Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
File: tfrsS42ZLda5zYmoSJ08OmUq7NI.mft (raw, json)
Hash identifier: 1JHBFnxHFDmHlkzZMn3w68RIWFf2c2VqWP35KCL5Q7Q=
Subject key identifier: 7E:03:51:1F:8C:AC:8D:72:93:E6:62:09:70:C5:82:17:F8:4E:08:87
Authority key identifier: B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
Certificate issuer: /CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Certificate serial: 019CADFE123778C5931E5300356FBB7DCB7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 10:00:34 +0000
Manifest this update: Mon 02 Mar 2026 10:00:34 +0000
Manifest next update: Tue 03 Mar 2026 10:00:34 +0000
Files and hashes: 1: V1HErl2JVbjT136XwGDVBe5B8q0.roa (hash: 0IOhqRYRA3j3IZg7O69Z3jrw0I2aO88PvmtQESn76TE=)
2: sRhSOvBT50pEAGhy38eEzssMMhA.roa (hash: QbFSrZ3TjWQdjeS28WmLKPudQlt94pkB4tDP467+qjg=)
3: tfrsS42ZLda5zYmoSJ08OmUq7NI.crl (hash: XwhWOrhmHd9TP63BK7zbWebifL4n0LOfCB7kMUpta3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:12:37:78:c5:93:1e:53:00:35:6f:bb:7d:cb:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Validity
Not Before: Mar 2 10:00:34 2026 GMT
Not After : Mar 3 10:00:34 2026 GMT
Subject: CN=7e03511f8cac8d7293e6620970c58217f84e0887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:0d:76:81:97:4e:e8:44:61:cc:de:01:0c:
9d:d3:29:34:40:0e:bd:dc:80:a3:ce:79:c6:5e:a2:
93:18:d4:1a:64:52:a2:3a:6a:a8:c4:71:3e:53:45:
25:19:f6:7f:4a:87:eb:38:ee:b4:73:c9:b1:b3:21:
08:7d:f1:83:4e:94:13:9b:79:88:cb:eb:fb:31:02:
cb:ab:a0:59:d6:8d:f3:ed:97:5e:39:47:89:bc:09:
5b:03:97:37:dc:f5:ab:0d:bc:43:51:a5:d7:f3:96:
39:25:51:65:9a:a1:99:95:11:ae:e3:17:eb:15:e1:
29:65:9d:f0:f0:56:90:d2:3d:9d:d7:9b:5b:4f:00:
69:dc:9d:3d:b7:5c:45:a4:25:47:f4:c7:d5:d4:b0:
96:b9:ea:ac:ac:96:68:16:46:68:57:08:47:66:7a:
39:f5:ba:b5:0a:28:88:6e:33:aa:10:a6:e7:ee:c0:
ff:4a:d6:88:f9:07:af:a2:be:4c:af:e4:d5:e4:65:
9a:9b:44:df:b4:7d:e9:45:a1:c5:eb:d5:0a:0e:f2:
d2:77:36:c5:fa:6a:1d:63:aa:02:46:40:c1:f6:fe:
f4:90:aa:bb:5f:00:82:ce:31:4b:c9:bd:ab:6f:3c:
3d:ac:67:70:88:ab:0d:f0:99:78:8c:d7:c3:c4:7b:
83:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:03:51:1F:8C:AC:8D:72:93:E6:62:09:70:C5:82:17:F8:4E:08:87
X509v3 Authority Key Identifier:
keyid:B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d7:02:f6:b4:e0:17:f1:e1:b7:49:c5:27:4b:bd:bb:e7:54:
bc:df:ca:8e:a8:d4:9d:11:e0:ca:f2:4e:0e:7a:2a:a2:b8:d4:
87:8a:43:8f:98:02:4e:d5:1a:e6:25:bc:45:c5:77:d7:bc:bd:
16:e3:b6:d6:56:86:a6:32:de:8a:ba:25:21:1f:a3:84:fd:09:
f2:ee:bf:28:f2:d2:84:ac:0b:44:fd:a2:84:28:df:76:41:5f:
cb:21:32:c6:e9:e4:22:82:7e:92:45:a2:d6:5f:85:25:da:27:
8f:4d:bb:3d:9e:b8:56:53:96:cf:ab:f9:dd:d7:d5:91:2d:60:
6d:22:00:6b:7d:1c:25:3a:02:d6:0a:87:84:e0:d0:c5:94:1a:
73:b1:18:fb:8c:cf:e0:5e:67:fb:3e:ac:e5:2e:34:e0:17:40:
aa:b6:e9:57:8a:eb:32:f1:66:d1:9f:ff:15:4a:86:1e:4f:1a:
cd:57:46:3b:18:4c:85:8d:df:83:ad:83:78:3d:64:07:3f:98:
bf:05:b6:17:0c:96:6b:83:b9:f7:e4:a5:52:41:c4:d0:15:e1:
84:a5:3f:da:d5:b3:6f:36:1a:fa:8b:3d:9e:9d:84:75:e3:a1:
df:e3:7c:81:98:d7:1d:d5:24:9f:89:6e:ae:18:dd:39:07:2c:
0a:a1:c9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:24:10 2026 by rpki-client