Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
File: tJvYTaF5l8uyhq-QIqsuBboItEI.mft (raw, json)
Hash identifier: aiqEDhM6/irJILFaQ/0RS5feReS119MzBoiRVlxMEhM=
Subject key identifier: E1:04:E0:2E:66:FF:FF:B8:DA:54:D3:8B:04:4A:69:6C:8A:E6:20:0A
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Certificate issuer: /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial: 019CAF48A3299A345B4D9FDC23103178B538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
Manifest number: 13A9
Signing time: Mon 02 Mar 2026 16:01:38 +0000
Manifest this update: Mon 02 Mar 2026 16:01:38 +0000
Manifest next update: Tue 03 Mar 2026 16:01:38 +0000
Files and hashes: 1: PTqqtT4_tP0RAOhqpaeaV7qFsoM.roa (hash: gS+7X+RhiaD/Wpkqye3btlKeUsU6cdg4vX6kC9nPKmY=)
2: Zx8NV8g2SZTn17r6ny-ihGOw0zg.roa (hash: oDKvuRyprpCre1JRHHQFdko0hYMR6EjsyiF9Shy7Ous=)
3: o_4znoNuO2BlgKbgpDwRbvS5e9M.roa (hash: UG/yd3TL4Rh6gQUIGrMAEttNV+zSF20Hc2Z6UKPMWAc=)
4: tJvYTaF5l8uyhq-QIqsuBboItEI.crl (hash: jfjwDx20DkDBiFLoAkMZATomzh++mgXaurSOjSf6A+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:a3:29:9a:34:5b:4d:9f:dc:23:10:31:78:b5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Validity
Not Before: Mar 2 16:01:38 2026 GMT
Not After : Mar 3 16:01:38 2026 GMT
Subject: CN=e104e02e66ffffb8da54d38b044a696c8ae6200a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:14:3a:65:ba:61:83:66:a0:8e:33:1f:68:17:
fa:c9:18:02:66:10:86:54:da:0b:a4:35:ac:31:41:
f6:db:49:98:74:83:58:ce:d1:04:94:e4:4c:ca:9a:
a8:55:17:ec:09:db:49:d5:78:3a:2b:73:4e:51:fd:
3d:b5:4c:4c:41:0e:38:4c:4b:94:e2:ae:eb:63:1d:
1c:ed:e1:04:08:70:47:79:83:f0:e9:34:71:b4:4d:
23:48:fe:d8:ec:c5:00:f7:b2:17:e8:e8:c2:f3:9b:
b5:37:12:5e:43:07:38:fa:fb:8b:5c:c4:22:2d:54:
25:45:d4:3a:0f:5d:09:4d:43:d3:b2:1e:69:00:61:
42:ce:fa:7d:17:6e:00:2a:eb:83:99:dc:5c:78:9a:
7e:d1:5b:e1:91:f1:e3:fa:bf:eb:15:f9:0f:c1:9d:
99:68:86:cd:86:e3:0e:0a:7b:ea:a0:84:3f:f8:80:
b3:8a:4e:48:8d:49:a5:84:91:d5:2b:f7:af:22:b2:
d1:ff:af:2a:af:6f:77:af:72:39:5d:87:e8:5f:26:
d6:17:63:5f:ec:68:a7:2f:fc:e1:ba:b2:99:7f:db:
99:76:22:cd:ae:d7:7d:a2:0a:90:6e:80:ea:ef:8c:
85:fc:cb:93:bc:05:cf:f7:54:26:1c:2d:32:71:55:
9f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:04:E0:2E:66:FF:FF:B8:DA:54:D3:8B:04:4A:69:6C:8A:E6:20:0A
X509v3 Authority Key Identifier:
keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ae:69:d1:5c:3f:c7:7f:da:1b:d5:ec:d4:2a:bc:b7:0a:db:
95:9c:72:17:6d:ee:93:a4:c7:ee:05:d3:93:dc:80:9e:66:bf:
d4:ad:33:ca:94:e5:cd:af:51:83:6f:88:78:74:d9:90:d6:6f:
6f:e6:6f:2f:da:85:48:e2:8a:6e:fd:cd:3a:4e:89:17:ec:4b:
39:f3:e2:d2:d6:ab:4e:f6:e5:4b:6c:de:40:dc:b1:25:3f:e4:
e9:1f:1e:02:bc:72:31:8f:c3:68:f9:db:61:9d:44:fa:c5:2f:
5d:55:73:3d:28:1f:7a:da:4d:54:76:66:56:b8:29:07:76:7a:
9a:72:ce:60:d8:38:ce:c8:18:51:96:d3:62:0d:b7:05:98:df:
25:75:98:6d:82:33:1c:af:1d:d8:13:a3:59:b0:5e:fc:10:8c:
b8:7b:c9:6d:98:0d:79:e5:ce:0c:cb:a9:eb:b8:e8:76:79:26:
6f:db:6b:3d:0c:86:b1:0e:d2:b5:4d:d9:3d:26:14:e3:3c:d0:
d8:bb:eb:c4:00:44:b8:15:7d:cd:75:20:72:ef:17:4e:a0:5a:
fe:83:56:23:7e:86:58:95:70:52:09:5e:68:da:03:2d:b8:c5:
c1:c2:45:71:e3:21:9e:33:be:30:94:dc:85:40:f6:65:2d:88:
c4:6f:7c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:21:36 2026 by rpki-client