Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json)
Hash identifier: IC/MNodHHao4Ksf3k2xN1gID/woVxW03bViIZwOWaEw=
Subject key identifier: 60:44:64:36:BE:E1:C7:10:46:0F:FC:BF:92:E4:F6:47:D2:68:9A:DF
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial: 019CABA26D85517CC09E03BDDA938D1E2A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
Manifest number: 12B7
Signing time: Sun 01 Mar 2026 23:01:14 +0000
Manifest this update: Sun 01 Mar 2026 23:01:14 +0000
Manifest next update: Mon 02 Mar 2026 23:01:14 +0000
Files and hashes: 1: 58ydFFoOvrTPYA8iOIAgZMf_cpo.roa (hash: F/vDL/5heMjU5cUbUY7RNuovDGPBXC3rXD0ZADSlfk8=)
2: roH8dSJ1cyQiwOhgeOOscUYpa4E.roa (hash: 3JORgmdPZaQ8xXUzauNxbxZQHf1X4hPOhgbsIE182Bg=)
3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: vEoxX/iCT8M5BIlvX0i6kZelppkuuBhWOXAQmHHsPsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:6d:85:51:7c:c0:9e:03:bd:da:93:8d:1e:2a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Validity
Not Before: Mar 1 23:01:14 2026 GMT
Not After : Mar 2 23:01:14 2026 GMT
Subject: CN=60446436bee1c710460ffcbf92e4f647d2689adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:e5:8a:13:4c:4a:bf:8f:6f:43:27:f4:1b:
91:f1:f3:b8:e2:fa:8e:93:4d:19:a8:a9:77:1a:ae:
30:9f:95:30:ff:70:b6:06:81:f0:b7:e6:e0:ee:89:
c0:74:7e:c2:4c:d8:ef:eb:97:55:a2:16:4e:07:2e:
08:55:e4:c0:7a:0b:81:ea:a8:bb:be:f0:0a:54:a1:
f1:e3:06:f6:de:72:7c:3e:e1:88:a8:b2:9f:5a:13:
76:68:81:f8:ef:cd:4e:cf:ba:75:de:f6:b9:e4:a1:
3c:32:09:55:93:8e:f6:d9:cb:9c:73:82:04:28:16:
b2:6b:dd:2b:3f:8a:0a:25:8c:b2:f5:e3:3d:34:71:
0f:84:77:7a:a8:28:1c:ad:fb:32:ff:0b:65:18:fe:
10:8e:f5:0b:fe:12:4d:c6:89:d4:a5:19:2c:c7:d5:
a7:ee:9b:a8:ca:54:ac:18:32:a3:d5:b5:a1:9b:d8:
a0:ec:73:a9:bc:81:55:f4:ac:9b:3b:1d:0f:18:18:
f6:6c:bc:e2:b2:ac:aa:43:ae:95:93:0a:d8:12:e9:
6b:58:2e:17:75:96:05:37:e8:6c:5a:01:48:13:ad:
9f:b3:b9:e0:e6:3d:d9:72:8e:6b:ba:10:1b:d8:99:
07:37:b5:ef:25:81:54:18:8c:45:5c:5c:77:a2:80:
a2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:44:64:36:BE:E1:C7:10:46:0F:FC:BF:92:E4:F6:47:D2:68:9A:DF
X509v3 Authority Key Identifier:
keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4f:da:f0:58:c6:20:bb:2d:d3:5a:48:90:01:ed:91:03:cd:
7c:34:b4:f8:42:37:8c:07:38:2f:86:39:48:4f:a2:b5:8a:d2:
0d:73:73:81:cf:13:0a:35:0c:94:51:9a:49:d0:eb:1b:a9:ed:
43:ac:f0:86:6c:02:fb:cf:f9:1e:1c:af:fc:13:7c:78:8a:dd:
52:77:41:78:b6:cc:3f:a5:6c:8b:2c:64:e2:51:ee:76:91:06:
37:19:bc:94:f7:d4:18:0f:8d:0e:c6:a3:68:a4:18:ec:31:6d:
cc:ff:2a:b1:0b:4f:d4:72:84:13:4e:a3:97:8c:2b:12:f7:52:
7a:72:aa:c4:38:bb:7a:e1:c9:f2:ab:98:6a:d9:7d:26:77:35:
cf:b5:d3:28:66:1b:52:1c:f8:0c:91:50:da:08:41:6a:14:ea:
68:e9:6a:71:6a:b7:dd:7c:d0:e5:9b:38:74:22:28:82:47:37:
10:7f:7d:dc:87:3e:a2:4e:1e:15:92:d0:3d:81:1d:03:43:94:
3d:52:a0:11:5d:fd:c1:85:bf:39:30:85:ee:30:54:e3:12:f2:
89:79:e0:81:83:5d:86:60:4c:00:56:42:68:79:97:73:26:a0:
7d:2c:ab:9a:ef:3d:19:55:23:ea:df:96:47:02:31:45:79:f3:
69:7f:fa:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:34 2026 by rpki-client