Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
File: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json)
Hash identifier: RGuB+SW95xW3fafSFlJ2d/oe0+e38OlRJXe3RlKOQa4=
Subject key identifier: BE:47:E2:8A:B6:C0:D7:30:28:9A:BB:F4:00:99:73:16:EE:E8:1C:21
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial: 01A0DB71B6E5C10A13F5156B402CDBD65EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
Manifest number: 0DCD
Signing time: Sat 26 Sep 2026 02:00:57 +0000
Manifest this update: Sat 26 Sep 2026 02:00:57 +0000
Manifest next update: Sun 27 Sep 2026 02:00:57 +0000
Files and hashes: 1: MpV_ycO4tTz0-ilBvtKC36nuWAI.roa (hash: vSAtW4LqIhE9X5JdTxt3hPAgyiDA1mTD5qXNu6hLJVg=)
2: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: rd+CIm4Ol1aUMv9yp80Hix4dQc58+hPHelRsfFHzaaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:71:b6:e5:c1:0a:13:f5:15:6b:40:2c:db:d6:5e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Validity
Not Before: Sep 26 02:00:57 2026 GMT
Not After : Sep 27 02:00:57 2026 GMT
Subject: CN=be47e28ab6c0d730289abbf400997316eee81c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:81:7d:b9:4b:67:64:8b:68:ef:d7:b2:b5:a0:
e4:6f:aa:d8:4d:09:a3:2a:74:b6:72:35:2a:52:6a:
cf:37:e8:0c:26:46:29:b1:23:83:d2:71:a4:26:aa:
6b:46:21:15:52:35:c5:d2:4f:56:0c:74:f8:30:8f:
17:18:68:a2:55:7b:b6:7d:f9:55:c9:b5:14:87:d0:
5d:64:ba:b3:8c:3e:df:7f:78:92:2f:86:8d:ce:02:
c5:7b:ea:bd:36:31:2f:df:da:0e:82:5a:22:4c:a4:
42:68:2d:8e:3d:dc:08:b0:ea:20:ab:2e:14:a8:b6:
29:cb:61:dc:d7:0c:9f:f1:f0:5e:2b:bd:ba:6c:35:
6c:7c:22:9c:81:98:4e:ef:5b:41:52:b3:38:cd:da:
3d:16:24:8f:d7:63:f0:69:84:f3:26:66:f0:ef:b6:
60:7d:61:5f:dd:69:36:ea:ce:9f:39:13:68:1c:07:
97:f1:4a:6f:70:16:8a:56:f3:0d:5e:fc:3a:60:d2:
8d:b1:54:af:a5:b8:3e:cb:ad:47:8e:f8:16:03:b3:
4e:eb:60:3f:e5:ce:61:23:57:a0:5a:0a:24:8b:2d:
6a:ef:f3:20:e1:f0:5b:47:33:30:0c:26:fb:6e:a0:
b0:11:8f:8a:f9:02:22:8f:4e:75:2e:31:30:2d:7d:
3d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:47:E2:8A:B6:C0:D7:30:28:9A:BB:F4:00:99:73:16:EE:E8:1C:21
X509v3 Authority Key Identifier:
keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:7a:51:b8:12:00:0f:94:ba:73:c5:86:29:97:ac:ce:45:64:
37:cd:0b:46:21:10:0b:02:21:d2:5d:b6:a2:1a:87:bb:fb:60:
65:b1:eb:e1:27:b8:a0:56:90:80:cb:ca:85:c6:34:61:a8:b1:
a6:0b:8c:55:28:58:69:6a:06:2f:b1:84:19:b3:13:56:90:17:
14:40:6e:ec:f7:75:b7:ae:2f:28:e4:ac:91:af:9b:24:f1:a6:
cc:0d:0d:30:1e:06:35:a1:60:5c:57:44:97:72:37:34:19:70:
b6:78:05:a8:6b:41:25:9d:06:0b:73:5a:2f:89:ae:dd:dc:31:
f9:5d:ad:ae:0d:db:61:4b:a5:12:6f:5b:72:27:ce:61:dc:bb:
59:b0:49:40:00:c2:06:ba:ec:25:74:a7:55:70:cd:06:c0:06:
fe:19:9f:49:cf:9b:56:9e:d5:d0:0d:fd:ee:13:e9:1d:fc:cb:
a2:0d:e4:78:0e:0f:21:f9:ee:82:94:52:a9:5b:a5:4f:10:1f:
d1:f5:4f:53:e9:4e:14:c7:05:02:df:99:78:8a:1f:72:ff:ce:
e6:06:e1:96:96:30:f6:d0:f8:14:99:63:29:5b:83:1c:3a:36:
64:15:b7:55:3c:2c:8b:54:b3:6a:a8:2c:3a:8e:7a:54:a3:20:
74:12:a5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:05:46 2026 by rpki-client