Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
File: tIvY7E4wHJ57CkO-8PPd06RTFVo.mft (raw, json)
Hash identifier: i545cxDYcKKbs01FGjVXFGcO3NZQvyLbqMezpEZXXvM=
Subject key identifier: F3:37:22:0A:19:80:54:1E:20:2E:FF:53:FC:A4:F4:71:EF:5D:22:1B
Authority key identifier: B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A
Certificate issuer: /CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a
Certificate serial: 019CAE35F3D7153DF4207B47C0B8A9464B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
Manifest number: 0509
Signing time: Mon 02 Mar 2026 11:01:37 +0000
Manifest this update: Mon 02 Mar 2026 11:01:37 +0000
Manifest next update: Tue 03 Mar 2026 11:01:37 +0000
Files and hashes: 1: Rlz6gCewQxlK_6mdm3r5wcJWGug.roa (hash: xyUcAmIySIN4cusVT6aDXyeoMypfFm7A4QhLU41m4OE=)
2: tIvY7E4wHJ57CkO-8PPd06RTFVo.crl (hash: fIF5HGKB3KKvP10NGNUZ0IJ3Y3wcHZ0pw0YTKtmlzro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:f3:d7:15:3d:f4:20:7b:47:c0:b8:a9:46:4b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a
Validity
Not Before: Mar 2 11:01:37 2026 GMT
Not After : Mar 3 11:01:37 2026 GMT
Subject: CN=f337220a1980541e202eff53fca4f471ef5d221b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:17:ae:22:95:56:8c:41:52:8b:b1:69:9e:ce:
df:a3:e1:af:9c:3e:b6:a8:a8:70:2a:5e:90:77:de:
f5:2e:5f:af:0c:7f:c6:2d:5a:00:ef:f6:9b:4b:16:
bf:41:03:3f:55:cf:f7:6c:77:e0:35:37:c3:ce:f0:
a6:63:55:6f:30:c3:14:eb:f8:ba:b8:ab:5b:a1:1f:
fb:29:2a:48:de:64:c9:b4:fe:54:bf:8d:b1:3f:db:
cb:f4:16:a8:3c:4b:6f:7a:99:e3:43:3f:0d:04:5e:
f0:bd:42:4d:2c:07:fb:00:7a:6a:57:c8:ca:3b:d2:
c2:65:fc:be:33:48:38:29:d2:c3:c6:57:62:bf:a2:
2e:58:f6:01:bb:df:85:08:67:01:ac:d3:08:b3:f9:
77:12:bc:6e:2a:6b:76:c1:06:e4:4c:86:5a:c0:71:
46:9a:cc:e4:f3:86:96:a6:35:fb:5b:56:2c:93:11:
33:d2:e1:80:8d:19:42:d4:a6:74:b4:dd:64:1f:b2:
f3:bf:5c:ef:59:8f:79:e8:ef:e0:b1:9b:ae:f0:75:
a1:cf:24:28:c2:4c:26:8e:32:1b:98:70:eb:61:9d:
e1:b8:ce:77:27:d4:5e:e6:4b:46:56:8e:54:52:4e:
93:9c:9d:b2:0b:0c:85:8a:4b:62:d0:56:23:6e:67:
21:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:37:22:0A:19:80:54:1E:20:2E:FF:53:FC:A4:F4:71:EF:5D:22:1B
X509v3 Authority Key Identifier:
keyid:B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8d:e3:d0:f6:ba:8a:f4:d3:90:63:d6:12:7d:cd:c4:32:67:
38:96:1a:b7:91:da:bd:78:9b:a7:ad:6e:54:a7:d9:61:29:ce:
11:87:65:cd:ce:2b:c4:22:90:11:a6:78:68:e3:e9:f6:c2:e9:
c6:e9:73:97:e0:d6:de:af:7a:80:fa:5c:a6:af:ca:ed:bb:01:
07:e8:fe:de:1e:2e:3e:11:cf:84:e3:c2:ca:2e:36:81:b7:be:
30:ea:8a:92:ef:9b:79:f0:ff:61:4f:00:74:1b:ce:62:1c:23:
65:a6:c7:7d:5a:e3:10:a9:9b:ad:c1:84:58:6b:b3:ff:68:2e:
8d:59:9d:a3:8b:1c:92:ed:62:97:18:f4:c0:f4:59:7d:7c:3a:
dc:3b:c5:c3:7e:8e:04:d1:c4:0f:d2:e6:c9:8a:85:92:a1:4f:
88:f0:ff:c1:65:21:56:ed:19:41:03:f1:3e:5c:02:6d:44:23:
d3:d0:09:b4:75:93:f2:2e:79:d8:e7:e2:58:32:53:30:46:ea:
0f:b8:34:c6:b8:19:2b:a4:3f:69:fa:97:b4:63:fe:13:24:82:
9f:cb:bc:83:2a:71:b0:78:49:54:02:a9:6c:7a:f7:4a:2e:cc:
2f:ad:5a:a3:03:1f:52:53:c8:a0:e1:61:b3:fb:07:f5:d2:e5:
ca:d0:9d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:39:24 2026 by rpki-client