Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
File: tFOob9MIG4A-3BDSO77akdeTICU.mft (raw, json)
Hash identifier: xCFKk1lDo5NPw2DHIykPt6GZ40AVJxmDuvDrVbrcR6w=
Subject key identifier: EA:56:7D:A5:AE:7A:F7:9F:EC:8F:B2:C1:E8:0B:45:F1:57:82:72:FB
Authority key identifier: B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
Certificate issuer: /CN=b453a86fd3081b803edc10d23bbeda91d7932025
Certificate serial: 01A12466AC82C6461C81191082252EA20CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
Manifest number: 1A2B
Signing time: Sat 10 Oct 2026 06:01:10 +0000
Manifest this update: Sat 10 Oct 2026 06:01:10 +0000
Manifest next update: Sun 11 Oct 2026 06:01:10 +0000
Files and hashes: 1: 1-yB-aN02FvvexRrc-rBff7cVXYQ.roa (hash: hfqxjUEwIBgbMLOiBaRuABJ5snVrD/mvftwY9OHnyNU=)
2: tFOob9MIG4A-3BDSO77akdeTICU.crl (hash: 3BHyWFQKZ3X6rONR6F57iepiYM2UeXXW4MRoSp63X3Q=)
3: uz3G_zDw5uNl_xC9huZfw-K_ce4.roa (hash: lgXmUNKY9C0bvQMUFuOJnJImq7SU/P/bySj8SdoyC3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:66:ac:82:c6:46:1c:81:19:10:82:25:2e:a2:0c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a86fd3081b803edc10d23bbeda91d7932025
Validity
Not Before: Oct 10 06:01:10 2026 GMT
Not After : Oct 11 06:01:10 2026 GMT
Subject: CN=ea567da5ae7af79fec8fb2c1e80b45f1578272fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:31:06:8e:86:a3:e5:4d:76:b8:25:48:77:61:
a5:c2:1d:bc:0c:be:f0:cc:fd:c3:ce:50:b5:74:da:
cc:71:56:5c:66:5c:09:78:c2:a5:56:72:1f:45:b8:
65:75:d8:ca:2e:f4:53:1b:81:1a:39:a8:54:98:da:
93:97:b4:ec:0a:ff:08:6b:3b:98:89:ae:c9:2e:a0:
7e:d4:4d:fa:0f:1e:f5:14:ff:6b:37:f2:57:b2:92:
61:8f:02:de:a1:f4:15:45:6b:86:a0:e3:77:bf:a6:
a7:59:8a:f6:13:6f:56:60:a6:2a:6c:f6:80:c4:a9:
f2:c5:16:4a:e2:d7:11:cf:93:00:91:3f:fa:63:64:
d2:34:64:0f:32:43:a5:4c:dc:47:1b:58:85:8b:fd:
31:cd:76:21:2a:6d:16:67:78:55:e0:7c:22:6a:ac:
fe:f0:31:1e:e0:ed:47:98:76:09:eb:f2:6f:d7:d8:
17:66:27:eb:b7:8d:a6:b0:21:27:d4:e8:d4:d5:8d:
eb:66:4a:48:17:20:0d:29:c0:46:bc:0d:81:1b:9c:
51:39:b8:ec:90:9a:b3:93:12:35:ba:5a:fa:86:da:
d1:7e:64:c1:8a:c0:bc:87:fa:fa:ef:ac:1a:3d:63:
5a:9b:2e:c1:55:25:bf:1e:59:75:47:7b:84:7b:fa:
34:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:56:7D:A5:AE:7A:F7:9F:EC:8F:B2:C1:E8:0B:45:F1:57:82:72:FB
X509v3 Authority Key Identifier:
keyid:B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:98:e9:c9:a6:0b:e2:a1:fc:c1:70:b1:a1:38:81:3c:fa:00:
89:3e:2c:f0:85:2e:39:f9:06:dd:d6:2e:bc:38:01:96:bd:6f:
34:66:87:3d:c3:e4:54:97:02:ae:66:ea:e4:b6:f7:09:57:a2:
9c:d2:79:40:88:27:51:f9:31:57:04:f9:db:c4:91:8a:a9:40:
4b:de:97:24:da:d3:94:93:e6:71:4f:86:48:ad:fb:98:f1:f0:
b1:14:79:e9:a2:62:e4:20:de:72:e7:92:1b:93:37:a4:aa:3c:
11:46:4e:92:cc:80:48:73:ae:f9:ac:f9:33:22:b3:fd:87:b3:
22:da:02:6f:3f:a2:ee:01:b1:1d:ac:c2:4d:3c:c6:5e:c6:23:
23:f7:8f:1f:74:6f:84:b9:8b:98:69:f2:4b:0b:a2:94:89:83:
eb:6b:8e:a7:8e:c3:47:cc:f0:11:6e:fb:ab:4b:2f:84:44:92:
8e:f2:46:88:f3:8e:ef:2e:31:a0:a5:da:99:da:a8:08:8b:eb:
46:9d:38:39:e3:26:8a:2c:22:54:d5:91:d0:02:d6:56:f7:2d:
8f:60:0d:61:fa:c8:40:e4:af:18:23:ec:aa:a2:87:83:30:cd:
cf:87:8a:b1:c1:7b:7d:12:f6:d7:80:77:72:28:3b:b2:c9:76:
5d:6c:a9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:16:41 2026 by rpki-client