Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
File: tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft (raw, json)
Hash identifier: 8fnXiqBq0QJCK4FGp/b3BOqjdR1z9roGtmv02h7HRtA=
Subject key identifier: A1:2D:FA:20:1D:51:89:5B:E3:50:A1:64:99:90:3F:C1:4E:2A:49:3C
Authority key identifier: B4:50:D3:13:2D:E1:BC:2D:D2:65:D6:E1:AF:C6:FB:16:B6:EC:1B:08
Certificate issuer: /CN=b450d3132de1bc2dd265d6e1afc6fb16b6ec1b08
Certificate serial: 01A0D3B84A501761D88B86176F77673C84A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
Manifest number: 0214
Signing time: Thu 24 Sep 2026 14:01:05 +0000
Manifest this update: Thu 24 Sep 2026 14:01:05 +0000
Manifest next update: Fri 25 Sep 2026 14:01:05 +0000
Files and hashes: 1: tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl (hash: wgzNv7hc64qEwY9M9HH4cRBNRUCF9hYc78OkaXsvSEE=)
2: vqtiNCqmFTgZhluRAF9PxU_CVW0.roa (hash: SZBzR5bl2Fh4kMVH7fOKYHImik+Vj2jtIZ9kmUmZ24o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:4a:50:17:61:d8:8b:86:17:6f:77:67:3c:84:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b450d3132de1bc2dd265d6e1afc6fb16b6ec1b08
Validity
Not Before: Sep 24 14:01:05 2026 GMT
Not After : Sep 25 14:01:05 2026 GMT
Subject: CN=a12dfa201d51895be350a16499903fc14e2a493c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:91:ac:a2:47:eb:bf:bf:f8:6f:7a:ce:ab:
b5:96:0a:ef:84:15:09:21:ba:c0:9f:83:66:96:49:
68:55:d6:9b:28:8a:40:1a:b3:50:ae:ad:68:a8:f5:
8d:70:d3:1b:30:da:29:d5:b0:77:18:c4:06:bf:86:
e0:6f:02:4a:1c:a8:2a:dd:47:e8:13:cb:c4:49:5c:
46:fa:0e:56:ae:9e:9c:b3:7e:01:13:bf:5d:f1:bd:
88:37:d6:a1:21:af:f6:d8:b2:f5:f0:fa:ec:1b:ab:
9f:3f:eb:a0:2a:0c:9e:df:70:5d:74:a0:f0:00:f3:
bb:93:2d:5e:b6:a5:53:cc:5d:f8:cf:2e:05:bd:1e:
7c:4e:3a:04:cf:ca:93:7b:41:a7:e0:53:50:37:11:
2c:a4:ad:32:cc:3c:97:1a:a5:a8:62:36:dc:64:23:
8f:1d:73:50:ae:0f:49:91:c7:94:45:e6:ff:ff:59:
38:57:09:07:de:f5:fe:d9:88:ce:04:a4:d2:06:6e:
4b:2a:39:00:ef:7c:3a:93:39:0a:73:2c:3d:ac:29:
ec:13:ff:8d:e1:f5:be:3f:2f:85:6f:9c:90:90:ac:
f9:40:6b:11:27:4d:28:a0:d5:ee:c5:d0:93:81:ab:
20:2c:a0:2d:36:72:29:da:ea:9f:2c:23:7c:66:f4:
4a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2D:FA:20:1D:51:89:5B:E3:50:A1:64:99:90:3F:C1:4E:2A:49:3C
X509v3 Authority Key Identifier:
keyid:B4:50:D3:13:2D:E1:BC:2D:D2:65:D6:E1:AF:C6:FB:16:B6:EC:1B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:04:aa:d6:18:05:e1:75:5d:28:b7:b6:8b:c5:1d:1b:f4:61:
23:08:a6:57:50:57:2c:fa:d8:f1:c6:8d:7f:56:2d:7d:7f:8a:
75:84:df:3a:d4:85:df:1d:d4:c5:3e:18:a8:cc:17:4a:b5:9b:
d0:e7:08:25:6d:cd:49:da:c8:40:c5:e7:4d:a9:5d:3e:8c:df:
cd:2b:c0:36:ef:46:d8:ea:08:68:2a:e3:8c:83:23:42:c7:b7:
78:ba:ea:4d:70:cf:2e:04:d2:e5:78:da:26:2c:ee:8d:5b:1a:
5d:1b:e3:b7:27:42:b9:94:d9:b5:42:a7:52:d6:27:9e:5c:1a:
c9:ec:02:93:75:5f:c8:af:ec:33:bc:73:08:03:49:d4:d6:6e:
bd:1f:d9:16:96:7c:ac:d3:52:4c:39:7a:f9:8d:86:4c:c9:4d:
48:41:1c:8b:62:8d:23:f5:9a:bb:db:53:25:da:a1:60:55:35:
9a:eb:4f:e5:a9:6c:37:d1:72:cf:25:53:9f:9d:18:d1:8f:9b:
01:16:8f:d0:a1:03:4d:bd:af:a5:18:42:9a:c4:c4:ec:0b:f1:
3f:06:c0:90:06:23:bf:c7:9b:0f:5c:56:bb:c2:9c:fc:c9:e2:
2f:08:4f:27:f3:13:c6:95:bb:ab:b4:d2:93:d2:ca:50:7f:75:
7a:4d:02:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:08:53 2026 by rpki-client