Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
File: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft (raw, json)
Hash identifier: szSh02NUkiY4A7VugxuJOEYLNah9zQuGh9jXtgFe5l4=
Subject key identifier: 5A:E6:A1:67:AD:0F:FE:9C:49:0A:75:57:35:12:A9:88:07:DD:3C:71
Authority key identifier: B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
Certificate issuer: /CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Certificate serial: 019CABD9935954657E566BD8BEF54B4F8DCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
Manifest number: 0DA1
Signing time: Mon 02 Mar 2026 00:01:28 +0000
Manifest this update: Mon 02 Mar 2026 00:01:28 +0000
Manifest next update: Tue 03 Mar 2026 00:01:28 +0000
Files and hashes: 1: Jyr3qQaLkuFGdzyQkxaiY8QG9Zk.roa (hash: +0lMWS/2H1/8Ey92DgxBFaeX3VGewzw1q8R4yOnjB60=)
2: tFNoCvw9HYCrtZV5yr-M-6rUHmA.roa (hash: Xnq4r13lagE2sQ4IPeUB5jj7VyVhoMHz0umUI4YNTLY=)
3: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl (hash: KI3vkDZwrvtCOm44I8MD9ElMaoqIM4OM52XcC22REVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:93:59:54:65:7e:56:6b:d8:be:f5:4b:4f:8d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Validity
Not Before: Mar 2 00:01:28 2026 GMT
Not After : Mar 3 00:01:28 2026 GMT
Subject: CN=5ae6a167ad0ffe9c490a75573512a98807dd3c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:64:7c:7c:08:34:a1:e2:fc:fa:11:56:1e:85:
3b:ab:86:10:b8:21:be:b7:6b:74:d2:26:b2:41:07:
82:eb:66:4f:0b:6f:7f:4b:3f:fb:6e:04:fb:85:67:
2c:6d:91:f5:9b:de:0b:da:87:9b:9e:95:85:11:ff:
49:b2:74:52:5c:5b:fa:74:3c:81:da:94:33:e0:ac:
09:2e:e3:59:ac:f5:fa:80:5a:a4:d5:5a:1b:8a:40:
7c:6b:b2:41:1b:c5:cf:18:8b:b8:08:89:2c:ec:bb:
21:21:46:c5:b2:8d:08:3b:b7:fd:26:b9:a8:84:01:
21:76:57:da:f1:84:1c:d3:d3:f0:f2:7e:78:f3:10:
a0:13:75:c9:91:3a:d3:3c:65:60:af:25:61:f6:b9:
66:5b:5c:22:63:c6:83:37:fe:32:87:f9:3f:8c:3d:
f5:37:ef:82:84:97:3c:5a:ed:9d:e6:4e:39:31:33:
22:61:7d:5c:12:0d:57:57:da:ff:f5:07:65:dc:4f:
2f:63:af:e2:4e:6e:d4:85:2d:ea:03:6b:e7:4e:e4:
29:8a:d6:46:70:a9:8d:bd:63:ea:3a:0f:98:d7:23:
c1:8d:71:36:66:d9:90:7c:16:aa:f9:3c:51:f4:1b:
a0:e6:45:84:19:c4:80:e0:ff:af:b7:18:9a:07:1c:
1a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E6:A1:67:AD:0F:FE:9C:49:0A:75:57:35:12:A9:88:07:DD:3C:71
X509v3 Authority Key Identifier:
keyid:B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c4:fd:74:03:09:00:05:06:b7:6f:ee:79:c7:ed:3e:aa:c2:
62:3a:15:fc:aa:e9:9a:12:68:da:ba:70:c1:e7:a5:84:0f:c8:
8c:3a:04:9e:46:77:1e:ae:df:94:0c:b1:83:51:ab:3c:20:63:
f1:ec:81:8b:9f:3d:d5:90:bb:d4:3e:f3:5c:89:a7:a1:bb:b0:
27:bc:55:1e:a0:a9:6b:9f:fb:70:46:f9:8c:60:bc:73:c2:bb:
60:42:27:05:4a:b8:a0:f6:ae:60:c5:ef:d5:99:3a:e8:31:0f:
08:2b:b4:d6:71:1b:04:0c:4a:15:b0:99:8b:76:1e:c2:b7:f0:
6e:40:61:03:f8:cd:1a:66:3b:c1:bc:62:74:ac:a3:e2:49:7d:
fa:54:af:08:d0:75:20:b3:fb:05:9d:78:96:24:cc:85:8a:a0:
72:e4:29:8f:83:53:fe:57:91:d3:3b:e4:88:3f:74:9e:89:79:
bc:d0:2e:8d:93:39:03:e6:08:87:b9:5e:77:65:a8:b1:2f:ab:
e0:72:4b:f0:c1:60:6f:df:75:f0:01:de:3e:01:61:f3:67:fe:
60:fa:dd:39:45:1d:7d:ed:13:16:95:6b:4f:e6:2c:15:02:c2:
21:4d:7e:aa:6c:73:e3:33:bb:90:27:3b:ca:e2:a7:59:1f:f8:
fc:17:3a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:01:38 2026 by rpki-client