Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
File: tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft (raw, json)
Hash identifier: yFCbjhMpMrECdxzWI13K+niESXsAFg8xcDMQjbJ+Bh4=
Subject key identifier: 82:A6:08:18:EF:FD:9B:99:48:6F:E9:61:5F:1D:AA:21:AD:C1:02:54
Authority key identifier: B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
Certificate issuer: /CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Certificate serial: 01A0DD29BE0B2A0D16FE4DDF476EBB38EB84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
Manifest number: 1A78
Signing time: Sat 26 Sep 2026 10:01:35 +0000
Manifest this update: Sat 26 Sep 2026 10:01:35 +0000
Manifest next update: Sun 27 Sep 2026 10:01:35 +0000
Files and hashes: 1: LDYOOwc3ElUwgsoAhX1VAVoDz7A.roa (hash: LnEQSIV2ZJKxc3kP1NpzkPN+GxvmT9Fs9kvIu+YHy1w=)
2: RNoONMgjC7AI9bUiPXHJnoNxdw4.roa (hash: EyX2BbVopJ5hjqPnGfS3gH2lJBH+hCeBYJzhz4A8ggc=)
3: _Kvo8y_R7krVK88kzx8nMzPfxVY.roa (hash: hJFEckwW05pWdYupq2RWtNuX2TmzieG8g1SpfTLtVnQ=)
4: tNl2UUnZ4217WSLfqRDSI0O_BWU.roa (hash: TJsFtOL6bWviF8Z8b9ypqKLo31djdrQdvLmCXkT7uLQ=)
5: tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl (hash: 19siu62IicX10XZuJUBSb45j448Ovo5H5cnV/ZKa8tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:be:0b:2a:0d:16:fe:4d:df:47:6e:bb:38:eb:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Validity
Not Before: Sep 26 10:01:35 2026 GMT
Not After : Sep 27 10:01:35 2026 GMT
Subject: CN=82a60818effd9b99486fe9615f1daa21adc10254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:ea:8b:77:31:7d:19:f9:99:6d:15:55:6d:
0b:2a:a9:89:a5:72:b8:03:3c:cd:33:2c:bf:71:18:
b6:be:20:00:22:1e:9a:8a:2a:95:d6:fe:a3:8b:7e:
7b:80:76:55:4b:5d:28:3f:34:75:4e:94:ec:64:44:
aa:46:4b:2b:0a:fb:5e:3f:be:b9:bc:92:7d:eb:e1:
5e:5f:2b:0d:c7:31:bf:da:f0:c9:0f:71:86:50:1b:
f6:c7:58:65:32:45:51:2e:6a:50:a4:a7:cb:5e:e6:
12:a1:84:c7:ad:ea:12:f4:68:3c:f1:35:54:c9:5e:
44:c7:79:2a:3d:cb:5e:fc:a5:2e:19:55:22:93:39:
66:ae:99:c2:fa:e0:e8:eb:39:77:bb:09:50:b3:f2:
e7:24:a4:a2:5c:f4:6e:1c:02:93:57:c4:32:d9:74:
42:5a:a2:0a:5e:5e:aa:dc:90:57:d0:fa:52:8c:82:
c3:8e:ee:86:c6:50:e6:d6:03:c3:22:fc:e9:f1:69:
33:c0:15:ba:4f:b4:a9:9c:1b:c7:9d:31:42:13:55:
2b:b1:f4:1e:c4:5c:eb:03:78:56:a7:49:46:aa:16:
a4:a1:ec:9b:a1:17:19:4f:85:f4:5c:f1:94:75:50:
64:97:b1:93:54:80:04:68:c2:57:3c:6b:a6:ac:a3:
d2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A6:08:18:EF:FD:9B:99:48:6F:E9:61:5F:1D:AA:21:AD:C1:02:54
X509v3 Authority Key Identifier:
keyid:B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ed:73:ba:b5:8f:0f:c8:03:8c:9a:b1:d6:29:d7:c6:55:16:
dc:70:66:7e:f3:30:19:64:16:f9:9e:d1:e0:4a:f0:b6:5d:11:
6c:a9:76:b4:3f:f3:a1:5f:85:22:a0:93:da:ea:8e:cc:a9:c7:
ed:a5:30:3a:8e:9c:06:56:6a:e0:b3:e9:43:d4:13:79:8a:d6:
ce:f1:d2:8a:4e:b5:d7:55:9a:6d:63:b5:74:a1:3d:ab:c6:a5:
15:5d:b6:7e:2e:07:ee:f6:73:2a:6d:6e:b1:08:42:ad:fc:5c:
d6:c5:0a:5f:b1:0e:b2:f3:27:c1:ee:5a:d2:a2:12:27:4c:90:
64:6f:36:92:e4:4d:0a:92:e6:f8:d3:58:fa:b1:82:35:58:4f:
f7:c7:4b:5e:4e:46:56:4c:86:0e:41:bb:93:04:30:75:b0:60:
56:ff:91:aa:71:8a:34:76:d3:c9:f7:66:a4:42:12:e9:61:29:
76:ab:20:3f:73:73:b6:63:03:7e:e8:de:92:44:36:e1:d3:bb:
d9:e1:6a:c7:1e:0a:82:d7:35:e3:81:2e:16:a5:2d:07:d9:02:
bd:06:68:27:54:64:ed:91:9d:12:7c:15:a6:06:2a:ca:47:5c:
74:37:69:4d:5c:a9:7e:c3:e1:d6:9b:31:b7:2a:88:79:4e:98:
3f:b1:87:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:16:06 2026 by rpki-client