Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
File: tI8GPSnpEPAzvstlbouZAfaeyXQ.mft (raw, json)
Hash identifier: vJJRqZe2WHlF34sfzbReT9m8U+ovgXztU+dBx9dW0w8=
Subject key identifier: FA:B5:17:24:C8:1D:E4:B0:29:84:10:80:CA:9F:51:43:12:85:B3:E2
Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974
Certificate serial: 01A0E777B95B42BB02AEAC44767FDD9C9834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
Manifest number: 1376
Signing time: Mon 28 Sep 2026 10:02:58 +0000
Manifest this update: Mon 28 Sep 2026 10:02:58 +0000
Manifest next update: Tue 29 Sep 2026 10:02:58 +0000
Files and hashes: 1: YrqYNM1Pym45hQFacw7cbC8M_eA.roa (hash: o7i0wNONs0dKHmOQelWnN9IgkyF6F7BCOkRiYH+yl44=)
2: oxlX37hwRfJw6rYvD_DlOds6oAM.roa (hash: NBmTSUZkwjvyNiisqMltw+Cq5Ss6K9JzeUmdp5uxYs4=)
3: tI8GPSnpEPAzvstlbouZAfaeyXQ.crl (hash: gKWl70nQRWKJfVxLZAFPN3FE/VopcRLhWD5to+WsGfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 10:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:77:b9:5b:42:bb:02:ae:ac:44:76:7f:dd:9c:98:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974
Validity
Not Before: Sep 28 10:02:58 2026 GMT
Not After : Sep 29 10:02:58 2026 GMT
Subject: CN=fab51724c81de4b029841080ca9f51431285b3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a1:48:42:23:ad:0f:55:d4:a9:64:49:0f:5b:
bc:09:9f:74:da:fb:b5:d8:52:59:0c:ac:0e:a5:7f:
ef:eb:5b:0a:d8:7e:d8:7b:d9:96:ef:ee:86:e7:b1:
36:5c:83:1f:1c:0c:ec:1e:e1:cf:40:3a:8c:6c:eb:
45:b1:89:21:56:2b:67:2b:cb:eb:ca:0f:27:f7:07:
e8:fa:0d:63:cb:35:73:ad:e8:53:d2:26:d6:3e:71:
0b:ac:b1:61:ad:d0:6c:9a:ca:2c:ca:e3:0e:d7:01:
3c:09:7e:a6:6a:01:02:1d:d0:4a:ed:0c:00:2a:d2:
90:a0:eb:5f:9f:dd:fc:db:2d:43:e7:c5:41:e4:26:
5b:7b:cb:85:64:8d:c0:fb:d8:86:60:cf:1c:6d:55:
94:40:f3:df:2a:fe:dd:45:d8:22:17:79:14:d4:00:
26:90:6d:7f:1f:48:cc:61:38:ec:5f:93:43:bc:53:
d5:3b:12:e0:60:24:f9:53:79:6f:07:f2:15:28:72:
3b:09:59:31:0c:f0:4a:3c:cc:16:f7:74:2e:99:8b:
68:e1:e3:fa:31:8f:79:a9:40:8f:58:ef:0e:30:b5:
6d:84:08:85:33:e8:a9:85:96:49:03:5e:9a:bf:7f:
f8:8c:13:e7:38:cc:2a:13:c0:e0:99:54:9d:fd:29:
b3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B5:17:24:C8:1D:E4:B0:29:84:10:80:CA:9F:51:43:12:85:B3:E2
X509v3 Authority Key Identifier:
keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fc:f0:51:d3:45:6c:a7:a4:d3:09:c2:8b:da:c5:6f:7c:af:
8c:d5:c6:3d:60:e7:03:83:0a:33:eb:f0:98:dd:68:c5:22:73:
ab:42:6e:82:23:37:ba:83:6c:dc:32:b4:40:74:35:3e:c7:86:
fd:d1:f6:91:59:46:ae:e1:40:81:a0:c9:e8:32:e9:4f:20:dd:
9f:02:6c:39:2d:4c:0e:e3:64:e1:c8:05:45:9c:7a:23:55:50:
f2:cd:9a:47:1f:63:fd:59:a4:df:2d:4d:99:e5:33:8e:6b:08:
7a:ba:a4:65:7c:9f:8a:57:cd:4f:43:3c:d7:ff:5b:43:97:85:
af:1a:6b:98:f1:f8:c9:58:a4:75:aa:29:ff:7f:28:3f:05:23:
e2:47:25:22:91:d1:1f:c3:8f:e5:ab:2d:6f:35:03:12:e2:60:
5d:99:2f:31:d6:8e:f0:48:fa:b5:89:dc:81:39:42:28:a8:28:
57:0a:3c:f4:54:65:99:f9:76:b9:97:4f:3a:dc:9b:26:12:c1:
bc:7c:b1:38:48:67:87:0e:a8:b4:a1:7e:c5:53:1d:e5:94:ad:
88:dd:90:14:3b:d0:54:ed:a6:cb:07:5e:02:48:27:20:aa:87:
9c:16:9f:56:30:87:4a:fe:6a:e2:9b:2d:d8:09:b1:69:07:c6:
47:a3:c4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:21:34 2026 by rpki-client