Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json)
Hash identifier: pHrpwmQjFlZYef4+LvyXkxRCCjYLIXI1NUrmDSXfsrI=
Subject key identifier: 3E:BC:35:B1:23:AA:D6:27:BE:4E:B4:1B:F7:9B:2E:A3:F3:B2:7C:9F
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial: 01A0DE0544DF1A41044A189DCD8F4A047CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
Manifest number: 1A75
Signing time: Sat 26 Sep 2026 14:01:22 +0000
Manifest this update: Sat 26 Sep 2026 14:01:22 +0000
Manifest next update: Sun 27 Sep 2026 14:01:22 +0000
Files and hashes: 1: MvE_ASHksIA5Hihl4HjNkYFAKXs.roa (hash: R5hIaQTFtxbBLPslX/5K15uRVo3wvIX5E+vyZLpZGOk=)
2: sTa2ruH12AN1447UXDyFG4sK58o.roa (hash: QQfIB8V26GpvkAguN7nqO2FkvauGQGA+m32WWNo/GsE=)
3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: stdL2Ispsg1OAuVChc8pFHY6IlZZVHjA8K0PPI9PDKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:44:df:1a:41:04:4a:18:9d:cd:8f:4a:04:7c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
Validity
Not Before: Sep 26 14:01:22 2026 GMT
Not After : Sep 27 14:01:22 2026 GMT
Subject: CN=3ebc35b123aad627be4eb41bf79b2ea3f3b27c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:60:3b:5f:1a:79:1f:e3:ad:c9:0e:be:66:
55:71:93:d8:fe:c9:b7:af:00:f8:ae:f1:12:50:bc:
ca:b1:98:25:62:e7:d1:91:fe:93:fb:28:4e:d1:73:
da:21:f0:88:16:3d:dc:e8:1f:9c:dd:14:a6:ab:6b:
fc:45:6f:94:90:cd:2f:56:36:1f:64:13:d1:fa:92:
f8:7d:8d:e4:1d:68:8d:f8:35:f9:75:13:ee:dc:6e:
e4:2d:fa:f8:d3:5f:7a:5e:55:40:d3:42:c4:84:ee:
5f:39:71:a3:75:96:07:d7:fd:e7:93:34:6e:8f:33:
46:99:45:3d:4f:a3:d0:48:72:84:ae:84:ec:6a:5f:
44:98:fd:a1:83:17:58:e8:01:21:58:af:b3:6e:84:
dc:cb:51:de:f7:f2:bd:e7:2b:ca:29:bc:dd:8e:31:
07:79:aa:cb:cd:7f:2b:8c:7b:f3:fc:d2:3c:47:15:
49:27:2d:24:de:09:cf:bd:09:0e:de:ab:7f:a6:52:
4d:54:15:86:60:94:4e:00:42:3b:82:4c:41:88:78:
40:64:af:d2:2a:0f:63:82:b6:1c:b3:b0:60:30:c4:
4d:79:d2:b4:9f:d1:89:f9:9c:80:d4:37:a5:7b:58:
be:65:b0:db:5c:02:27:18:67:da:4f:19:6f:69:32:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BC:35:B1:23:AA:D6:27:BE:4E:B4:1B:F7:9B:2E:A3:F3:B2:7C:9F
X509v3 Authority Key Identifier:
keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6c:c6:58:aa:17:c4:4b:a5:54:e7:9e:58:7e:0e:58:7a:32:
e7:e6:f0:30:08:3a:ec:d8:4e:af:e6:84:4e:1e:95:32:eb:66:
2c:e6:d4:03:ce:92:ca:4f:cb:f0:e2:57:fc:15:db:7d:b7:4f:
a1:22:c0:57:ba:ff:4b:03:39:96:99:13:e6:96:74:d5:55:89:
8d:5d:1b:57:48:42:a0:38:b4:1a:c3:dd:80:14:c4:88:fb:bb:
9d:ac:4e:b9:ff:49:dc:f5:02:65:be:82:d3:e1:81:04:a2:ef:
4b:16:92:56:39:19:2c:9b:29:f3:bf:17:c2:f7:86:5d:25:e7:
97:db:21:1e:ab:9e:55:23:85:06:80:9c:91:96:da:af:bb:e0:
50:c2:c8:b7:32:74:e3:31:9c:af:81:36:da:19:61:96:f4:58:
82:58:ec:37:d2:5f:97:41:28:9e:1f:6e:9e:99:a3:de:dd:66:
ad:27:2b:b2:fe:df:2d:74:08:86:2a:b2:5a:27:67:ec:d3:71:
8f:83:93:7a:13:fc:2c:08:ca:73:da:14:6e:99:31:17:bd:f0:
86:03:52:10:a4:fc:60:7c:fa:9b:c7:80:d5:33:a3:1b:33:71:
4e:52:ee:61:09:53:86:e1:3e:ee:e5:cc:a4:03:6d:07:25:dd:
81:a3:84:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:40:11 2026 by rpki-client