Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
File: tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft (raw, json)
Hash identifier: Xyp5dG6Xx6W77Bf2i3TXBWMyhYXrnUvfUd1++U1dh34=
Subject key identifier: EF:E9:6D:D1:5F:25:38:31:FD:C4:7A:6C:43:40:65:84:62:B9:5D:66
Authority key identifier: B4:50:4D:28:E6:7A:21:EC:96:D9:5B:27:46:3E:C0:30:3F:E1:76:2C
Certificate issuer: /CN=b4504d28e67a21ec96d95b27463ec0303fe1762c
Certificate serial: 01A1062572703EC3B655362F9EC3EA7E5793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
Manifest number: 0101
Signing time: Sun 04 Oct 2026 09:01:19 +0000
Manifest this update: Sun 04 Oct 2026 09:01:19 +0000
Manifest next update: Mon 05 Oct 2026 09:01:19 +0000
Files and hashes: 1: tFBNKOZ6IeyW2VsnRj7AMD_hdiw.crl (hash: Eh4CpM0SEMrQoORTE3nw1nEWorWpAIctTy1YZhF5uOc=)
2: vJbwHPz8RQ4zs2gU1mqro7zoibU.roa (hash: sBjiZn8iplUkAmpK3IUiwbDEIQyYz8gkgjFlOTL9wqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:25:72:70:3e:c3:b6:55:36:2f:9e:c3:ea:7e:57:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4504d28e67a21ec96d95b27463ec0303fe1762c
Validity
Not Before: Oct 4 09:01:19 2026 GMT
Not After : Oct 5 09:01:19 2026 GMT
Subject: CN=efe96dd15f253831fdc47a6c4340658462b95d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7b:09:d7:7a:5d:bd:02:d0:f6:21:55:f0:73:
6a:9c:7e:e8:17:23:5a:a1:e5:92:4d:e4:8d:ad:c5:
2a:d0:e4:f9:b7:16:f2:4d:04:02:56:f9:72:36:2b:
27:98:48:ca:60:ee:b0:12:8a:e3:d7:1b:b6:f1:60:
51:b3:66:66:02:68:15:94:de:33:7c:8f:f4:80:ae:
4c:a9:e0:eb:89:3d:03:ca:10:eb:a8:8e:67:4d:31:
2b:78:8d:ef:d9:cc:98:e9:75:99:45:20:60:a0:00:
1c:dd:b2:9f:90:ca:b3:dd:28:5f:6e:ed:67:38:9c:
a8:9d:79:ba:bb:af:fa:9c:f0:48:80:b9:2e:ac:d8:
ec:05:c3:40:ad:83:3d:82:af:04:83:60:22:b0:30:
57:0e:15:50:21:15:ce:d4:8f:f3:d7:5b:97:7b:52:
06:79:2a:82:04:10:60:dc:ef:ea:09:6e:e8:e8:5e:
0e:e5:3c:b5:7b:a5:5c:b5:2b:09:e2:09:40:42:b5:
3c:66:b0:7c:d0:6b:6b:f5:76:15:49:6f:ab:2c:14:
87:e3:b3:f3:c5:61:0a:57:f2:36:e0:2e:bd:ab:97:
df:cd:23:44:51:a9:60:7f:71:8a:da:24:8e:0a:cd:
91:a0:0c:4a:79:e6:cf:a2:0e:45:ba:fd:30:cd:e5:
f5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E9:6D:D1:5F:25:38:31:FD:C4:7A:6C:43:40:65:84:62:B9:5D:66
X509v3 Authority Key Identifier:
keyid:B4:50:4D:28:E6:7A:21:EC:96:D9:5B:27:46:3E:C0:30:3F:E1:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e8:4a:90:32:50:76:de:95:44:9a:f3:71:6c:46:ce:58:0e:
28:f2:98:bd:62:39:37:bc:87:33:2f:e2:eb:a9:0b:dd:37:83:
54:97:5f:10:ea:4f:bd:80:c9:0b:90:51:4b:a3:15:5e:e4:0b:
b7:05:8b:5f:0a:c6:9a:d8:54:87:2f:b3:2a:06:8d:22:24:c9:
26:76:e8:16:e9:8f:c9:2b:2b:de:f6:b2:21:db:c3:1e:77:e9:
05:eb:e8:2a:9e:d9:f9:3a:86:47:cf:37:43:61:ee:1c:4a:d9:
1a:ab:f8:bb:f0:ee:cc:db:04:f8:73:ea:ef:78:a3:d2:de:d3:
25:0e:35:a0:f4:e2:30:82:3f:88:b6:77:ac:84:a2:ee:2a:10:
0f:b6:a7:03:df:53:95:ae:56:cc:9e:13:90:0d:6c:53:a4:15:
92:8a:eb:39:d9:22:d9:48:44:9a:66:b0:cd:38:28:a2:2a:09:
2b:4a:ae:41:6b:f8:e1:b5:c6:4c:d2:14:d1:c2:72:31:f6:14:
c0:96:82:b1:2d:22:3b:b4:27:fa:27:8c:ec:37:e6:75:35:bc:
44:2e:96:92:f0:92:cd:d2:40:85:71:10:6c:e8:6c:4f:df:98:
38:97:de:4a:83:73:e8:03:54:cc:c8:15:d3:35:93:59:92:a7:
84:44:f8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:06:15 2026 by rpki-client