Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
File: tXikYahZ3cmGwIqI6VEtXD0iEOY.mft (raw, json)
Hash identifier: OSZQ2wzBDA1EmRlc39RT+e9vtUvErJ5t6PeQ3vjQn10=
Subject key identifier: 08:29:74:F3:AC:BE:1B:BF:F6:A3:E6:7D:70:86:3D:F1:FE:A4:9A:3D
Authority key identifier: B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
Certificate issuer: /CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Certificate serial: 01A12466999B8A7E5BAEA3F702225A3FEC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
Manifest number: 1779
Signing time: Sat 10 Oct 2026 06:01:06 +0000
Manifest this update: Sat 10 Oct 2026 06:01:06 +0000
Manifest next update: Sun 11 Oct 2026 06:01:06 +0000
Files and hashes: 1: dQ2JSeRkXtpAwYOMmqrJulKnPek.roa (hash: gnIi6rzRodMaHa0HwkkgHYuXAe1/OxH3oVCHWvHcN8Q=)
2: f6m0hqb0BBxiTxktGTcPrNXvB2g.roa (hash: wEO7iV67QNAygsspSwBpIYn+S9XY1EpUPceKq+Gbr8U=)
3: tXikYahZ3cmGwIqI6VEtXD0iEOY.crl (hash: I5HbVzDCcxyFnKd3nXoOavdvcoLcSDaCige0Zt1s+Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:66:99:9b:8a:7e:5b:ae:a3:f7:02:22:5a:3f:ec:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Validity
Not Before: Oct 10 06:01:06 2026 GMT
Not After : Oct 11 06:01:06 2026 GMT
Subject: CN=082974f3acbe1bbff6a3e67d70863df1fea49a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:f2:ab:c0:b3:e7:e2:e0:dc:13:b8:6c:43:
dc:13:ca:49:84:0c:4c:85:cf:c8:75:ce:8d:32:51:
3d:f7:82:31:15:b1:d5:77:2b:69:b8:46:b4:fc:6e:
9b:dc:6f:45:10:f4:94:43:3a:3f:7d:96:b0:e4:9f:
9f:4f:82:66:cf:08:e2:e8:3f:fa:11:81:d2:f7:00:
2c:16:e3:52:78:a4:bd:d3:34:82:aa:06:3d:ca:85:
69:34:49:04:20:4e:d5:0a:b9:7c:73:94:1b:01:94:
65:82:f3:d6:79:54:cb:ad:5f:bd:78:89:5d:6e:6d:
55:20:f9:75:e8:bb:d6:cf:3a:9b:56:87:fc:68:0b:
67:de:e4:cf:cb:2b:72:d7:4c:74:0d:53:a1:b1:58:
38:f4:36:8c:18:72:c6:1b:74:4f:66:ae:85:04:72:
7d:e6:a8:25:7f:4f:ff:2d:22:00:d8:c2:10:f7:a3:
d9:fe:6d:5c:b1:e2:97:bc:84:83:de:23:a7:7c:40:
3d:39:37:68:1a:05:17:4b:77:71:a9:fb:f2:0b:39:
4b:73:fd:9f:0e:b3:f5:32:f6:a1:9e:e7:d0:ad:fe:
bf:93:81:27:d7:d4:fc:65:3b:95:a7:2e:46:88:ff:
aa:4f:e8:cf:dc:6d:ee:02:ae:b2:d4:2c:0f:e8:73:
d0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:29:74:F3:AC:BE:1B:BF:F6:A3:E6:7D:70:86:3D:F1:FE:A4:9A:3D
X509v3 Authority Key Identifier:
keyid:B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ca:e4:c2:d5:80:ff:8c:98:0b:02:55:c5:ed:4c:04:ca:9c:
62:5b:a8:66:d4:d9:cb:29:a1:32:5b:d5:28:3e:a3:27:32:48:
c4:e8:84:2e:e6:4f:5b:9c:15:d9:0b:06:a0:3b:74:92:27:56:
71:c1:98:ae:82:40:9e:03:4e:16:a4:5d:57:29:a2:bd:03:29:
10:2e:96:7a:17:29:87:25:95:e1:ae:05:a2:3c:89:11:02:bd:
42:94:6b:55:b4:85:87:2c:11:cb:3a:c2:37:d7:c6:89:ee:66:
58:0e:96:9e:5b:1d:77:fe:cf:db:5c:a9:b9:6f:5f:d7:25:ba:
ef:fd:17:cf:a3:62:11:28:fb:98:7c:96:d6:95:f8:32:5c:0b:
01:55:b7:45:54:95:0a:31:0a:30:61:9b:96:66:07:7e:a0:9f:
1e:51:57:f5:ad:f1:2c:12:61:30:d4:26:28:39:a8:47:ae:b2:
82:85:04:95:db:43:55:06:b2:c5:db:6d:1f:fa:c3:40:3e:35:
8e:0f:7c:61:a0:9a:4c:b6:2f:2c:58:6f:b0:50:6e:9e:24:8c:
6b:88:17:fe:1e:4a:07:e2:8c:af:8b:6c:34:13:5d:d6:08:d1:
fb:a4:0e:fa:fa:8b:d7:a9:f7:68:9b:c8:93:65:35:cc:a3:35:
29:0e:c4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:18:07 2026 by rpki-client