Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.mft
File: tvPx-G3UyqCws3yYuhKCUKpJR0U.mft (raw, json)
Hash identifier: Cg4T7kbki7NIfNPCSMXdXyXGiSZWZnslK29y8nT679c=
Subject key identifier: 20:CD:71:49:E5:99:25:CA:C0:A9:44:F5:81:A1:6E:99:C5:3E:A3:AD
Authority key identifier: B6:F3:F1:F8:6D:D4:CA:A0:B0:B3:7C:98:BA:12:82:50:AA:49:47:45
Certificate issuer: /CN=b6f3f1f86dd4caa0b0b37c98ba128250aa494745
Certificate serial: 01A0DBDFCE89748BB245345D957F2209AD3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPx-G3UyqCws3yYuhKCUKpJR0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.mft
Manifest number: 6C
Signing time: Sat 26 Sep 2026 04:01:12 +0000
Manifest this update: Sat 26 Sep 2026 04:01:12 +0000
Manifest next update: Sun 27 Sep 2026 04:01:12 +0000
Files and hashes: 1: Du0TfAsYdMk0CJ2zqvUFpo0-qyQ.roa (hash: 9sKSx901oDe++es16PvLgOI1pRTpkLDtrTtxAUjUzXA=)
2: GRZQfICaPZkmlWt-Zi18iyQthto.roa (hash: 5+2pbzTpQ4n5mUGa2nh7fMPzxd0iARQ9e60Moilj36g=)
3: tvPx-G3UyqCws3yYuhKCUKpJR0U.crl (hash: x4lzN1VEFmeVwWJbqqBByIFPn53bdTFhtZS3IrnJfNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvPx-G3UyqCws3yYuhKCUKpJR0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:df:ce:89:74:8b:b2:45:34:5d:95:7f:22:09:ad:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f3f1f86dd4caa0b0b37c98ba128250aa494745
Validity
Not Before: Sep 26 04:01:12 2026 GMT
Not After : Sep 27 04:01:12 2026 GMT
Subject: CN=20cd7149e59925cac0a944f581a16e99c53ea3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:38:4e:43:1b:c2:3a:4c:f5:19:dd:81:ca:
b6:3d:0e:47:1f:fa:95:a3:58:9c:36:7f:6e:fd:98:
81:d3:53:2d:4d:2b:22:ca:62:52:14:da:e9:4a:f0:
1e:54:ac:86:a5:79:cc:81:ed:74:1e:db:2d:45:ee:
99:f8:cd:3a:20:76:29:28:f9:76:cb:ce:5a:25:18:
53:31:74:e8:fd:b2:2b:d9:5e:01:5d:84:0a:bc:f2:
ec:69:84:f3:9a:3a:cc:e0:c7:32:93:b9:20:64:f6:
7e:28:22:05:9b:b8:ae:d0:2a:bf:9f:79:8b:82:bf:
5e:69:3a:34:43:85:bb:15:76:91:c6:6c:10:e4:f4:
4c:b2:f7:63:df:50:cb:05:0a:1b:4e:1b:af:ca:24:
fc:e8:74:12:ec:9f:58:c8:98:e5:85:32:25:6f:3f:
ff:ee:dc:bb:0a:8c:4c:c7:4b:dd:38:37:81:66:ef:
7e:6f:f8:47:c2:f2:96:ad:26:e3:d8:d1:28:28:de:
57:7c:be:c2:8c:55:21:95:e8:76:40:89:67:85:16:
9e:19:d3:9e:7f:e2:e7:e6:94:6e:77:87:31:0d:cb:
25:54:fe:79:c2:02:1f:eb:8d:4a:a3:a8:bd:ec:b6:
84:b3:02:cf:30:0f:ff:ea:6c:93:31:28:01:b4:76:
dc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CD:71:49:E5:99:25:CA:C0:A9:44:F5:81:A1:6E:99:C5:3E:A3:AD
X509v3 Authority Key Identifier:
keyid:B6:F3:F1:F8:6D:D4:CA:A0:B0:B3:7C:98:BA:12:82:50:AA:49:47:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPx-G3UyqCws3yYuhKCUKpJR0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5d:31:c2:00:c1:b4:d9:d9:6b:f9:98:b0:c0:b3:c6:07:65:
1c:fd:b9:ed:d7:bc:4c:e2:9e:6c:08:3c:d3:53:68:3e:6c:9e:
a0:79:5c:f9:c8:07:2e:fe:02:67:a9:08:dd:2e:97:ed:32:28:
0d:59:f1:0d:44:66:f5:34:42:12:de:50:93:6d:9a:85:7d:8e:
ca:04:13:b2:94:25:00:6f:30:89:40:8e:ce:a9:93:ff:36:4b:
b3:1d:15:0e:79:f1:79:d9:10:61:66:bd:8f:b1:9c:70:32:86:
01:c1:a0:e1:02:df:ca:7d:f5:4d:be:35:6d:85:b8:34:ed:40:
a5:33:a8:4a:2d:15:0a:d1:06:24:f7:c4:47:22:48:47:1b:c6:
8d:13:6a:74:85:ad:dc:37:0a:a7:b9:ff:29:50:56:49:30:ab:
c7:51:bd:52:4d:f7:51:4b:20:64:f9:02:77:38:ae:ff:16:d9:
c8:f1:72:58:22:1b:c4:c9:09:b7:40:0b:c5:58:af:9a:78:79:
1e:9a:a3:c8:1b:5d:d9:66:bb:9e:ba:da:b9:77:ca:30:88:64:
bd:46:14:d9:0b:51:f4:f9:ae:7e:77:ff:c1:8a:40:7d:18:0c:
61:f8:72:be:13:02:c5:c9:5c:76:29:0a:92:7c:24:02:cd:cb:
48:d9:e8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:39:45 2026 by rpki-client