Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
File: tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft (raw, json)
Hash identifier: noJhTrBqulvxrCl0fQreGUL5B7ZyjW1j96Vcn2AlQGk=
Subject key identifier: A5:1E:D4:79:32:02:DF:83:91:6A:28:AC:3F:C1:EF:EE:C0:DB:96:0F
Authority key identifier: B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77
Certificate issuer: /CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
Certificate serial: 01A10B1420E4BAF9C2D9B47502BB4263493D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
Manifest number: 10BB
Signing time: Mon 05 Oct 2026 08:00:30 +0000
Manifest this update: Mon 05 Oct 2026 08:00:30 +0000
Manifest next update: Tue 06 Oct 2026 08:00:30 +0000
Files and hashes: 1: dIqmIrGGl8FI-sOwGOw90e9FkJY.roa (hash: ux/S4urJBgHoaCGluZkTkGPr6Fq78RqIkr3zENS3Pqk=)
2: tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl (hash: NwuJ5Ml8q49Z6TbsS+NA1+vPP38mpkLu9LlBywApcdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:14:20:e4:ba:f9:c2:d9:b4:75:02:bb:42:63:49:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
Validity
Not Before: Oct 5 08:00:30 2026 GMT
Not After : Oct 6 08:00:30 2026 GMT
Subject: CN=a51ed4793202df83916a28ac3fc1efeec0db960f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:82:14:06:e6:84:8d:92:73:97:c0:ca:c3:bd:
b7:31:e7:6b:cc:ac:9b:9c:57:6c:e9:9a:e7:fa:27:
d3:d3:40:38:62:13:6a:46:f4:ab:4f:0b:63:76:85:
b0:84:f5:3c:9d:ed:78:5c:af:14:8f:d8:7c:76:63:
e4:d4:a7:49:5a:a9:3b:0b:3a:e2:67:00:8f:79:b3:
8e:40:62:87:6d:68:6e:c7:01:cf:b8:5d:ad:01:54:
61:ae:48:a5:1f:be:b5:9f:fb:a5:4c:25:d7:22:7f:
db:85:cd:da:54:e0:02:3b:35:6c:79:89:18:95:63:
83:92:42:58:36:c8:60:c2:9d:01:55:6c:35:79:bd:
67:9c:e6:fe:ba:2c:e1:67:a2:b6:0c:31:23:68:29:
39:6a:49:64:b6:7e:46:6a:92:67:2e:04:bb:75:6e:
43:58:f5:ed:4f:be:08:5b:89:03:85:40:f8:c6:5a:
93:c0:b5:84:07:d0:78:51:66:42:e3:f0:fd:b4:b8:
28:13:38:12:0d:01:8f:1e:91:ac:54:41:74:ec:06:
ca:a0:8a:9d:e0:42:65:f4:31:03:d1:09:6d:f0:63:
01:ec:bf:35:12:3b:12:56:04:59:73:cb:0a:c1:93:
9a:5d:ca:49:f7:16:28:26:31:ab:20:5e:39:11:25:
ca:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1E:D4:79:32:02:DF:83:91:6A:28:AC:3F:C1:EF:EE:C0:DB:96:0F
X509v3 Authority Key Identifier:
keyid:B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b6:b9:ef:d4:53:c2:a9:27:e8:7e:a5:a9:dd:de:53:88:a9:
34:f3:0e:43:72:08:8f:b3:6e:2c:9b:6b:91:3e:a4:ce:9f:9a:
c4:f8:12:56:d9:3b:ba:73:1c:99:bb:8e:ff:23:d8:1c:fd:fb:
b9:6a:13:bd:79:fa:51:ad:96:2e:fc:27:02:fd:ec:04:20:fb:
3a:cb:d1:b3:b7:79:3c:aa:ba:94:17:79:4b:f4:9d:3c:fd:d9:
1b:77:6e:33:46:8d:50:20:e3:71:27:0c:fe:36:11:f6:03:6d:
c4:98:46:91:01:d2:2f:db:91:f3:59:0a:db:92:ac:27:fd:83:
b9:80:1e:0c:56:86:28:4d:bd:9d:f7:61:54:a4:70:39:ff:e7:
13:0e:c4:a2:c7:8b:77:a4:bb:f8:18:57:0e:48:0b:6c:7f:08:
15:3c:73:f7:63:a0:b3:22:2d:7b:dd:95:71:d2:e2:b0:7b:59:
19:8a:2c:20:38:69:46:38:6f:08:22:13:ea:15:4e:97:64:37:
a6:43:ff:b3:c0:06:cc:38:a2:81:20:1a:62:38:db:42:5f:c2:
1c:31:33:79:e7:0c:6a:20:71:1e:69:d9:9c:71:3c:fc:68:14:
ff:8c:ed:01:1c:24:30:19:16:fc:38:4a:9a:4f:af:a2:97:45:
10:c4:12:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:15:36 2026 by rpki-client