Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
File: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft (raw, json)
Hash identifier: D2k0dn2G7DtfvN7SVGimAGP/JPvx2PNcoOtxRDwd+x8=
Subject key identifier: C3:48:4F:1C:DF:B8:FF:31:E4:28:FB:88:AF:DB:C7:2F:4B:62:AF:60
Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53
Certificate serial: 01A0D94CBEBDE682687FCEB454E770E92E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
Manifest number: 17D8
Signing time: Fri 25 Sep 2026 16:01:20 +0000
Manifest this update: Fri 25 Sep 2026 16:01:20 +0000
Manifest next update: Sat 26 Sep 2026 16:01:20 +0000
Files and hashes: 1: YeKtEsYaTNZoSHj3N6MlBsotJrQ.roa (hash: twTw0giPhGzIQ/V/HMZrgKRp++mkr21dxckWNhdSudg=)
2: ielQr4EC94tydWptb7Zy7oQJTlg.roa (hash: IK1qVKo+95L3ssLme0pcM7macPsa/yBGCJukgetUuXk=)
3: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl (hash: JUoRgN8Fjun7qIXP2IVDnyYb4YabAql5HtshPIZkGiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:be:bd:e6:82:68:7f:ce:b4:54:e7:70:e9:2e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53
Validity
Not Before: Sep 25 16:01:20 2026 GMT
Not After : Sep 26 16:01:20 2026 GMT
Subject: CN=c3484f1cdfb8ff31e428fb88afdbc72f4b62af60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:0b:34:0b:79:8e:2b:37:5d:c5:18:e1:0c:
62:e5:0d:f4:6a:31:eb:64:d1:e4:ee:95:80:5c:52:
09:a8:d0:f1:13:df:72:d2:5b:82:26:25:48:9e:68:
b1:7a:f7:63:f3:ff:d2:b4:a4:55:76:86:e9:ca:c8:
93:a9:48:fe:c5:73:bc:21:ae:5b:82:b4:35:73:81:
1f:bd:55:3f:5a:a7:23:01:ff:de:95:d2:ec:2f:96:
e7:19:5e:6e:fa:a9:78:41:37:da:5a:ac:10:a1:e6:
8d:18:2d:6b:ef:26:5f:5b:91:42:38:67:c9:6b:ca:
09:8b:9b:83:88:8a:66:68:3a:d2:8f:d5:5f:c1:88:
c5:4d:7d:8e:75:b4:48:30:0f:e1:49:0b:3b:da:61:
b5:02:bf:a5:de:bb:f4:75:76:38:29:1f:98:28:4a:
75:bc:eb:08:bf:ff:6c:81:a1:77:38:9d:7d:2e:7f:
b9:d9:01:75:52:3f:9f:dc:ad:5d:2e:7d:e7:c3:87:
58:2a:26:21:2d:0e:fd:5c:94:47:26:39:40:aa:2d:
59:9e:a2:64:20:c3:b6:d5:ed:88:db:af:50:e2:de:
15:90:75:75:13:6f:4f:06:8b:12:94:ab:14:36:36:
06:13:1e:45:70:d7:dc:b6:f5:86:46:1c:7f:87:5b:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:48:4F:1C:DF:B8:FF:31:E4:28:FB:88:AF:DB:C7:2F:4B:62:AF:60
X509v3 Authority Key Identifier:
keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c3:09:09:79:b9:61:fa:38:5d:d7:ee:ca:d8:ad:5c:d4:57:
b8:dd:9b:15:5f:a6:ba:40:67:8d:7e:78:2e:7a:5d:a9:36:23:
9e:8d:f1:19:79:83:83:00:8d:9e:15:27:ed:96:cf:ea:c6:15:
18:a8:b8:00:3c:10:a3:08:b3:db:d7:f4:d7:b1:c2:4a:6a:c3:
21:1b:bb:c5:81:07:c0:fc:dc:8b:4c:9c:56:37:8e:33:6a:25:
3b:5b:6d:fd:b2:38:87:5b:c4:e3:00:73:36:cf:4a:f7:c5:05:
e9:cc:70:5a:c3:a4:55:1e:15:b6:88:b9:16:a5:de:fc:ab:41:
44:9b:62:e3:42:6d:0f:b2:a0:ed:c9:51:42:89:fd:48:32:28:
01:cd:28:fc:ae:01:71:36:fe:04:be:e3:ce:a6:99:27:ea:57:
39:be:2f:01:d6:7d:89:c7:01:de:28:de:ed:45:4e:68:1a:84:
5e:9b:4a:f6:ce:1a:b5:36:fd:f3:82:ef:da:73:4d:36:2c:01:
cc:b7:14:8b:1b:46:d3:4c:c2:9c:22:c1:59:62:47:aa:31:b9:
49:5c:7b:e3:63:4c:15:80:e9:f8:20:98:3f:bc:45:54:02:92:
8d:ad:32:ec:dd:c8:0d:c7:6d:a0:34:d7:48:a1:9a:a3:70:e5:
8b:fd:61:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:06:05 2026 by rpki-client