Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
File: tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft (raw, json)
Hash identifier: nsxt+67qGuhNEPPltB3BF8KVU4EkYg3ei/c8ztP2gDs=
Subject key identifier: 2F:35:40:F9:9F:3C:16:27:30:B1:0C:1C:C9:69:AA:86:77:A5:DA:13
Authority key identifier: B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
Certificate issuer: /CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Certificate serial: 01A0DE05F3F071A86CD5E5100B6ACE738718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
Manifest number: 0CC1
Signing time: Sat 26 Sep 2026 14:02:07 +0000
Manifest this update: Sat 26 Sep 2026 14:02:07 +0000
Manifest next update: Sun 27 Sep 2026 14:02:07 +0000
Files and hashes: 1: 4rBeJt2gTE44sAknjaU9icbf798.roa (hash: ZYDnszD6TdxQH5b/70FLacYtJ5dXx4AM/j4gatDDLJQ=)
2: FznKlNjPtV7CgIvm3j4yrj4Hfic.roa (hash: FZIfFOE2MnfZCsnXNURSud4raCCnVXaurgVHkGDoOTc=)
3: tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl (hash: X/XG4Z8qWZPWKBbF1y2cCjfzjm9FLMSGvhgobPOY25w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:f3:f0:71:a8:6c:d5:e5:10:0b:6a:ce:73:87:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Validity
Not Before: Sep 26 14:02:07 2026 GMT
Not After : Sep 27 14:02:07 2026 GMT
Subject: CN=2f3540f99f3c162730b10c1cc969aa8677a5da13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:14:96:48:ca:bd:db:39:c7:5b:2c:06:5c:
47:e3:c2:d7:09:23:0c:9a:12:77:06:0d:df:20:16:
ec:13:3c:89:34:ed:86:ca:d5:d5:99:d5:a8:8d:84:
6e:44:bf:77:4c:a2:66:c1:f0:98:3d:8b:80:0a:0a:
53:9c:5f:ac:91:da:38:a7:0a:d0:0d:4b:75:9e:8d:
6f:c3:86:dc:61:65:13:1e:6d:26:4a:63:59:3e:9a:
f5:7c:4a:07:65:60:06:84:1a:34:70:3a:c1:8a:17:
b8:39:b8:c4:b5:9f:dd:39:c2:24:c6:43:9a:19:aa:
07:3f:1d:13:6b:95:18:15:c4:c8:a2:ee:c5:e7:23:
1d:07:7f:c2:ad:81:38:d7:4a:48:73:ae:7e:ad:80:
b7:c7:45:5e:91:b4:2b:60:ea:16:0c:29:6e:b6:07:
c7:65:2e:2a:a7:5b:5e:1a:ef:a5:ba:8d:94:2b:1c:
cc:8a:67:6d:c6:ad:99:9d:62:f5:36:fb:ab:e2:f0:
9b:eb:c8:d0:19:79:d1:d0:21:ed:14:83:79:1f:86:
1f:24:36:c8:1d:05:bf:21:81:ca:db:45:02:d1:38:
ad:a7:20:47:52:5f:94:5a:d2:51:c9:3e:5d:9f:8b:
34:79:13:54:0a:05:75:a2:b0:14:c1:b8:61:95:5a:
26:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:35:40:F9:9F:3C:16:27:30:B1:0C:1C:C9:69:AA:86:77:A5:DA:13
X509v3 Authority Key Identifier:
keyid:B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:07:e5:ea:14:c7:72:4d:81:61:b1:1b:b2:66:02:0b:b5:24:
8d:0e:4e:1b:c3:ce:35:8f:a9:3f:39:47:b8:92:95:d8:05:84:
3e:52:a7:a3:c3:e0:d0:4c:66:53:fe:ef:64:8f:0f:47:9a:1f:
f8:e7:6b:ec:61:f7:39:5d:d2:ea:b4:51:20:43:30:48:0c:86:
01:08:cd:b5:c9:56:86:c4:5e:16:44:fe:31:dd:7a:78:e1:03:
2b:73:42:8e:fe:27:8e:9c:c4:93:52:d5:4f:72:12:2b:e9:0e:
af:78:e6:cf:ce:f6:7b:35:86:cb:4c:6f:cb:fb:7c:08:89:d8:
85:e4:de:20:c3:28:43:39:e8:40:59:e7:c6:4e:99:ab:f7:b2:
93:1e:32:aa:d2:1e:fb:83:65:56:d3:5f:f2:1c:98:d3:ef:53:
8b:9c:a8:87:d3:48:a0:2e:dd:5c:72:e2:30:9d:1a:e0:29:55:
21:24:89:9d:99:86:08:9d:db:cb:40:ba:1d:c6:4b:fe:28:63:
45:de:f9:ed:46:01:5e:f1:ef:90:77:19:3f:c2:1c:54:0e:0c:
d5:36:1b:da:88:fe:36:0b:4d:0e:f9:ab:e8:a8:8b:fa:d8:a1:
6f:21:ba:0a:4a:9f:50:a2:cf:02:bf:88:7a:8c:fe:24:32:fc:
9e:63:d8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:32:23 2026 by rpki-client