Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
File: tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft (raw, json)
Hash identifier: W9JYrNPAsqwn9YqhTNEvfv3sQO3RdKqXSoN7ytcLnf8=
Subject key identifier: 8F:1F:24:90:80:E3:FF:F2:69:94:2A:22:92:B3:30:4A:59:C4:A4:26
Authority key identifier: B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
Certificate issuer: /CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Certificate serial: 01A13B92DC6D8441AAC7A56E62925EAEBAF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
Manifest number: 0743
Signing time: Wed 14 Oct 2026 18:00:42 +0000
Manifest this update: Wed 14 Oct 2026 18:00:42 +0000
Manifest next update: Thu 15 Oct 2026 18:00:42 +0000
Files and hashes: 1: 1-wdXyksXxlLDyQtMvZB97X44g4E.asa (hash: x3mjAJ81jhoijkN7mDxEpKfeq5jWDk7cC1bIIT5rjM4=)
2: JaJgHNZlSAbtuKvLA3-BudJJTlo.roa (hash: uT77HGoSLR7ak2tNmSlHYY46dhCnEltA+vTWyDTCj6Q=)
3: tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl (hash: WYypiedy4WFyctrH09hmd4sypKUsvGvJY3rClgWmPK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:92:dc:6d:84:41:aa:c7:a5:6e:62:92:5e:ae:ba:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Validity
Not Before: Oct 14 18:00:42 2026 GMT
Not After : Oct 15 18:00:42 2026 GMT
Subject: CN=8f1f249080e3fff269942a2292b3304a59c4a426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:db:70:00:37:f5:b9:6e:bc:aa:4f:c4:04:f0:
d0:c4:f9:8f:92:d3:6d:4c:42:37:8d:28:9b:0b:cf:
0a:b0:f6:7a:ac:bc:b4:8f:fa:9f:69:db:78:c0:d9:
c0:c9:0b:07:ff:7f:be:28:3a:e3:35:8a:28:ed:f9:
17:eb:3f:2e:b6:71:41:9d:69:91:09:1b:4b:cb:27:
23:ae:24:bb:4e:12:70:45:a6:7e:cf:80:ff:b4:63:
88:77:3c:78:fd:6d:fe:ac:b9:ad:1f:ea:a7:5f:8b:
bf:55:c4:99:c0:e9:58:2a:28:63:a2:d1:9e:88:2b:
b7:7d:e5:10:e8:2c:d1:2e:62:25:17:24:d9:51:33:
37:c4:db:8a:2d:24:eb:7b:83:d0:00:f0:4a:74:cb:
7a:a5:09:25:c3:a3:22:b6:94:ed:8b:86:d7:29:bf:
d2:a5:48:6d:2b:f3:cc:28:be:e8:d1:63:2d:04:f3:
eb:3b:a9:e6:eb:99:b5:0d:2d:82:f9:ab:c6:47:e7:
50:f3:0e:21:6f:39:45:60:ec:86:0e:51:21:84:78:
06:8c:43:a8:c1:29:4c:3e:0f:12:9b:7d:4e:a9:cf:
e6:73:80:af:b6:84:e6:d9:5a:d5:76:0e:b5:60:c0:
93:f2:fe:bc:5d:e9:71:b8:0e:14:b5:26:ea:05:a2:
1e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1F:24:90:80:E3:FF:F2:69:94:2A:22:92:B3:30:4A:59:C4:A4:26
X509v3 Authority Key Identifier:
keyid:B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d7:e5:f6:fa:92:77:69:0f:0f:93:7f:2c:2a:63:90:85:ed:
f6:1c:19:e2:64:65:72:83:c9:3d:94:44:d5:63:c5:b5:19:ab:
68:d3:52:46:d9:d9:b1:b5:38:b9:a7:4c:dd:c4:6c:3a:20:b6:
7d:39:66:0d:94:11:c3:7f:bd:0d:f3:f5:a8:8d:04:2d:f3:1d:
c3:7b:22:24:5c:49:de:55:f9:da:8b:aa:d0:2f:68:b8:d3:c9:
b8:39:6d:2e:c7:28:02:a0:4e:5e:75:57:d1:8b:56:c4:c6:88:
2a:f7:00:0e:95:7f:6c:66:7d:38:b3:59:f9:f3:11:73:93:e7:
ca:10:9b:44:f2:1b:0a:51:e9:2c:1d:57:61:18:2a:62:b5:99:
2a:ad:80:63:a4:d4:47:9e:c1:ac:29:33:c9:9e:73:cc:11:b9:
2c:d3:88:ce:2b:0d:a7:c4:72:c5:8c:52:cf:4e:f6:7c:8c:7d:
29:16:fc:5d:dd:25:f6:df:55:db:c1:13:2e:f9:7e:e3:78:03:
31:13:7b:69:63:bd:f6:86:66:ac:88:5b:5d:39:1d:68:a3:a4:
b7:ff:4d:e3:f3:53:ad:71:de:4d:1f:cb:63:f0:fb:1d:6e:0b:
38:a6:b8:3f:43:a4:76:8f:71:ea:6f:98:19:d9:b2:a9:33:82:
bc:6f:e4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:20:38 2026 by rpki-client