54:1F:C1:31:5B:4C:A8:E6:56:21:3C:93:20:7D:10
Authority key identifier: 4E:BF:6B:37:B9:4F:95:B4:90:5C:F8:C6:A2:1D:88:03:EA:BF:A7:7E
Certificate issuer: /CN=4ebf6b37b94f95b4905cf8c6a21d8803eabfa77e
Certificate serial: 01A0E06117C60D98FC38295A8A27AEEB555D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft
Manifest number: 065F
Signing time: Sun 27 Sep 2026 01:00:54 +0000
Manifest this update: Sun 27 Sep 2026 01:00:54 +0000
Manifest next update: Mon 28 Sep 2026 01:00:54 +0000
Files and hashes: 1: E3Ps_1Y0RPyTuff7vspqXs8HJd0.roa (hash: SDa/tg7mYNNs8Ig1oDFyYQAMW6ncyRIYSQRc76ZseiQ=)
2: Tr9rN7lPlbSQXPjGoh2IA-q_p34.crl (hash: oOXwPKcMwDQAw+rmD+D/83GRjmcy5QMMS+dmvC/qFok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:17:c6:0d:98:fc:38:29:5a:8a:27:ae:eb:55:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ebf6b37b94f95b4905cf8c6a21d8803eabfa77e
Validity
Not Before: Sep 27 01:00:54 2026 GMT
Not After : Sep 28 01:00:54 2026 GMT
Subject: CN=86773b611f541fc1315b4ca8e656213c93207d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d3:1c:81:74:03:21:c1:91:4b:46:28:5f:7b:
b7:bf:db:68:26:3f:24:44:36:d5:57:18:17:66:db:
b7:a7:df:9d:bb:b5:be:63:f9:91:02:86:f4:b9:70:
b4:94:fd:8c:88:df:83:de:d2:4a:61:7d:51:13:da:
8e:a9:f4:8f:6f:1f:cf:fa:69:3c:b4:37:ea:b4:e7:
91:07:73:15:6b:63:ef:9c:78:5f:6b:7d:63:35:cb:
4c:8d:25:91:fa:43:f1:59:f8:b9:5d:eb:41:bf:a6:
d7:bc:cf:94:44:7c:b8:bb:f1:19:d0:3b:06:8e:f6:
a8:25:27:7e:f3:4e:83:ae:1b:4d:c1:3c:d1:8d:19:
99:21:31:e2:c8:99:d1:1a:3d:ee:ae:aa:38:57:f3:
f7:93:3c:35:13:23:18:1c:b7:80:4e:54:0d:e4:75:
b8:03:75:86:ca:39:e5:c8:75:e3:75:01:c1:ee:b2:
2b:ec:9f:2b:2d:f2:3f:54:22:fc:52:47:9a:03:bb:
bf:de:45:07:7f:53:5b:bf:8e:32:c0:0d:91:07:f6:
8f:bb:f1:f6:c2:4c:37:33:15:03:4d:77:60:df:b0:
f1:fd:ee:81:ba:5d:4f:3a:af:fd:61:01:92:18:e0:
d1:a5:ba:dd:19:be:90:03:a8:e1:24:81:c4:0e:d1:
fe:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:77:3B:61:1F:54:1F:C1:31:5B:4C:A8:E6:56:21:3C:93:20:7D:10
X509v3 Authority Key Identifier:
keyid:4E:BF:6B:37:B9:4F:95:B4:90:5C:F8:C6:A2:1D:88:03:EA:BF:A7:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5e:cb:af:e1:eb:51:d7:ff:57:5a:fc:ff:85:d2:7e:11:83:
80:6c:82:9d:8b:fe:12:b4:d2:e8:70:bc:81:d7:46:77:3a:b3:
75:a6:52:06:14:ad:f3:df:6e:7b:a8:19:e9:45:16:93:54:59:
85:52:ce:21:a3:91:db:35:69:b0:74:21:01:1d:6b:41:bd:07:
06:b4:7c:09:62:2f:27:01:bb:17:9d:37:46:e9:bf:93:d7:f3:
8c:70:aa:99:0f:13:50:03:b0:0a:80:ca:35:c6:16:19:dd:49:
92:a9:7f:36:20:c6:01:d5:b4:7d:f1:46:30:56:5f:03:b9:1c:
95:7a:cc:65:44:6f:40:de:dd:a4:1a:f2:7c:7f:85:2e:74:6d:
36:f2:4a:1b:c0:6b:dd:b9:63:8d:3a:3a:9e:ea:d5:b4:d1:92:
6b:2a:08:ef:9b:ac:97:21:cc:b8:21:08:6c:ec:cc:29:9f:0c:
18:fe:c0:e8:d8:0a:3b:82:f4:a8:eb:76:ba:8b:32:15:d3:2e:
7a:6d:0c:7c:94:a7:9e:c8:74:0a:46:55:30:74:1b:e3:3b:80:
09:fa:d1:a8:d3:81:86:67:79:d4:a3:4b:56:bf:40:ab:2a:7c:
a3:62:ff:50:a5:e3:ab:63:39:11:a0:f3:6f:ac:b9:5e:31:8e:
28:b1:10:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:10:37 2026 by rpki-client