
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
File: tpQiR24a5eoNWOT4_fkfBfEC_vs.mft (raw, json)
Hash identifier: xHpwG0CUG39IbpBK4P3auTJZ2YF3fRpK5BVLRCtNiBg=
Subject key identifier: 56:5B:59:AB:38:0B:71:5B:97:52:C2:AC:41:27:5A:06:A2:B0:7F:B1
Authority key identifier: B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB
Certificate issuer: /CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb
Certificate serial: 019CABA25623A33F3B26E18FEFB9CCC96627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 23:01:08 +0000
Manifest this update: Sun 01 Mar 2026 23:01:08 +0000
Manifest next update: Mon 02 Mar 2026 23:01:08 +0000
Files and hashes: 1: ISfG2ceyWuWYeRgRuKuH6VXmeXE.roa (hash: dFAyLFozLbvyA3OIY3CyaWsZeKTyXIGDjyZDQv/swnk=)
2: PQzbNhLV7WARqjZ2K9wwzRtvgZU.roa (hash: Jji1aUdojCSmn8rbwnWDExchCVVbDC1F3h2Ol9wg7o8=)
3: tpQiR24a5eoNWOT4_fkfBfEC_vs.crl (hash: a3asg83nZscmgOC8flWR668dvlKogd+NSq+QxvIIvDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:56:23:a3:3f:3b:26:e1:8f:ef:b9:cc:c9:66:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb
Validity
Not Before: Mar 1 23:01:08 2026 GMT
Not After : Mar 2 23:01:08 2026 GMT
Subject: CN=565b59ab380b715b9752c2ac41275a06a2b07fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:81:00:08:d3:77:06:3d:9b:ea:9f:b5:32:12:
21:93:22:c5:52:62:94:a4:ac:ba:e4:2c:39:b5:1c:
a7:9f:cc:29:c1:5a:cd:d5:19:cc:f3:05:d2:51:62:
80:41:24:88:34:b8:f0:71:24:4b:c2:fa:5d:b7:0b:
dc:d8:11:40:bd:5f:49:8c:78:b3:4d:32:ae:2f:06:
61:33:37:78:33:4f:19:28:93:40:b4:59:79:fd:c7:
2e:14:ba:c7:e7:a6:09:51:cf:87:f1:3f:c1:2b:22:
b8:ce:1f:ab:f3:fc:e7:e8:ab:be:3c:fd:19:f5:8f:
db:a5:c5:4a:99:4f:6d:7f:b8:87:be:b2:da:79:87:
71:fc:25:a9:9e:57:3c:e8:8c:74:82:31:de:27:99:
88:5a:ad:a3:96:ae:7f:ce:20:f8:69:a1:0f:10:74:
3e:35:48:b9:72:6f:e0:ff:72:0b:ed:1e:ed:8b:01:
b3:4b:a9:a3:12:7d:8c:bc:36:ca:b8:55:1d:8e:c5:
12:32:38:70:35:09:66:26:7f:24:26:37:73:5b:5a:
d0:18:3f:5b:76:81:43:bf:80:dc:37:6c:46:30:72:
7f:c4:fe:9f:a3:72:2d:ea:ff:b1:e5:43:e4:6a:ae:
df:63:27:ca:cb:7e:af:60:61:18:86:58:8c:bc:1a:
4c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5B:59:AB:38:0B:71:5B:97:52:C2:AC:41:27:5A:06:A2:B0:7F:B1
X509v3 Authority Key Identifier:
keyid:B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:7e:ed:c9:d4:f4:be:1b:68:28:89:8f:c7:1e:58:15:e2:bf:
68:1f:0f:8b:18:ce:88:24:46:b9:3f:77:aa:92:2a:f4:be:7e:
58:4a:25:b1:3f:b8:22:1f:22:cb:3b:4d:7c:da:03:4e:51:96:
1e:c7:39:ca:e9:ce:13:11:f6:5d:dd:ad:bd:1c:63:79:32:6c:
1b:a1:db:9c:09:bb:cf:8c:f3:d8:03:4a:35:cf:57:36:bc:36:
03:cc:2e:48:96:1e:f3:de:15:05:1c:1e:73:e4:32:ee:a6:36:
23:42:0c:69:f1:84:48:dc:02:6b:13:55:86:1f:96:2e:80:11:
81:3c:96:c9:b4:12:2f:8f:25:4c:0d:30:48:f7:98:78:1e:9e:
a5:f6:9c:25:9f:c6:c5:a4:ad:ec:fd:58:ab:21:f2:45:24:4e:
d2:fc:d5:70:86:2a:de:66:05:c2:15:e6:86:a9:ed:00:64:e8:
10:fb:48:5a:09:86:35:2a:4f:fe:71:16:f1:22:90:10:fa:71:
57:f2:f2:2e:ff:dc:11:ac:02:95:67:db:c5:00:72:45:8b:9d:
e2:34:12:ea:27:41:87:0b:30:73:44:3b:ba:c2:07:37:f5:26:
4f:71:08:c6:ad:c5:36:74:60:3f:47:c6:04:8b:8b:4c:45:b2:
b6:c7:55:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:57 2026 by rpki-client