Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
File: tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft (raw, json)
Hash identifier: jAh88HyOTdl18UT7cVSGqQM/NKIYDnIg8mZf8Gcg4GI=
Subject key identifier: AB:AA:CA:01:05:81:06:A6:26:5C:BE:35:A5:75:FE:81:69:44:BC:AB
Authority key identifier: B4:50:D3:13:2D:E1:BC:2D:D2:65:D6:E1:AF:C6:FB:16:B6:EC:1B:08
Certificate issuer: /CN=b450d3132de1bc2dd265d6e1afc6fb16b6ec1b08
Certificate serial: 01A0D5A684F297AD36F280787AD037EA42AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
Manifest number: 0215
Signing time: Thu 24 Sep 2026 23:00:54 +0000
Manifest this update: Thu 24 Sep 2026 23:00:54 +0000
Manifest next update: Fri 25 Sep 2026 23:00:54 +0000
Files and hashes: 1: tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl (hash: sw8WYRkiFRPp1EQV2ZK6K8A8nHKJLUEUgvqKLTagObs=)
2: vqtiNCqmFTgZhluRAF9PxU_CVW0.roa (hash: SZBzR5bl2Fh4kMVH7fOKYHImik+Vj2jtIZ9kmUmZ24o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:84:f2:97:ad:36:f2:80:78:7a:d0:37:ea:42:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b450d3132de1bc2dd265d6e1afc6fb16b6ec1b08
Validity
Not Before: Sep 24 23:00:54 2026 GMT
Not After : Sep 25 23:00:54 2026 GMT
Subject: CN=abaaca01058106a6265cbe35a575fe816944bcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ef:c5:dd:80:2b:11:57:65:44:7c:ae:9e:7a:
a5:17:76:7f:9a:34:6f:fb:6d:1d:b7:91:e8:b0:71:
2c:40:b3:08:df:c4:06:99:4a:90:e5:f3:20:6d:b0:
54:a3:c7:37:c2:6c:7f:90:63:ec:2b:1b:31:2d:ad:
d2:b1:4f:65:b2:7b:c9:4d:e3:f8:4c:f5:85:c4:70:
0c:04:fc:68:7b:e6:07:c1:49:21:26:56:4a:4c:90:
cf:b6:7d:9f:6b:ec:f7:8b:4f:0c:94:83:22:3c:a8:
f7:74:b7:5d:e9:f3:67:45:77:ec:12:24:46:47:30:
69:d6:28:10:52:df:ae:67:99:19:ca:af:4f:11:30:
42:35:fc:ae:98:d4:b6:c9:a9:89:95:ba:96:98:da:
5b:5e:31:e4:7d:44:c2:36:94:22:e3:9d:a6:bd:dc:
b8:cf:0e:e3:6e:34:59:36:2a:d5:25:85:a9:ca:bf:
f1:28:40:40:34:9e:d2:33:c2:f0:06:8f:88:fd:46:
e9:3e:1f:92:5f:3b:06:53:84:69:d7:68:82:10:ea:
e8:b0:60:b5:83:d5:2c:3b:e2:df:fd:38:a1:b7:ba:
41:96:50:5d:99:71:e9:8c:e9:f7:60:ba:b9:64:95:
af:cb:e1:2e:8e:e6:6d:ad:27:8d:9a:5f:63:0f:5d:
3a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AA:CA:01:05:81:06:A6:26:5C:BE:35:A5:75:FE:81:69:44:BC:AB
X509v3 Authority Key Identifier:
keyid:B4:50:D3:13:2D:E1:BC:2D:D2:65:D6:E1:AF:C6:FB:16:B6:EC:1B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:56:3b:3c:da:e5:b3:00:90:b7:25:d2:9b:2a:ce:88:ed:16:
c9:1d:c9:58:6d:37:d7:7a:5d:e7:cb:ee:5f:8f:1a:12:4a:af:
4b:6c:68:ab:9e:4f:c7:2e:36:e6:35:88:41:7d:f7:da:91:ab:
0d:8d:8a:11:42:4d:a8:aa:05:48:31:56:08:39:ac:8f:72:f1:
10:c9:ce:21:7f:01:ec:51:79:72:e8:76:18:23:dc:72:a5:cf:
15:ca:d4:b6:22:17:4b:ec:4b:1d:8a:3b:d6:5f:ef:6b:4b:ff:
4b:40:75:54:7f:a4:c9:76:5c:09:3f:0c:81:d0:fb:e8:bc:2b:
c3:22:51:05:a4:1e:17:3b:af:c0:04:e1:15:69:f0:e5:ea:cd:
ae:a9:90:ac:2b:59:98:b6:fe:39:8a:17:55:2f:a2:05:21:3c:
e7:42:f0:f8:ee:d4:b1:64:94:8e:ee:30:b9:38:4b:b0:d5:47:
d0:c5:1d:f7:c0:ed:dd:be:ee:7f:18:43:dd:a6:2e:e0:b2:97:
f6:0e:60:2d:4b:ae:69:ed:8a:4c:a9:2b:40:cb:7a:0e:f7:e4:
30:88:b9:85:1e:1e:bc:58:33:f6:ac:f0:76:95:fa:37:f2:89:
97:ef:00:48:8c:c0:e9:db:7d:11:9f:8d:fa:94:eb:8a:bb:92:
05:fc:f9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:51:39 2026 by rpki-client