Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
File: TxSbhH0xKT9wHhz5ndjKDruwtb0.mft (raw, json)
Hash identifier: nUHnme4wnFdiZcZkpFEY+aFBCMCWahgALI1wi13WtWQ=
Subject key identifier: C8:84:5A:E1:F9:24:DB:E5:CA:BD:90:76:8F:0C:36:9A:1D:EA:47:D7
Authority key identifier: 4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
Certificate issuer: /CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Certificate serial: 019CACEB7E25083166916C0F2D938C715809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
Manifest number: 11A6
Signing time: Mon 02 Mar 2026 05:00:40 +0000
Manifest this update: Mon 02 Mar 2026 05:00:40 +0000
Manifest next update: Tue 03 Mar 2026 05:00:40 +0000
Files and hashes: 1: FvKj3Djs8TT6ypv05g8sMqJXOlA.roa (hash: tfDMARTocl58JXc9IeJSQaWJFyjzzrUR3p+6fLmC9V4=)
2: TxSbhH0xKT9wHhz5ndjKDruwtb0.crl (hash: yYm5OCPrTFG90wf7TOoDRXN6HPW9NL3TZwa4F4Va5jY=)
3: h07ZqTc0uqELKn3DOxOskKYqbI4.roa (hash: FJf5zVyfQ2yme32gVPw1Ih+VvDivHZUWDg5Nah7gYOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:7e:25:08:31:66:91:6c:0f:2d:93:8c:71:58:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Validity
Not Before: Mar 2 05:00:40 2026 GMT
Not After : Mar 3 05:00:40 2026 GMT
Subject: CN=c8845ae1f924dbe5cabd90768f0c369a1dea47d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:51:56:5a:8d:b1:2c:c4:2e:d9:0b:c6:b2:9c:
4d:75:eb:2a:db:11:b2:15:a1:31:32:bd:16:3b:84:
fb:d4:4e:5c:5a:db:a9:78:8a:f6:c0:5a:6f:6f:14:
e5:56:92:51:fe:25:87:6b:64:ea:25:67:49:24:e9:
64:8c:c8:52:8e:d9:d9:c8:65:1b:9e:ca:3f:32:61:
86:2b:42:54:fa:85:07:68:5d:46:3d:5c:91:f2:c0:
be:92:8d:3e:ce:ff:a5:8d:57:96:9a:f2:ca:12:a6:
5a:1f:9f:09:a5:95:28:c5:3e:59:81:64:08:b9:c8:
6d:e7:d3:92:92:d6:a9:10:d9:13:0e:0e:52:0f:36:
35:30:c8:71:c6:f5:bf:aa:e3:01:c5:fc:9c:a4:77:
17:2f:2c:8f:a9:e0:94:0b:7f:31:12:2c:f8:f1:ea:
c1:36:9c:bb:b4:3d:cf:f3:36:e6:2e:47:eb:98:6c:
94:4d:50:5d:c8:b2:ad:5d:fe:70:35:17:67:d0:60:
ad:ad:cb:00:96:5f:d0:a1:f6:cc:75:a6:79:f1:a8:
95:bd:92:d7:c3:06:66:84:c8:18:38:62:ed:ac:6d:
f7:a6:ff:87:b5:26:75:45:18:98:de:67:c4:ee:b6:
20:7a:87:d5:06:90:66:ab:55:af:fe:ec:01:4b:57:
89:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:84:5A:E1:F9:24:DB:E5:CA:BD:90:76:8F:0C:36:9A:1D:EA:47:D7
X509v3 Authority Key Identifier:
keyid:4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:83:97:0a:3d:a2:89:1c:29:e8:34:8f:d0:c1:4b:cd:90:9b:
ff:be:4e:c0:8b:9b:09:e4:94:54:c6:83:46:d7:3f:fb:6a:b8:
fd:b6:68:67:0e:1f:b8:26:43:72:58:fb:59:97:67:23:bd:39:
a1:63:1e:b3:48:0a:93:92:f4:a3:77:ed:db:1d:d2:d0:33:bd:
d7:e5:26:f4:b8:6a:fc:6b:f5:fd:33:a7:42:52:ec:1e:0a:9f:
77:23:95:18:e9:b4:fb:68:fb:f6:e2:5a:9e:e7:e2:2f:ed:38:
2b:46:db:80:7e:d1:24:61:78:63:57:24:a7:32:dd:98:74:bb:
74:ec:7b:d9:88:d6:b3:1e:06:cd:58:46:db:76:31:be:11:00:
ab:96:38:85:3f:f6:d8:33:45:45:19:6c:9b:c5:b7:26:b3:73:
25:25:c7:b4:0c:59:3d:ae:7b:dc:90:cf:61:36:41:94:f8:f2:
c8:8d:b0:35:6b:4b:50:f7:d5:34:7b:ea:47:60:e7:04:5f:24:
53:b2:4e:5a:7a:ac:d1:89:1f:28:b6:d3:aa:8f:42:2d:5c:c5:
35:5e:05:a2:83:bc:a7:bd:21:07:91:8c:70:b9:c7:19:24:cf:
63:56:a2:06:a0:32:ef:d6:03:23:a2:a2:84:87:8a:0c:dd:4c:
6f:8f:ff:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:16 2026 by rpki-client