Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
File: tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft (raw, json)
Hash identifier: Y12lSPE9khgdf4msF/y8i5fSzRY1XH/qjzhx2TTHfdw=
Subject key identifier: 52:A7:F8:85:8D:9D:CE:52:7A:AE:38:BC:FB:9D:EF:95:AC:00:30:4E
Authority key identifier: B5:39:83:18:35:C8:7C:75:01:F6:C3:7C:B4:8E:60:A7:95:A3:94:BB
Certificate issuer: /CN=b539831835c87c7501f6c37cb48e60a795a394bb
Certificate serial: 01A0E0617D4821214826F2DAAF07F5A248AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
Manifest number: 1A73
Signing time: Sun 27 Sep 2026 01:01:20 +0000
Manifest this update: Sun 27 Sep 2026 01:01:20 +0000
Manifest next update: Mon 28 Sep 2026 01:01:20 +0000
Files and hashes: 1: SXqmp5RLfEZyA8P9uCzH5CgbQUA.asa (hash: h4SDtU0VDA6Kn7INYcKrGuZ7EVqBrSakqgFgTW1ueEc=)
2: tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl (hash: S4E+o11Hp7VoFSFIOZJpKFsotiwyaFAzYoVEHeBPaUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:7d:48:21:21:48:26:f2:da:af:07:f5:a2:48:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b539831835c87c7501f6c37cb48e60a795a394bb
Validity
Not Before: Sep 27 01:01:20 2026 GMT
Not After : Sep 28 01:01:20 2026 GMT
Subject: CN=52a7f8858d9dce527aae38bcfb9def95ac00304e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:18:b4:5f:88:31:df:d3:e2:c5:65:8c:fb:fc:
a6:2c:09:66:95:0d:21:4a:0b:af:6e:0c:cb:3a:47:
f8:3e:82:8e:00:d1:7e:24:2b:05:f8:f9:69:88:6b:
d1:08:07:66:34:d4:4e:1f:53:51:9e:7a:3a:c0:b2:
04:f6:8a:7f:55:5b:57:95:97:50:99:78:7c:54:86:
08:4f:f0:d2:b1:34:b3:91:b2:a5:56:9f:7e:f3:0a:
b0:ca:63:d8:f3:ff:14:09:22:3f:62:01:a5:16:7b:
e4:1f:a2:00:7b:ca:90:ad:d3:e1:34:be:cf:d8:9c:
98:c8:86:56:90:3c:f4:d7:5e:81:34:43:1c:e3:94:
7c:c4:ef:29:87:80:67:7f:1f:53:c9:04:4a:0d:9b:
46:0a:54:aa:77:f5:1d:83:c4:e9:58:c1:b1:42:cc:
5c:82:00:8b:fb:25:9b:eb:80:6b:b4:1d:b4:15:1f:
64:1e:03:21:ed:73:84:c5:ae:47:18:a0:e7:1f:62:
3e:17:9d:80:af:e6:9c:26:81:f7:f3:43:a8:ef:13:
21:75:a5:b7:0b:c0:b3:9a:79:c4:00:65:76:60:fd:
3c:11:31:c9:e0:1d:31:57:82:20:59:26:98:94:35:
5b:5d:b0:c4:fe:7b:6c:48:b5:43:08:c9:fa:ce:38:
de:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A7:F8:85:8D:9D:CE:52:7A:AE:38:BC:FB:9D:EF:95:AC:00:30:4E
X509v3 Authority Key Identifier:
keyid:B5:39:83:18:35:C8:7C:75:01:F6:C3:7C:B4:8E:60:A7:95:A3:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5e:c8:63:40:cd:cf:cc:27:19:d2:67:85:64:52:29:5b:1e:
e2:fc:9a:a8:7d:67:3b:e2:99:fc:ef:7b:3c:1a:2d:15:1e:c2:
c0:55:80:12:ab:88:1f:05:f0:bf:81:6c:e8:5c:92:f6:fe:f5:
af:6a:bc:d6:c0:9c:a4:78:eb:19:14:fc:9b:4b:fa:ba:fa:39:
4c:ee:ae:00:0d:7a:e1:e3:25:70:8f:ad:30:87:d3:37:4e:85:
d6:ad:6a:68:e6:49:bb:67:3d:9b:de:fb:69:54:ff:5a:ac:8d:
c9:c9:c6:f8:cb:f8:93:3f:f4:a4:7a:9c:69:7e:30:c2:67:7a:
c5:d7:b0:4c:5b:66:b0:ac:fc:e6:d8:14:25:76:d7:21:2d:ba:
0a:ec:73:28:c0:13:c0:f4:69:bb:78:07:70:86:18:85:9d:bc:
4f:67:41:3e:1e:4c:d3:67:22:46:fe:6c:aa:b8:4d:c5:0a:2a:
d0:47:30:9f:86:65:87:8b:40:9d:bd:cc:15:18:0d:58:35:f2:
71:da:79:a0:ad:89:72:80:64:4c:e9:18:5f:4b:2f:2d:fb:e2:
3d:60:6f:cf:2e:12:8c:08:27:47:06:4a:09:65:8a:04:52:69:
9a:5d:07:f9:e9:3e:ac:14:a6:ea:14:b9:e1:82:4c:b8:38:ed:
62:c3:ff:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:46:47 2026 by rpki-client