
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/6e50c2-c5ad-4dd5-acb7-93eb143a3fbf/1/t0FAkE6TQngaQguYXmTMNc3vy64.mft
File: t0FAkE6TQngaQguYXmTMNc3vy64.mft (raw, json)
Hash identifier: vQOEQKi5mBFMWzJnDSED30q4ALU9hFZu8XPQnUurr2A=
Subject key identifier: 4A:84:B3:99:92:3D:CD:39:9E:97:F4:2C:F6:B5:A5:52:F8:E6:BF:DD
Authority key identifier: B7:41:40:90:4E:93:42:78:1A:42:0B:98:5E:64:CC:35:CD:EF:CB:AE
Certificate issuer: /CN=b74140904e9342781a420b985e64cc35cdefcbae
Certificate serial: 01A106C9E77214267E3483054AF1AE86A5F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0FAkE6TQngaQguYXmTMNc3vy64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/6e50c2-c5ad-4dd5-acb7-93eb143a3fbf/1/t0FAkE6TQngaQguYXmTMNc3vy64.mft
Manifest number: 0288
Signing time: Sun 04 Oct 2026 12:00:57 +0000
Manifest this update: Sun 04 Oct 2026 12:00:57 +0000
Manifest next update: Mon 05 Oct 2026 12:00:57 +0000
Files and hashes: 1: cJb3OglO7xZXnqgcS4IiacfQEF0.roa (hash: vl8NCITgrbY5cswSzS8XkdQGpkVi77gvR63+VLkTCM4=)
2: t0FAkE6TQngaQguYXmTMNc3vy64.crl (hash: vPFdJmj2fytmV7A0+SysZ1JQbNr3/om8pg+ExMwF98Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/6e50c2-c5ad-4dd5-acb7-93eb143a3fbf/1/t0FAkE6TQngaQguYXmTMNc3vy64.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/6e50c2-c5ad-4dd5-acb7-93eb143a3fbf/1/t0FAkE6TQngaQguYXmTMNc3vy64.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0FAkE6TQngaQguYXmTMNc3vy64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:c9:e7:72:14:26:7e:34:83:05:4a:f1:ae:86:a5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74140904e9342781a420b985e64cc35cdefcbae
Validity
Not Before: Oct 4 12:00:57 2026 GMT
Not After : Oct 5 12:00:57 2026 GMT
Subject: CN=4a84b399923dcd399e97f42cf6b5a552f8e6bfdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:69:3d:39:0b:7f:2d:40:df:8d:a6:83:ea:
18:ba:b9:d5:39:a0:cb:42:4c:86:3f:fa:dd:59:73:
21:ee:35:78:07:b3:91:11:67:44:3d:b2:79:9d:7f:
be:5b:11:d0:d4:68:da:2c:fc:64:30:32:5a:eb:a4:
8e:20:40:b5:e6:5e:62:9a:f0:00:84:4a:89:2f:eb:
9b:07:57:d4:39:1c:48:7e:61:8d:c9:7e:18:01:07:
3e:e7:2f:05:f9:69:52:91:3c:51:8b:49:4e:64:76:
e8:87:9e:cb:ff:79:0e:f3:ec:1a:4e:94:ed:62:09:
54:dd:ab:77:ed:d0:74:3f:3c:46:b3:2b:3c:0a:31:
68:3f:59:a2:64:81:db:37:87:da:54:bb:3b:41:83:
2c:aa:d4:4b:e6:b7:ff:6b:a7:cd:6c:13:2a:83:88:
48:bd:01:9e:f5:4e:5f:37:a0:03:3d:70:b7:f2:7f:
ba:a6:2b:3f:7f:8a:d7:d4:63:35:b4:d5:56:2b:1f:
5d:0c:aa:bf:9d:b0:cd:77:43:96:d9:a1:0c:80:08:
ae:9f:5f:5a:49:0c:f9:cd:5f:ab:26:c5:c8:a8:4a:
e1:7b:59:e6:7a:e3:da:43:df:94:1c:f1:8d:7c:00:
a1:9f:f0:e1:11:2b:04:16:37:ae:b2:35:63:3f:62:
7a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:84:B3:99:92:3D:CD:39:9E:97:F4:2C:F6:B5:A5:52:F8:E6:BF:DD
X509v3 Authority Key Identifier:
keyid:B7:41:40:90:4E:93:42:78:1A:42:0B:98:5E:64:CC:35:CD:EF:CB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0FAkE6TQngaQguYXmTMNc3vy64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/6e50c2-c5ad-4dd5-acb7-93eb143a3fbf/1/t0FAkE6TQngaQguYXmTMNc3vy64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/6e50c2-c5ad-4dd5-acb7-93eb143a3fbf/1/t0FAkE6TQngaQguYXmTMNc3vy64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d6:da:28:b1:c5:2e:35:1d:e0:be:f7:64:8b:ad:47:25:4f:
87:b1:9f:49:46:bf:db:66:3b:6c:2c:5c:c4:76:c5:c6:a2:c8:
8e:a5:80:a5:c6:46:a0:f3:8b:4c:cf:1e:3e:16:31:0f:9a:e1:
10:b9:c3:c2:69:af:37:fc:e1:de:fa:9b:07:01:ec:94:ba:74:
4d:46:63:81:5d:37:5a:6c:9c:ec:83:06:f2:0b:fb:94:a3:43:
86:f4:ad:de:aa:bf:b9:63:c8:00:a2:b9:5f:65:f3:27:bf:1d:
6c:55:73:60:93:dc:f8:b0:8e:68:b8:2f:ff:8d:40:ef:cc:5b:
26:a3:d7:24:fe:7b:92:2e:f7:4e:15:f0:5c:5b:82:8a:a3:98:
1e:5f:b5:3e:28:4e:e0:40:95:33:9e:a8:77:78:fa:c2:41:71:
28:31:c5:f9:1a:ca:94:55:d7:3c:0b:f0:9c:17:30:ba:6e:2a:
cd:f5:bc:54:1f:1f:45:95:ad:31:ed:bb:2b:95:57:cc:ab:41:
e4:d1:c4:10:40:4d:37:0a:2f:61:5b:9f:5c:8a:5e:8a:e9:72:
88:b4:f7:b4:91:2d:4a:f4:e8:88:b3:c6:16:0e:dc:df:0b:b2:
02:01:04:8f:16:65:f6:6a:9a:bf:11:5c:8c:01:bd:40:e9:94:
12:92:9a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:03:45 2026 by rpki-client