Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
File: tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft (raw, json)
Hash identifier: JrAJ1ceWDg1zL0gQb6gnNiMWpE1A9xpxDM5YV3YfP0U=
Subject key identifier: BF:F6:1D:33:AC:60:08:C2:73:CD:C6:7E:B6:16:78:F5:1C:BB:46:B9
Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
Certificate issuer: /CN=b573d2dda93e420409163da59e7414ee91a2eef2
Certificate serial: 01A0D5DE0AFA90CD22BC288E43D32D357266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
Manifest number: 050C
Signing time: Fri 25 Sep 2026 00:01:33 +0000
Manifest this update: Fri 25 Sep 2026 00:01:33 +0000
Manifest next update: Sat 26 Sep 2026 00:01:33 +0000
Files and hashes: 1: 0mP1ztpahebUSVqYXstfQVo6lU8.roa (hash: ROTZ3HoBIhGjMRa1VghM4xscpCElB4RFAaHFDBzcBcc=)
2: tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl (hash: 5HHPmCNotGJU9kV6FC4go2GrBmbSH3pZiA3yGYz8p1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:0a:fa:90:cd:22:bc:28:8e:43:d3:2d:35:72:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2
Validity
Not Before: Sep 25 00:01:33 2026 GMT
Not After : Sep 26 00:01:33 2026 GMT
Subject: CN=bff61d33ac6008c273cdc67eb61678f51cbb46b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fa:52:45:21:63:c6:0e:f4:e0:10:80:1a:f2:
ed:6b:fd:6f:99:d2:e7:ab:5f:29:a0:40:1f:5b:a9:
7e:1c:4c:1c:45:92:be:5a:8d:e4:ca:85:f7:24:ff:
ef:ed:d9:af:a6:fb:ca:05:8f:98:30:9e:d3:8f:45:
ab:8b:b5:1f:cb:96:cd:40:22:4a:0d:78:cc:91:d7:
34:c6:97:a3:18:75:17:73:99:82:e5:e9:af:be:8d:
d2:36:fb:c1:b4:64:5e:75:a2:e9:d0:2f:44:fb:21:
ff:ae:3e:d0:6f:7f:fe:40:74:9b:be:da:3f:0f:8d:
8a:7b:d7:97:e1:e9:95:04:3e:e4:38:28:71:3f:b5:
b7:6f:52:15:31:40:ee:47:8f:aa:0f:1b:f3:fa:b9:
72:1f:c2:c1:bb:5c:9b:82:4b:61:bc:7f:ec:8b:b9:
97:6d:16:ab:0e:01:cc:86:e9:1c:35:97:5e:54:b1:
ae:25:1a:be:41:83:a8:6c:c3:06:6a:bb:99:ee:6b:
fc:34:e5:59:1d:d1:e4:f1:f7:66:45:3f:4e:84:9e:
e9:86:05:14:64:9c:69:64:55:b7:5a:dc:8d:3f:2c:
20:46:4e:b2:05:cc:75:28:8f:2d:17:1c:36:18:d3:
aa:4d:9a:bf:70:b1:ef:94:f1:71:bb:60:92:ce:4f:
5d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F6:1D:33:AC:60:08:C2:73:CD:C6:7E:B6:16:78:F5:1C:BB:46:B9
X509v3 Authority Key Identifier:
keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:cb:8c:d1:e9:64:9a:24:78:9c:7f:ae:f5:d8:b8:fa:0a:c2:
03:cd:71:c2:55:0d:b1:dc:c1:03:3d:3b:16:b3:ab:48:49:93:
b6:64:e5:2c:08:c4:31:ac:ff:7b:f8:ba:24:2e:40:44:fd:93:
cb:02:a0:6c:a4:32:1e:ed:b7:fa:8d:4b:1c:40:0f:59:8f:c8:
30:c6:e5:04:45:7f:d4:1e:26:c8:d8:8e:32:a9:66:64:97:11:
87:1c:07:2d:07:6d:d2:b2:98:89:f3:f3:ad:44:4d:4a:f4:63:
3c:cf:0d:c1:cf:e4:09:b5:44:58:9e:32:17:85:26:b8:86:89:
0d:0a:26:df:b5:a2:6a:39:49:2e:d1:45:3e:2b:6a:59:87:d8:
8f:5e:05:87:7a:65:5c:6d:03:a5:ca:4c:02:98:42:70:e8:9a:
e1:35:75:75:23:b8:e3:8d:fd:e1:52:1a:d0:66:08:84:99:af:
c3:0e:a2:86:11:03:35:eb:90:55:07:1c:cf:6f:0f:1f:9a:00:
e7:99:11:c5:04:53:b5:70:f7:f0:00:43:b4:d1:72:19:30:6f:
a6:55:f4:bc:67:86:d1:a2:22:15:6d:a6:30:bd:4d:18:e9:b4:
ed:94:44:b9:02:6a:89:d5:01:95:6e:35:da:0b:66:6d:18:13:
ed:51:a8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:46:46 2026 by rpki-client