Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
File: tsAN1rE41q2498hDjdCy2Fg9xWY.mft (raw, json)
Hash identifier: l+g1PROdeAaH6S2Kb4k5HH1Rhtkx5yc1frlPISPsc60=
Subject key identifier: 4F:F7:80:DE:20:48:A8:15:91:29:5B:40:3A:A5:18:C9:39:E1:5E:06
Authority key identifier: B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66
Certificate issuer: /CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
Certificate serial: 01A0E02A4AF25C13232643063F05F892B90C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
Manifest number: 031B
Signing time: Sun 27 Sep 2026 00:01:03 +0000
Manifest this update: Sun 27 Sep 2026 00:01:03 +0000
Manifest next update: Mon 28 Sep 2026 00:01:03 +0000
Files and hashes: 1: gebinHk09-NabMXj-jq94wPZa6M.asa (hash: GQWmqZiCd4TGe+5+G38N918qHKq5ATM9kvInAFjIdFc=)
2: tsAN1rE41q2498hDjdCy2Fg9xWY.crl (hash: 5gueqwuRnOg7Qg49VfpQKuyVOfBycMLTlK0vAjXvlA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:4a:f2:5c:13:23:26:43:06:3f:05:f8:92:b9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
Validity
Not Before: Sep 27 00:01:03 2026 GMT
Not After : Sep 28 00:01:03 2026 GMT
Subject: CN=4ff780de2048a81591295b403aa518c939e15e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:19:3c:c0:27:c1:27:01:76:1c:29:4f:20:a2:
ac:f5:28:2e:23:5b:5a:09:5d:8d:2f:b9:1d:df:b5:
3b:f4:6c:00:a6:75:5b:31:a0:91:38:64:8d:2e:d5:
1d:c0:28:32:fc:e4:98:7f:02:77:e5:9f:f2:25:64:
41:a6:f5:b4:d3:b4:aa:94:e3:2c:09:3b:8a:64:df:
42:eb:2e:d3:50:23:16:69:02:24:43:52:92:e9:5d:
5d:45:24:bf:26:00:c8:1c:65:fa:35:6b:44:b8:db:
45:cc:87:fa:a9:78:f3:15:68:ff:a2:e2:17:38:3c:
8f:90:92:ea:e6:91:4f:1c:77:29:74:86:48:e5:e5:
53:4c:45:fc:51:d8:db:39:55:b2:47:e7:5d:22:c7:
41:7e:c7:eb:78:db:ba:b1:00:5c:0d:d1:54:a6:38:
fe:2a:4f:4b:39:99:09:52:00:b6:74:79:e1:d4:3d:
d5:73:d4:30:9e:6c:73:5e:38:7f:54:4f:fa:b1:6c:
17:7e:46:38:27:fb:57:db:af:f9:cb:25:e9:f2:29:
22:d4:ca:ea:75:dc:7b:fa:da:01:46:aa:87:30:5f:
2e:e4:45:5c:b1:23:c4:4c:95:1b:47:b3:a0:05:3d:
e3:a9:70:2f:e0:9f:7a:45:06:99:81:98:4a:e3:51:
d1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F7:80:DE:20:48:A8:15:91:29:5B:40:3A:A5:18:C9:39:E1:5E:06
X509v3 Authority Key Identifier:
keyid:B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a7:73:62:48:a5:28:b7:fe:6b:f2:e2:c8:17:b0:da:17:93:
2b:99:92:40:dc:a0:70:f4:1f:94:5b:ee:44:b1:2c:47:6b:f0:
8c:c4:d3:d1:24:5a:5e:97:59:da:dd:c7:44:e6:fe:ed:f4:c2:
82:e5:12:be:2c:3f:fc:dc:9e:bc:47:9a:a4:1b:53:2b:bb:93:
1e:8d:ea:ab:80:7b:cb:26:e4:08:a4:8e:ba:69:51:4d:ed:41:
31:9a:28:3f:63:56:c9:25:7c:64:1f:93:25:50:01:88:cd:09:
9c:73:69:22:d9:58:4f:97:8e:8e:ae:a7:67:73:55:31:01:91:
ff:f6:74:04:73:ac:7e:da:2d:a8:ec:21:e7:9f:e5:11:2f:ab:
cf:97:46:3d:b2:dc:f1:67:34:3a:99:a8:30:f7:55:1d:f1:a4:
59:b6:b7:5d:75:9c:47:71:7e:51:17:89:09:1f:ee:45:4e:2a:
69:12:7d:94:6a:82:b9:1c:c4:c2:05:d7:f7:b9:00:a8:18:5b:
62:9c:0f:dc:f2:eb:0a:6f:14:3c:54:d5:c4:91:63:87:da:4c:
78:a6:9f:d0:e9:fc:1d:b5:ae:73:46:db:b2:0a:14:cf:69:7f:
c9:24:29:7f:ef:f1:73:2f:14:d6:31:f6:b1:6b:08:09:8c:fd:
0b:f6:78:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:55:31 2026 by rpki-client