Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
File: tF5iJw0g-UZ6avx4lj28-4D79So.mft (raw, json)
Hash identifier: AcnCakwC0lCnSm1AIAKeKV0GQp97sTHT6Al1thnunyo=
Subject key identifier: AF:77:6F:9F:1B:68:EA:97:19:C8:56:D0:2E:CC:19:D8:36:3E:62:D5
Authority key identifier: B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A
Certificate issuer: /CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a
Certificate serial: 019CABA2138E70AB7408262CE17BAE74C9A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
Manifest number: 0FC6
Signing time: Sun 01 Mar 2026 23:00:51 +0000
Manifest this update: Sun 01 Mar 2026 23:00:51 +0000
Manifest next update: Mon 02 Mar 2026 23:00:51 +0000
Files and hashes: 1: OaFZLyzit9aeE8Q-rZBaTKGo_VE.roa (hash: Z2wq4t88shsGbAykTeNAzXxxEV7hDGsKc3AYjBfbT+k=)
2: tF5iJw0g-UZ6avx4lj28-4D79So.crl (hash: xHADJNmOxV8QWUou5Nqwe0prSwvIE4TOqe/QMAoPicQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:13:8e:70:ab:74:08:26:2c:e1:7b:ae:74:c9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a
Validity
Not Before: Mar 1 23:00:51 2026 GMT
Not After : Mar 2 23:00:51 2026 GMT
Subject: CN=af776f9f1b68ea9719c856d02ecc19d8363e62d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:31:3e:ff:ce:ea:e1:ed:08:bb:f0:bb:a6:
a9:dc:0e:a3:83:e5:f1:99:da:32:70:e2:65:9b:b7:
0e:dc:fc:7d:e4:43:d5:ff:ff:97:b4:c0:ad:8e:f3:
5d:a4:02:ca:e1:3b:04:5e:d3:e0:8e:90:78:44:cc:
a1:5e:38:5b:9a:9e:ee:ca:33:c3:6c:df:22:52:d6:
4f:cc:52:b2:2f:5f:ae:b2:9e:d7:99:5b:2e:2d:51:
24:ec:be:af:1d:0c:21:d6:29:eb:c0:d6:37:7e:1c:
9c:e2:69:a2:f1:39:86:d1:75:12:1b:d9:df:b9:05:
d1:04:7b:31:3d:60:09:bf:83:f3:63:8c:b8:73:f4:
d3:b9:9a:e3:5b:0d:a0:d2:c8:ae:96:c3:54:91:73:
7f:88:44:1c:87:81:06:f8:ca:fa:bf:c1:3c:8a:c2:
60:b7:4d:3f:c5:d5:2e:10:c8:26:d2:2e:c7:7b:32:
4a:44:9c:b9:a9:09:bf:c4:bc:1c:4a:4c:08:61:c2:
8e:fc:cc:0f:0a:8b:31:4e:1b:46:b7:fe:19:32:9b:
b3:cf:e2:17:a1:38:ef:8b:91:22:3f:d6:b4:d7:30:
d2:0c:73:77:e1:f0:9d:99:33:fb:0a:94:a1:fb:16:
f7:17:78:83:d6:ee:cf:92:bf:13:a1:b8:19:dd:18:
88:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:77:6F:9F:1B:68:EA:97:19:C8:56:D0:2E:CC:19:D8:36:3E:62:D5
X509v3 Authority Key Identifier:
keyid:B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:8d:63:16:72:1f:48:f6:75:cb:b4:84:0b:c1:7e:e3:fc:fe:
b3:0e:20:56:39:2b:f5:2b:27:4e:0d:01:94:cc:a9:4f:33:a6:
e4:53:15:46:71:13:8f:92:89:30:49:56:f5:07:b0:5c:d0:74:
99:e5:e2:0c:bc:90:4b:69:fd:b2:d0:eb:ac:6c:37:d0:93:11:
6e:9d:56:9c:98:bf:c5:ae:1d:b7:e7:26:00:be:71:7e:8d:df:
56:98:b8:94:20:01:e6:49:aa:01:86:d0:97:73:3f:57:1c:74:
f8:de:0e:9a:79:08:74:b0:ec:8b:93:22:40:69:90:16:a5:12:
48:4e:13:47:b6:ba:3f:63:53:71:86:5e:f2:d0:d9:e5:81:bc:
13:df:74:2e:18:a8:69:8c:d3:23:10:89:59:7e:c4:e3:84:9c:
b9:19:0a:9a:28:7e:09:d7:25:ed:e0:ce:72:02:5e:eb:56:78:
a6:1d:a6:c6:aa:d1:a9:3d:fc:fa:8b:4d:ce:aa:bc:37:d3:4c:
78:cd:43:52:5b:60:8b:4f:b0:73:ec:64:94:8a:9e:2e:a9:ab:
d4:4a:5d:93:6e:83:8a:ec:59:5c:1c:82:8e:b1:32:13:ab:78:
a2:de:f5:1f:5f:a1:12:12:f7:a8:6a:ef:e9:70:d3:9e:80:0c:
e9:24:4e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:09:01 2026 by rpki-client