Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
File: tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft (raw, json)
Hash identifier: XKymaASGxrsb0ZlgIG5H/EsnZN6WMijMpq4iSNZUuYI=
Subject key identifier: 2C:5E:9F:CB:DB:B8:C9:B5:C6:AB:DA:83:5E:1F:E3:F3:04:5F:8D:8D
Authority key identifier: B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
Certificate issuer: /CN=b443b3486de7826fd6b0e2aec026597b6207b373
Certificate serial: 019CAB3415E1F07E3C06C14CE622B40812E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
Manifest number: 08AA
Signing time: Sun 01 Mar 2026 21:00:43 +0000
Manifest this update: Sun 01 Mar 2026 21:00:43 +0000
Manifest next update: Mon 02 Mar 2026 21:00:43 +0000
Files and hashes: 1: sy5oGQjck-d2g9h80CULm1W8bto.roa (hash: emX5coGh9f+3oxTyFscmv5YiBYISS6FAufBHJnJSvLA=)
2: tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl (hash: 7R8QgDWsVdeuiCXPzGrf0Nhq+uEti3GGvMbnMB7+tEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:15:e1:f0:7e:3c:06:c1:4c:e6:22:b4:08:12:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b443b3486de7826fd6b0e2aec026597b6207b373
Validity
Not Before: Mar 1 21:00:43 2026 GMT
Not After : Mar 2 21:00:43 2026 GMT
Subject: CN=2c5e9fcbdbb8c9b5c6abda835e1fe3f3045f8d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a1:32:31:dc:ef:74:17:14:ea:f7:9c:b7:6e:
09:f1:96:aa:66:1f:12:f9:39:e0:25:54:f2:70:d4:
d3:6e:a5:ac:31:2a:fd:b4:b8:65:0d:09:0f:96:2b:
f7:3c:a6:a0:ad:d4:62:c2:89:a0:a1:29:c5:de:d6:
4d:cf:c6:b7:2f:15:5d:47:41:df:2a:64:2b:c2:69:
7a:19:ab:28:fc:0e:d9:4d:a8:38:5b:19:d1:49:88:
72:6d:cb:bd:08:66:6c:56:06:e1:87:53:b0:d3:a9:
4d:2d:8a:7f:3e:8d:9c:b1:01:ab:01:14:ec:23:0e:
21:b1:cd:9e:27:a7:8b:c1:6e:e5:ad:cf:e8:ca:ef:
0e:1a:7d:4c:6d:47:02:62:ed:4c:9b:d2:0b:a0:9c:
49:13:f7:36:31:52:ff:89:92:40:e3:d0:dd:a8:bb:
f9:63:9a:d7:18:29:31:4f:0c:d6:7b:70:95:37:b1:
58:ab:5c:30:97:a2:20:0e:32:51:0e:42:2a:d5:32:
f8:27:ab:8f:a0:09:02:4d:f8:6c:81:e5:7e:ba:e0:
26:0e:f2:57:fe:18:bc:44:75:b5:b7:57:6a:50:ae:
d1:bf:bf:1b:c2:46:3e:3a:e9:e6:b3:df:0a:2f:ea:
bd:93:80:10:f7:72:d5:17:ba:68:a3:8e:ce:44:7d:
18:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5E:9F:CB:DB:B8:C9:B5:C6:AB:DA:83:5E:1F:E3:F3:04:5F:8D:8D
X509v3 Authority Key Identifier:
keyid:B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:8d:9d:92:05:49:41:55:5a:92:d1:87:d7:79:18:34:f9:a6:
97:87:f5:e9:23:f4:cf:43:66:36:98:c9:3f:c0:d7:5a:c2:c9:
ba:05:f9:d2:4f:a6:b8:a4:74:07:da:76:c0:62:4c:dc:43:07:
c9:d2:f9:dd:6a:b6:0c:34:88:f8:29:50:8b:7c:ca:cc:db:1d:
2c:ba:6a:34:10:80:81:45:7c:68:86:46:f7:d6:c5:75:ca:88:
17:9a:ab:78:8c:20:52:44:41:0d:70:38:b6:64:26:6d:4d:59:
f2:13:c1:e2:39:70:2f:ed:b7:9b:2e:77:92:82:bf:2e:98:38:
2d:b7:26:c1:bc:3c:2f:a9:c6:e0:d3:f7:b6:d1:47:0c:1b:a5:
9b:df:65:33:21:38:7f:54:66:2d:4f:2c:cb:6b:c4:33:f0:37:
46:9b:51:04:9e:d1:37:d6:03:65:81:85:5e:ff:be:d3:38:a4:
8d:6f:e3:81:bf:79:1e:ab:49:aa:73:93:9b:da:b3:a0:03:d8:
0a:dc:0f:84:be:3b:7b:07:a7:d0:9e:5f:25:b3:dd:3c:33:d8:
f8:ba:ce:37:59:f9:de:9e:b2:f0:ef:7f:12:bb:60:34:20:13:
fb:b5:ff:6c:a9:c3:d1:ff:6c:0a:ea:bd:7f:ff:61:57:81:bc:
0e:ab:be:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:40:14 2026 by rpki-client