Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
File: ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft (raw, json)
Hash identifier: aa7edaC/40LYkD29whUitZ+dLtxDu6NHvgzj7KRNlpI=
Subject key identifier: D2:E7:11:D8:9E:7E:8D:28:76:9F:64:F1:BE:B1:B6:7A:B8:BB:12:37
Authority key identifier: B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78
Certificate issuer: /CN=b62dd60548b67cc41e67b6a616a12ec53bf42978
Certificate serial: 019CAAC645C2B64D2C4B461784D24642037D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 19:00:46 +0000
Manifest this update: Sun 01 Mar 2026 19:00:46 +0000
Manifest next update: Mon 02 Mar 2026 19:00:46 +0000
Files and hashes: 1: cR-Inx2FPQAFHMTBAFcIV-g96qI.roa (hash: /WX3k+99dSoxI5A3FmHr7z1BH//wZrnLXz4X48FtN/8=)
2: ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl (hash: I+JHPsXoekiT/w+YqzcxoHOU61rU0VVGVBIA6SYgMVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:45:c2:b6:4d:2c:4b:46:17:84:d2:46:42:03:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62dd60548b67cc41e67b6a616a12ec53bf42978
Validity
Not Before: Mar 1 19:00:46 2026 GMT
Not After : Mar 2 19:00:46 2026 GMT
Subject: CN=d2e711d89e7e8d28769f64f1beb1b67ab8bb1237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7a:58:eb:9a:6e:89:92:e8:2b:16:2e:6a:55:
7c:d0:16:00:d3:95:36:e2:0d:14:10:ec:c7:7f:04:
e5:66:cc:81:2a:16:b0:ed:67:56:65:4e:22:41:0f:
41:45:8c:9c:bb:2e:22:22:40:18:f1:b8:5e:e3:ac:
de:30:56:05:c8:35:df:d1:c3:50:07:2b:33:b8:02:
e9:53:d8:13:c4:92:06:56:e8:4a:49:f1:9d:c3:c0:
3d:58:9d:5f:cf:68:4c:d2:c4:0d:4d:7a:a8:f7:0f:
f3:03:aa:ce:84:82:ab:16:f2:3d:a2:b7:d2:47:7b:
86:f3:b5:f1:f0:38:47:1d:db:2a:28:ce:25:e8:12:
8d:bf:71:f1:cb:c3:91:ab:b1:b3:f6:1a:ae:25:c9:
c4:a0:8b:d4:d0:19:b3:ce:18:d7:82:1a:85:5e:a4:
44:51:0e:b7:29:ca:95:62:d0:28:47:10:16:4c:82:
29:6a:2a:dd:a1:f6:14:c7:c8:42:32:3d:4c:7f:f0:
c3:ed:f1:cf:ba:8b:de:9e:2c:ac:ff:a0:7f:c7:64:
9e:4e:69:56:db:48:8f:c3:e7:1d:80:e8:27:27:95:
c8:42:f0:f4:d3:97:2e:bd:09:d9:f1:e1:ea:aa:02:
90:72:76:af:86:52:bb:56:2d:e9:af:23:ab:2e:bd:
36:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E7:11:D8:9E:7E:8D:28:76:9F:64:F1:BE:B1:B6:7A:B8:BB:12:37
X509v3 Authority Key Identifier:
keyid:B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:4d:a7:74:71:5b:d3:31:7c:18:43:f9:cc:f3:44:f5:da:cd:
49:c0:40:c3:f2:e3:2b:29:b9:93:87:23:c5:07:4e:59:dd:b1:
2f:2e:e2:ec:f4:34:b4:9d:c6:95:a3:aa:1b:71:18:8e:fa:f3:
c9:b3:81:12:b7:54:59:a2:60:ff:6b:da:4a:ce:ec:55:6a:1c:
33:88:f1:04:ea:7a:1f:33:16:d3:59:1e:6e:3c:ae:11:c4:2d:
a8:d5:fe:a9:cc:d0:e6:2d:a6:53:52:4c:24:f7:42:e3:98:87:
37:3b:0a:a8:82:d2:3d:b4:5c:dc:05:c1:32:30:43:9e:92:7c:
10:03:8d:67:1c:71:96:db:bf:a5:95:87:a4:76:22:61:f8:d2:
e4:a7:99:e3:9a:77:98:c7:8e:37:20:42:8d:c7:34:e4:e2:48:
33:0f:38:e0:a4:e6:e4:b7:50:92:e3:29:6f:89:91:19:4c:e9:
8f:c0:38:83:d0:8d:ba:cf:a6:6a:e3:df:41:28:c6:c1:e8:b4:
6f:1b:a7:7d:fa:31:88:cf:6e:df:db:17:07:44:4d:cc:cc:32:
e2:4b:a2:d5:63:a4:f6:ba:f1:35:81:63:30:3f:5b:8c:2c:41:
cf:8d:8b:e4:3f:37:0d:49:da:dd:ef:61:d3:6c:5f:0c:1f:2f:
83:50:50:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:48 2026 by rpki-client