Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
File: _Tq5WEdps0xpXg7zvkAN5chwX1g.mft (raw, json)
Hash identifier: ebOsYMvBBBRmDe/DDEbpS9oJ7FXsGtU1UXEwTXO6oLw=
Subject key identifier: 60:E5:9A:E2:CF:8A:C3:45:4C:41:CB:86:70:AD:FA:58:E5:A1:3F:D3
Authority key identifier: FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
Certificate issuer: /CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Certificate serial: 019CABD9AFBE39B0FC569B2D993318BBC13D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
Manifest number: 044E
Signing time: Mon 02 Mar 2026 00:01:36 +0000
Manifest this update: Mon 02 Mar 2026 00:01:36 +0000
Manifest next update: Tue 03 Mar 2026 00:01:36 +0000
Files and hashes: 1: 0BsOVzhVk1MKdipne8qaIMaKsew.roa (hash: GWXgVGFzyZitQdapoQ6ExT2SefdF2ctk1Wka/DqT424=)
2: _Tq5WEdps0xpXg7zvkAN5chwX1g.crl (hash: bS4xangV9jedKwIYvK7GBL6w1DsU04zXYV9HB0yZGCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:af:be:39:b0:fc:56:9b:2d:99:33:18:bb:c1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Validity
Not Before: Mar 2 00:01:36 2026 GMT
Not After : Mar 3 00:01:36 2026 GMT
Subject: CN=60e59ae2cf8ac3454c41cb8670adfa58e5a13fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:96:d1:4b:b4:8d:fb:56:2f:13:f6:4d:c7:8f:
c0:77:4f:36:ea:9d:08:70:6a:c0:65:47:4e:d4:4d:
6d:71:05:65:25:37:39:52:a8:35:59:ff:d4:7e:99:
bb:4d:ed:1f:01:07:f7:9d:54:92:7f:8d:d3:96:d2:
68:eb:49:09:4b:c8:53:38:c1:be:2b:64:8f:72:1f:
95:fa:c2:b0:24:54:b3:bf:3e:cc:29:be:a2:74:d0:
9e:b2:34:ef:88:13:89:d7:a1:14:54:6b:48:1c:e2:
7d:64:b6:0d:dd:d4:01:1a:e5:b1:e2:ca:20:62:57:
a4:5a:27:27:83:b1:b4:ce:06:de:e2:13:61:ae:37:
99:d3:3a:fc:38:f7:cf:8c:08:71:16:ca:5b:58:56:
a8:7a:81:31:1d:78:e1:fc:eb:e7:22:18:16:07:40:
7c:fa:e8:52:54:53:eb:f1:95:c4:5a:ae:cd:7d:6e:
64:18:a8:42:a9:60:c3:d6:e3:c7:47:4e:4a:7c:92:
4f:80:c7:19:aa:e1:3d:85:24:b5:aa:42:e4:48:ea:
07:2d:fa:79:81:47:93:ec:df:65:62:2a:25:1e:e0:
7d:8d:8e:e0:a5:4b:5e:98:11:92:3b:7c:54:6c:c5:
d4:4d:56:10:28:be:24:f9:1d:c2:d2:e0:8a:dd:c2:
a4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E5:9A:E2:CF:8A:C3:45:4C:41:CB:86:70:AD:FA:58:E5:A1:3F:D3
X509v3 Authority Key Identifier:
keyid:FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:88:98:f0:cc:21:22:e1:72:74:1a:e0:ce:7c:9a:bc:20:9c:
0d:74:4a:ae:1d:34:d6:8e:00:73:df:3e:46:f5:05:4c:66:73:
ba:2e:f3:c1:c5:dc:c6:ba:b5:17:27:51:72:f1:19:d9:2c:9b:
a3:0a:d0:4e:4a:3f:5c:4a:76:82:1c:67:fb:1a:01:f0:6d:30:
41:32:a7:48:82:fb:9b:6a:84:0d:30:1e:87:4d:a5:ea:16:4b:
09:2e:3f:76:65:08:a4:b9:4a:3a:2e:e7:de:16:81:21:3e:5a:
2a:79:fc:0e:b8:4b:fe:16:1d:9e:88:2b:ae:e4:59:46:bc:47:
aa:01:2b:d0:68:fe:40:5c:bd:71:91:6f:62:20:ca:ff:83:e9:
fd:15:55:2a:9a:46:87:12:2d:be:0c:f3:6c:ca:4a:6f:43:39:
61:b6:6c:7c:98:a1:9c:a2:17:01:90:33:de:f8:fc:0b:c6:68:
f1:5e:70:c3:60:2b:82:f2:54:58:e0:0e:ba:db:02:e3:56:0f:
2e:da:ff:76:cc:6c:bb:30:13:af:59:b5:1a:64:98:4a:1b:39:
ee:66:1f:04:12:25:e7:db:89:35:32:43:d7:1c:e6:c5:1c:fb:
c1:07:de:a8:96:59:5f:0b:5b:bb:fe:4e:66:78:e2:68:b4:c9:
88:96:a3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:20 2026 by rpki-client