Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json)
Hash identifier: O42LDMoCCuC0vJF5x6l5dN78vbVCkwRFk3Ri0gXwPAE=
Subject key identifier: 5B:25:D7:50:3D:CC:15:7A:64:6F:74:FC:DA:2C:B1:DF:02:21:D5:5A
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 01A0EC2E66CABF4D75D9A29549B32B980196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
Manifest number: 1A82
Signing time: Tue 29 Sep 2026 08:00:58 +0000
Manifest this update: Tue 29 Sep 2026 08:00:58 +0000
Manifest next update: Wed 30 Sep 2026 08:00:58 +0000
Files and hashes: 1: QXMTv56aBNAUruAXJC7IVsSmMG8.roa (hash: jId8pBbIUwFi+HQiN7AbLv5/eBeeSyed+4bqRVzluB0=)
2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: JtBbCvPFxNfaVNj+Wr4dq0Tei5NCjY0UDWb/ud4hSoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:66:ca:bf:4d:75:d9:a2:95:49:b3:2b:98:01:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: Sep 29 08:00:58 2026 GMT
Not After : Sep 30 08:00:58 2026 GMT
Subject: CN=5b25d7503dcc157a646f74fcda2cb1df0221d55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:4c:05:dc:e7:f1:08:32:96:31:92:71:cb:
d1:b7:39:e8:47:d6:8b:13:ab:ea:89:d0:3b:37:7f:
a5:69:59:45:c9:88:01:1b:60:1e:c0:db:65:40:38:
d0:34:98:4b:5e:05:e4:52:5f:03:05:97:d2:96:4b:
6b:aa:3b:d1:b7:55:c6:48:8c:69:76:9c:f0:96:da:
1a:33:52:d4:e0:f6:31:bc:d6:e6:b0:ec:a8:05:7b:
44:80:bf:10:11:b2:37:05:e3:f8:1c:0a:95:90:da:
57:d1:b7:e1:da:1b:ca:eb:d4:07:1b:b1:9b:c6:97:
5d:2e:3c:ac:bf:89:40:26:01:98:1b:16:81:f9:84:
b4:b3:0d:7d:a8:cd:e1:99:c2:7b:24:5b:13:86:9b:
35:a8:ad:75:39:e5:77:5f:4d:8a:b9:a0:ca:1e:90:
48:6b:c4:95:68:16:31:e9:f9:b8:37:e7:e4:45:16:
b8:fe:2a:fd:cc:15:c7:cd:28:2c:b8:09:8a:47:3f:
5f:5c:81:28:3e:f5:7c:59:63:26:b5:cf:32:a0:12:
e0:57:bd:14:e2:47:06:a4:e5:c3:30:e6:71:23:32:
de:4e:68:3c:19:9e:65:c2:cc:7d:59:fc:2b:1c:1b:
10:29:5a:ad:c6:92:4d:11:3b:df:ff:15:3e:8e:56:
0d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:25:D7:50:3D:CC:15:7A:64:6F:74:FC:DA:2C:B1:DF:02:21:D5:5A
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:46:22:18:bd:58:fa:9a:91:13:9f:40:48:71:62:72:4d:fd:
99:e1:bb:d8:d8:d0:af:81:59:77:cd:ee:af:23:e3:5e:b3:0a:
72:5c:c6:43:df:4e:c0:bc:5e:09:58:3d:e8:1f:a8:b3:ac:7e:
3c:c3:22:0b:26:f7:c4:a2:82:8a:5c:3a:cd:d6:70:01:3b:6a:
3d:fd:3e:ad:b4:3e:ac:b3:c1:a4:c7:a4:91:dc:23:9b:47:db:
5e:0c:09:d4:49:1d:9c:e7:7e:f5:96:47:b3:d0:21:98:27:ad:
df:06:eb:6d:15:3c:0d:08:ca:ea:73:ef:c8:bc:14:2c:71:ac:
37:08:45:28:50:6f:37:d4:32:b2:78:a1:96:c5:39:6a:8c:70:
c9:31:73:69:09:25:e8:7d:02:53:31:82:4c:17:b8:b8:a4:c9:
33:65:b1:d6:2b:31:14:c2:f0:ca:f6:48:c6:3b:e3:50:d2:06:
4c:bd:79:53:27:fd:39:b9:8b:9e:3a:bb:db:45:b6:1a:7a:b0:
45:6c:e1:a1:ac:9e:62:a2:bd:86:39:08:06:0f:5e:75:71:af:
a4:46:f3:77:40:78:ee:05:c7:99:55:d5:3f:bc:c0:be:01:53:
96:73:7d:34:47:4a:a5:e4:e3:ce:94:28:9a:d5:7a:a9:77:94:
16:a9:70:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 10:56:14 2026 by rpki-client