Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
File: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft (raw, json)
Hash identifier: qaBs/JhaAC9JWXl8HADBoFx0tOKg863zUBNsHbL8/T8=
Subject key identifier: 94:9F:FD:B4:9A:37:7B:9D:4D:2E:F5:1D:8D:36:85:B2:27:2F:09:F7
Authority key identifier: B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
Certificate issuer: /CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Certificate serial: 01A0CAEB6AE0C26FE83B47D0D7258B3B05C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
Manifest number: 1A6B
Signing time: Tue 22 Sep 2026 21:00:20 +0000
Manifest this update: Tue 22 Sep 2026 21:00:20 +0000
Manifest next update: Wed 23 Sep 2026 21:00:20 +0000
Files and hashes: 1: UqqJVc2LmDSoG37tyF_Y4rZTJNo.roa (hash: 3t/K9ONoo6YmeusIuo36eGNhkP5aHMKXreL77QnBjxI=)
2: jZrCbTqva_be0rB3oAO4Wrl5ILU.asa (hash: BKm/bFSkAYx4jWBv2MfEwkAGa++5I1rT7LtmalyyzRA=)
3: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl (hash: ZMPN6xmC5//kEm4o4TF6kErpiIze9e/EWNUKjC7zblU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:6a:e0:c2:6f:e8:3b:47:d0:d7:25:8b:3b:05:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Validity
Not Before: Sep 22 21:00:20 2026 GMT
Not After : Sep 23 21:00:20 2026 GMT
Subject: CN=949ffdb49a377b9d4d2ef51d8d3685b2272f09f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:63:25:51:d9:9c:ec:aa:2a:dd:5f:fe:50:
c7:07:5d:5e:30:12:cd:5a:ea:c0:08:63:39:d9:56:
97:1c:a0:09:57:fc:df:0d:6b:89:21:5f:a6:47:9c:
b3:04:5c:e0:b6:57:3f:ae:d2:3c:f6:b7:a8:d6:a6:
f1:07:ee:7c:0e:e3:39:dd:d0:28:22:7e:28:78:29:
f0:08:e3:1f:cf:48:a6:17:f9:fd:01:57:2c:38:4d:
3d:ea:18:b8:fa:50:a3:c6:f4:27:66:26:7f:90:26:
d7:4c:f4:de:e8:a4:a4:70:07:4a:0f:59:6a:02:12:
c2:f4:16:26:f0:3a:61:68:3d:ab:db:c4:2f:01:e4:
2a:fc:d9:e4:fd:c7:cf:81:f8:8a:8b:29:56:90:00:
ef:55:e4:62:ff:ac:0b:9b:09:f4:4c:7f:7e:5d:e9:
37:e1:3e:94:5d:99:75:ca:51:73:68:3a:48:87:45:
0b:f3:07:ea:7f:18:c5:bb:23:7b:ec:67:70:22:96:
aa:5e:ff:26:ab:ee:27:da:21:73:5a:ca:b1:71:9b:
4d:29:9f:06:97:c1:7c:a7:04:1c:76:77:8c:c6:f2:
14:6b:f0:d0:c2:f4:9b:a0:2f:19:4f:c1:1d:f0:52:
2a:8f:74:d6:2d:f0:05:43:77:14:0d:cb:79:63:4d:
57:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9F:FD:B4:9A:37:7B:9D:4D:2E:F5:1D:8D:36:85:B2:27:2F:09:F7
X509v3 Authority Key Identifier:
keyid:B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c2:10:14:b7:93:8f:d7:8a:bb:80:b4:89:97:cf:cf:67:f9:
1b:20:12:df:96:ef:79:d8:f2:dc:b0:c6:3f:d5:97:a6:cd:87:
75:f8:9d:7a:19:48:bb:50:7b:0e:01:8c:1a:6c:f6:86:79:00:
7f:c2:cb:f6:c8:d9:be:e0:9c:b7:84:1d:23:84:69:81:ac:61:
be:5f:97:ba:c7:6a:f3:47:6d:24:3a:12:20:f5:46:3d:f5:8f:
13:8f:23:a3:bc:5d:52:e6:40:87:2f:e5:cd:59:b7:6b:2f:d4:
d2:30:ac:c5:1a:e8:e1:27:21:1d:d5:77:61:84:b2:99:71:d1:
1f:21:32:1a:57:d8:f8:9f:4b:a9:cf:b2:f2:2c:d5:59:a5:41:
81:89:9e:fa:c0:fc:56:14:8c:31:c4:bc:8c:bc:6b:e9:5d:f8:
09:5b:ea:3a:87:6a:e3:8b:7a:c4:45:24:ad:9a:cb:8f:f4:32:
3c:9e:04:28:94:56:25:3e:6c:12:0d:0c:2a:02:45:1e:22:2f:
80:19:8d:50:31:26:f1:77:46:fa:b3:7c:de:ea:7c:6e:bc:1e:
5d:fa:76:2b:1b:43:5c:04:67:41:bf:48:d6:b6:bc:fb:ca:be:
4a:52:59:0c:6a:98:88:78:e6:ef:ce:77:f5:d0:86:58:26:e6:
0f:e3:79:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:32:03 2026 by rpki-client