Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
File: tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft (raw, json)
Hash identifier: eEupTnlD8D/gNCL5jdiZeQoXkzw4jMczu59+auehNtc=
Subject key identifier: 84:47:A7:D9:99:C4:72:51:87:F7:AD:6D:D8:D9:10:E7:17:BB:A4:CE
Authority key identifier: B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40
Certificate issuer: /CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40
Certificate serial: 01A0F5D6734CC53B14EF271945539B196DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
Manifest number: 07B0
Signing time: Thu 01 Oct 2026 05:01:07 +0000
Manifest this update: Thu 01 Oct 2026 05:01:07 +0000
Manifest next update: Fri 02 Oct 2026 05:01:07 +0000
Files and hashes: 1: lf0Q27_M7GFPEsgVcJVVxoAfXUM.roa (hash: sqE0Hw0Q3FI2WcAgCLh44TsVF/QN+tcFx9NnmWdf0g0=)
2: tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl (hash: 5KvEJ3vx2MzfZILXCjUTIWXLih1pql3o/8VCfthNsnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:d6:73:4c:c5:3b:14:ef:27:19:45:53:9b:19:6d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40
Validity
Not Before: Oct 1 05:01:07 2026 GMT
Not After : Oct 2 05:01:07 2026 GMT
Subject: CN=8447a7d999c4725187f7ad6dd8d910e717bba4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4c:07:06:f3:88:ce:8e:bf:86:95:de:6e:ed:
4e:05:0b:c6:a9:9c:08:db:0d:ca:43:9a:dd:23:a7:
08:dd:e0:ec:04:d1:32:1b:fe:4e:f4:8b:78:60:d1:
a3:78:c5:07:33:4e:02:65:cc:3a:93:31:a7:47:d2:
0c:f8:75:2b:88:6d:85:0c:66:6d:e3:7c:03:83:bc:
05:6f:80:6e:26:20:53:4e:9a:ed:42:58:56:8a:31:
e9:bb:50:16:1e:4d:56:ee:88:1e:aa:7a:88:22:64:
84:68:f6:27:3f:6d:9a:95:23:c6:2d:bf:19:a9:af:
57:71:fb:83:f5:dc:c8:ad:35:1a:2f:3a:af:85:ce:
22:e4:32:a3:ba:4d:41:c5:15:87:98:52:19:36:53:
9d:27:a4:4b:27:f7:0a:e6:97:4f:d9:f2:dc:37:2c:
a7:d2:bd:fa:70:34:d9:9e:df:e2:05:a6:9d:8f:fe:
7e:ba:37:bc:a6:ad:e7:e3:67:9c:a5:d2:7e:51:80:
01:a0:45:f0:f7:e7:48:e0:07:fc:6a:3e:2c:ef:e1:
fb:f2:42:5f:4c:1b:50:d4:58:0a:1e:76:07:ca:b6:
2c:13:bd:22:6f:62:64:7e:6e:3d:30:02:7d:52:4a:
04:82:c7:19:50:bd:d1:dc:fa:63:e4:94:fc:58:c2:
c9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:47:A7:D9:99:C4:72:51:87:F7:AD:6D:D8:D9:10:E7:17:BB:A4:CE
X509v3 Authority Key Identifier:
keyid:B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0c:6b:f5:be:81:92:da:1e:ca:57:82:f5:13:c0:59:15:a7:
38:27:6b:16:f4:e0:7c:af:d4:c1:ab:bc:32:12:0b:a3:a3:cc:
e8:6b:5d:66:70:e6:ad:1c:f5:d0:1a:79:5e:94:60:92:39:64:
4d:6d:99:91:4b:78:87:7b:8f:ca:c0:d0:56:27:f1:5d:9b:c6:
bc:71:a3:3b:d5:7c:7c:01:e7:ea:4a:93:6b:bf:45:5d:85:1e:
e6:48:1f:b4:0b:0c:ae:88:13:e2:82:4d:0c:77:de:56:6a:67:
31:e0:aa:ba:cc:94:41:f5:c0:9f:db:db:e7:3f:d0:58:b1:f0:
3a:ab:38:8f:5b:e7:33:da:07:7c:f2:b4:30:5c:d1:b9:79:ec:
4a:a0:6c:67:59:cd:d4:2d:b2:31:2b:d4:39:34:f4:6d:07:54:
07:a9:57:5a:e6:8b:8f:c1:19:86:8a:1b:80:1e:69:81:5f:dc:
5d:17:c6:39:07:d2:b0:6c:ae:6d:55:00:23:96:56:de:81:6a:
9a:13:4e:5f:13:d4:62:50:cc:7d:b9:90:bc:09:44:ae:ff:36:
20:65:35:06:f7:36:3d:b9:4c:f7:ee:25:fd:17:95:bc:bd:fa:
01:4b:77:30:44:a5:6b:5e:1a:c0:e3:4c:af:f9:72:fa:88:db:
a3:16:6d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:36:30 2026 by rpki-client