Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
File: tZtlS0KDPTZojjeakhvrrswwd2I.mft (raw, json)
Hash identifier: Vz4BAcNqEfvc2fci37ueyezln8vfy/cnwd5M03s+FZo=
Subject key identifier: 48:7C:2A:AE:A3:2B:D6:34:1E:2C:46:0D:A7:9B:8C:F9:42:3F:19:B1
Authority key identifier: B5:9B:65:4B:42:83:3D:36:68:8E:37:9A:92:1B:EB:AE:CC:30:77:62
Certificate issuer: /CN=b59b654b42833d36688e379a921bebaecc307762
Certificate serial: 01A10BF0300ADBD77A8F8F88BE3C819FB932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZtlS0KDPTZojjeakhvrrswwd2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
Manifest number: 0104
Signing time: Mon 05 Oct 2026 12:00:52 +0000
Manifest this update: Mon 05 Oct 2026 12:00:52 +0000
Manifest next update: Tue 06 Oct 2026 12:00:52 +0000
Files and hashes: 1: P1tf3TOfH-5BUA4TlKHVZFLsg9E.roa (hash: Ou5jVY+Wu+51dLZB22miAYmWfU4viS5vwM+gRlM0aZU=)
2: tZtlS0KDPTZojjeakhvrrswwd2I.crl (hash: Ns006a92CVFLHbs7UAMlF5JVcJN8R1ei2+juOePX2uU=)
3: whrEFYh55PfP3rH9r88LFTEnY0U.roa (hash: TH01oABU19/I/IoXNBdj7bjG3uEgkQpDazrpyE0JmkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZtlS0KDPTZojjeakhvrrswwd2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:f0:30:0a:db:d7:7a:8f:8f:88:be:3c:81:9f:b9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59b654b42833d36688e379a921bebaecc307762
Validity
Not Before: Oct 5 12:00:52 2026 GMT
Not After : Oct 6 12:00:52 2026 GMT
Subject: CN=487c2aaea32bd6341e2c460da79b8cf9423f19b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:28:11:e8:a1:5e:bb:91:bc:bc:f8:c1:ba:ec:
76:94:96:27:7f:7b:d9:b0:5d:7a:8c:fa:5e:4e:8a:
6d:16:01:48:ca:0b:ce:0b:da:72:9f:ac:27:1a:dc:
45:ca:0c:1a:7d:71:0b:e4:dc:e4:9e:46:22:15:99:
80:67:53:2e:85:e2:eb:0e:af:b1:8f:e9:d3:64:bb:
e6:e6:b3:66:6c:b4:ed:9b:de:5a:91:18:50:48:e4:
b6:d5:d1:db:6c:67:39:13:1d:ec:a9:2e:59:79:6d:
b3:9b:bf:0b:a4:c2:0d:bd:ab:16:fb:1e:09:0b:07:
d1:5b:e7:12:42:93:8d:07:7e:27:ec:75:ee:a0:cd:
47:66:c3:e1:f3:39:f3:b8:e4:4c:f0:73:32:5a:f8:
53:8a:35:36:d5:1f:40:a1:f2:df:4e:61:a4:b1:57:
d8:93:ed:01:87:b1:e2:81:8a:60:40:41:c2:a2:c5:
95:da:85:43:a7:02:dd:b7:b5:ac:9b:0f:bb:2c:dc:
e4:e0:44:64:11:cc:9c:34:10:3f:ea:00:08:1c:ba:
cd:0a:f3:cc:29:c1:86:f6:d8:ed:c7:25:f9:42:fc:
2c:e4:31:e1:42:24:3c:c5:8c:ed:91:f6:5a:1a:f0:
53:78:dc:31:09:51:6e:75:79:1d:ad:b1:6e:7a:ee:
1c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7C:2A:AE:A3:2B:D6:34:1E:2C:46:0D:A7:9B:8C:F9:42:3F:19:B1
X509v3 Authority Key Identifier:
keyid:B5:9B:65:4B:42:83:3D:36:68:8E:37:9A:92:1B:EB:AE:CC:30:77:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZtlS0KDPTZojjeakhvrrswwd2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7f:e6:e8:97:0c:5c:33:70:fb:f4:05:25:02:fa:0c:3e:8c:
90:ea:d6:27:b1:21:64:c5:c2:1f:3a:ed:ad:66:7b:d3:aa:e9:
e8:2c:8c:8e:1f:50:d5:fa:fb:7d:18:a3:fe:cf:ed:96:96:e4:
87:00:55:8a:e0:d0:c0:a4:47:51:61:d1:92:69:07:95:52:cb:
02:f8:e9:e0:69:59:c4:22:00:39:22:3e:94:85:f2:37:e4:42:
91:21:71:eb:22:91:5f:42:d9:be:13:1d:37:a0:c7:e7:84:13:
e6:9e:33:58:73:d6:9b:d4:e5:5c:72:da:7c:2f:69:bd:c5:ab:
3e:3d:57:72:f6:11:0e:52:84:f3:de:47:45:aa:b5:8f:68:0f:
d8:47:c2:e2:0d:7b:35:d5:bd:34:f9:44:fa:6b:32:76:40:52:
8b:87:e3:fa:1e:26:ce:c2:14:dd:51:48:d0:a3:25:03:f1:8b:
2e:1d:71:23:d6:04:6a:cf:dd:e5:6d:9e:82:55:96:68:74:7e:
77:8a:52:f5:06:d2:cb:59:58:82:bb:5a:c6:89:f2:b4:8d:21:
93:31:25:82:41:8a:2d:2c:0b:64:d2:06:61:79:cc:59:c8:1f:
6a:29:b5:e0:fb:aa:6a:f2:7c:df:a1:82:1f:ca:fd:86:0f:82:
c9:87:b8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 15:24:04 2026 by rpki-client