Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
File: tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft (raw, json)
Hash identifier: 2lN9STxkfwrHxQc2pXDr73qVfZnAPERONBmJ03WKHIk=
Subject key identifier: DD:EE:75:41:1A:1D:AB:41:96:F7:9B:0D:4C:EC:8F:F3:1C:D3:B3:EF
Authority key identifier: B6:91:FF:C8:65:9E:2E:63:A6:DE:CE:C7:D6:F3:6D:60:B6:64:09:61
Certificate issuer: /CN=b691ffc8659e2e63a6decec7d6f36d60b6640961
Certificate serial: 019CA9462F361F4635EDDE64567CF9319257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
Manifest number: EF
Signing time: Sun 01 Mar 2026 12:01:14 +0000
Manifest this update: Sun 01 Mar 2026 12:01:14 +0000
Manifest next update: Mon 02 Mar 2026 12:01:14 +0000
Files and hashes: 1: CnAOgW0v2FHhY7xG5Ek16W61Xwo.asa (hash: BYtVtXvNLu7yhVLJxNiUtZ/vkS0B93JK13XOxYFj8W8=)
2: tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl (hash: tsZO8qDoDpB98dR2Dji01WeStGTaO3BTgUfGsdf+wKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:2f:36:1f:46:35:ed:de:64:56:7c:f9:31:92:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b691ffc8659e2e63a6decec7d6f36d60b6640961
Validity
Not Before: Mar 1 12:01:14 2026 GMT
Not After : Mar 2 12:01:14 2026 GMT
Subject: CN=ddee75411a1dab4196f79b0d4cec8ff31cd3b3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f2:d4:34:66:7b:77:e4:e0:17:aa:ed:74:61:
9d:6c:9f:fb:29:34:36:da:df:f1:1b:5b:ae:db:62:
b9:74:ed:5f:b6:18:26:45:07:a0:1b:8c:5e:d2:78:
9a:11:bc:99:68:e1:b0:d6:a6:bb:5b:48:fb:49:70:
f7:33:6b:63:9e:e0:22:86:89:05:fa:c6:a7:f8:2c:
e1:56:95:0a:95:c1:a4:05:fc:83:01:10:3d:07:23:
11:2b:99:53:d1:d0:50:72:69:be:65:cb:87:60:c2:
8e:84:f9:dd:55:e9:48:d9:25:dd:13:48:49:f7:c3:
76:4b:70:4f:68:af:43:2a:68:9a:d4:c0:88:c5:a3:
1c:ae:fb:3a:5f:8b:c9:c3:a7:42:81:b4:73:09:ff:
6c:10:34:4c:71:05:c3:9d:00:06:64:42:c0:f6:98:
d0:67:a3:27:49:4f:b9:e7:d9:7f:d8:d2:e8:ee:ee:
46:02:83:b7:56:ed:20:1d:f5:f5:c3:14:e7:1b:de:
61:9d:df:1c:06:94:4d:b3:19:40:32:7d:50:08:ac:
a8:27:81:94:2c:6e:f9:bf:1a:cf:a6:1c:79:1c:bb:
42:90:ce:4c:fc:49:ec:ce:72:18:b5:2e:b5:c7:33:
80:c9:02:63:ac:33:94:50:27:bc:95:2c:5b:9c:c1:
f4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EE:75:41:1A:1D:AB:41:96:F7:9B:0D:4C:EC:8F:F3:1C:D3:B3:EF
X509v3 Authority Key Identifier:
keyid:B6:91:FF:C8:65:9E:2E:63:A6:DE:CE:C7:D6:F3:6D:60:B6:64:09:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e9:e8:f1:6b:22:95:fe:3e:4a:09:b3:4c:48:f1:63:09:e8:
8a:06:66:35:28:e9:9c:fb:b7:58:04:72:67:77:61:42:16:7e:
26:ed:fd:7a:7a:35:de:a8:79:c9:72:f4:fd:54:c8:1a:24:43:
e3:71:e8:33:26:61:33:b2:4a:ef:90:87:09:d1:cd:12:ad:a8:
13:3e:fa:eb:4b:54:44:7e:8b:55:8b:9e:e6:74:36:77:c9:cc:
ad:8c:a3:06:7c:69:34:be:65:93:e6:39:60:9e:a2:59:32:e2:
c1:6a:9f:e4:8d:04:90:02:0a:82:40:05:e4:49:f9:ae:29:e3:
72:c3:c5:bb:52:aa:17:bf:be:66:c4:a3:b3:14:a4:bd:7a:87:
41:80:a2:61:de:7b:b0:79:1e:1d:dd:bb:cb:18:0e:19:b4:ee:
9e:9e:40:3d:5d:83:0b:51:c9:2c:ee:7f:89:fe:7b:fa:2b:80:
83:47:7f:66:5b:50:91:b3:b9:03:39:26:8f:92:8c:d8:f1:82:
75:05:28:83:65:9a:72:e8:34:93:e3:31:42:fe:81:7e:d0:8e:
90:5c:df:e4:c1:47:14:15:e2:62:aa:7f:26:fc:92:76:c4:cb:
35:8f:9a:3a:44:56:0a:54:4c:e9:dc:57:9e:09:69:14:d4:30:
f2:fe:3a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:56 2026 by rpki-client