Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/35126d-7fcb-44a7-a029-a2da267a3881/1/tNvJdb8nm0qOGFfc66Tfo8oYXEI.mft
File: tNvJdb8nm0qOGFfc66Tfo8oYXEI.mft (raw, json)
Hash identifier: KGgokH5gdU0U2woCU8htsESkLhbo4mxBxxEIBzc+iZk=
Subject key identifier: 27:29:47:E8:DE:E6:B5:27:23:02:28:C2:54:E3:94:EE:31:D7:15:14
Authority key identifier: B4:DB:C9:75:BF:27:9B:4A:8E:18:57:DC:EB:A4:DF:A3:CA:18:5C:42
Certificate issuer: /CN=b4dbc975bf279b4a8e1857dceba4dfa3ca185c42
Certificate serial: 01A0D9BB0DD76F99094F4C37B49C614B3A07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNvJdb8nm0qOGFfc66Tfo8oYXEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/35126d-7fcb-44a7-a029-a2da267a3881/1/tNvJdb8nm0qOGFfc66Tfo8oYXEI.mft
Manifest number: 0D
Signing time: Fri 25 Sep 2026 18:01:49 +0000
Manifest this update: Fri 25 Sep 2026 18:01:49 +0000
Manifest next update: Sat 26 Sep 2026 18:01:49 +0000
Files and hashes: 1: SydOZR_hUHXUbU5dpEAWRzOO5Fg.roa (hash: yhkIP65AmE7hND02w81gIr30sWjkyRR90IBNtd02wYs=)
2: tNvJdb8nm0qOGFfc66Tfo8oYXEI.crl (hash: lBLoHSn84xNOWUmYvNPCJNQYVyJ+Hvy2vwZgW0HMUiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/35126d-7fcb-44a7-a029-a2da267a3881/1/tNvJdb8nm0qOGFfc66Tfo8oYXEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/35126d-7fcb-44a7-a029-a2da267a3881/1/tNvJdb8nm0qOGFfc66Tfo8oYXEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNvJdb8nm0qOGFfc66Tfo8oYXEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:0d:d7:6f:99:09:4f:4c:37:b4:9c:61:4b:3a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4dbc975bf279b4a8e1857dceba4dfa3ca185c42
Validity
Not Before: Sep 25 18:01:49 2026 GMT
Not After : Sep 26 18:01:49 2026 GMT
Subject: CN=272947e8dee6b527230228c254e394ee31d71514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7a:79:27:f4:15:7d:ae:51:e9:67:e5:3a:02:
df:9f:f6:81:ce:94:63:44:56:29:c7:18:b9:63:be:
26:8c:91:a9:8c:2d:1c:a8:ba:28:5b:99:4b:8e:3a:
ed:e1:ba:85:dc:7d:ed:5c:84:03:bc:82:97:b7:8d:
c0:e5:70:1a:72:09:a1:61:e0:44:75:86:bb:f2:c7:
ae:f3:8a:18:5c:e0:64:31:0c:46:99:6c:35:0a:5c:
cb:e2:a9:6b:1c:b7:9d:13:8e:b4:13:88:a6:12:54:
7e:21:22:4e:40:20:b3:6d:40:8c:74:a9:5a:3b:5c:
30:1e:a8:70:02:5f:fe:3c:af:ef:0a:25:ab:9b:e7:
31:dc:1b:58:9d:db:fc:1b:11:ea:0f:16:73:3f:02:
ea:82:9f:8f:a7:48:d8:67:1b:c7:5d:e3:e5:ef:09:
25:c5:26:9e:66:07:25:c1:32:08:10:2b:b6:fe:bc:
21:27:fc:f3:62:c2:b5:0a:4b:a3:f8:ee:9c:fc:16:
e6:72:8b:39:68:35:7a:94:92:0c:c0:90:48:9f:5d:
f5:57:05:a5:12:6c:8f:f7:62:11:7e:87:e4:28:da:
89:d8:88:fe:a1:5e:c4:27:07:a0:3e:09:92:31:10:
ac:5d:1c:ca:6c:90:d4:6e:98:36:ab:54:92:c6:31:
88:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:29:47:E8:DE:E6:B5:27:23:02:28:C2:54:E3:94:EE:31:D7:15:14
X509v3 Authority Key Identifier:
keyid:B4:DB:C9:75:BF:27:9B:4A:8E:18:57:DC:EB:A4:DF:A3:CA:18:5C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNvJdb8nm0qOGFfc66Tfo8oYXEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/35126d-7fcb-44a7-a029-a2da267a3881/1/tNvJdb8nm0qOGFfc66Tfo8oYXEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/35126d-7fcb-44a7-a029-a2da267a3881/1/tNvJdb8nm0qOGFfc66Tfo8oYXEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b6:c7:40:f2:a4:78:40:56:6b:d1:86:58:83:f3:0f:a8:09:
0d:e2:ce:75:9a:30:46:77:40:15:f1:d9:c6:90:85:12:46:9b:
91:62:05:46:fd:23:75:1b:ec:ec:2e:91:28:df:47:1c:60:b6:
8f:a9:ca:b1:8f:24:d3:40:9d:0a:00:5e:11:a6:b6:30:02:33:
45:18:f7:bc:2e:76:21:d6:b0:eb:36:29:d7:c7:b1:44:6d:92:
47:84:fa:5e:15:04:93:b9:89:15:29:4c:9c:07:bd:03:ad:9e:
4e:2c:20:9c:a4:d8:a1:95:ff:57:f9:01:ea:52:1f:bc:0c:db:
3e:83:bb:91:b6:2c:16:37:d3:fc:45:b1:6c:e6:39:76:69:64:
76:76:f5:a8:50:7f:73:71:95:00:04:47:ff:93:eb:a5:c4:e0:
bc:ef:a1:13:df:76:9e:89:bc:e7:27:67:09:fa:cd:cf:fe:75:
bc:15:5b:29:02:d2:91:57:1e:25:9d:59:5a:87:71:34:3a:1b:
29:5a:69:dc:63:a0:db:ac:64:7a:13:9f:dc:aa:70:d8:b7:c5:
98:1d:f8:fd:c9:73:e0:4e:ca:0e:82:fa:d1:cc:f6:84:24:c7:
3d:37:69:62:1d:f4:e2:15:3a:5b:be:2a:57:40:6f:13:02:ba:
16:5c:07:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:18:58 2026 by rpki-client