Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
File: tYUi2sa83oxIEzNZkTKhYgDmpb4.mft (raw, json)
Hash identifier: BJcphzf0SzKZu0VZRwvMYBZV6sr4NE6L9n76KAXp08M=
Subject key identifier: AD:BC:94:1F:BF:38:1F:99:9F:16:72:73:9B:5C:01:6F:40:86:64:9B
Authority key identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
Certificate issuer: /CN=b58522dac6bcde8c481333599132a16200e6a5be
Certificate serial: 019CAA217C81A725B90B7BDC18EE2C02EC9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
Manifest number: 0BA0
Signing time: Sun 01 Mar 2026 16:00:47 +0000
Manifest this update: Sun 01 Mar 2026 16:00:47 +0000
Manifest next update: Mon 02 Mar 2026 16:00:47 +0000
Files and hashes: 1: 18A7L44_0ILwZodGFUSDQ2eubuc.roa (hash: TWAVfWQBRDutGoFMNTBpWa6veuSEAlw+UuaoPc+ikg4=)
2: 2BnXbJN0-tuiSw2yPhv5M-hIP_g.roa (hash: 7StJAAew0duMZOz948e0I6qxBTgJCwCzq3+RHVzjmKc=)
3: tYUi2sa83oxIEzNZkTKhYgDmpb4.crl (hash: krfEoxS6gPVTa8hIbjySKwgcST71fWGwWzpeNqZefFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:7c:81:a7:25:b9:0b:7b:dc:18:ee:2c:02:ec:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b58522dac6bcde8c481333599132a16200e6a5be
Validity
Not Before: Mar 1 16:00:47 2026 GMT
Not After : Mar 2 16:00:47 2026 GMT
Subject: CN=adbc941fbf381f999f1672739b5c016f4086649b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fb:cb:60:ee:1b:6d:fe:3f:29:b3:e4:cf:61:
f3:0f:47:37:a9:ec:ff:a9:8f:3c:9e:5f:05:1d:7c:
7f:e8:19:51:8d:e4:c9:d5:5a:30:fa:e2:72:d8:bd:
92:64:a3:3d:97:cb:77:b6:4f:86:78:a0:3b:b7:d1:
8e:bb:25:12:bb:92:9e:20:94:60:ac:69:74:88:8c:
f0:da:e3:5c:d3:9d:a4:1f:69:1f:64:e3:18:bc:97:
02:a6:ea:d6:48:ec:e3:fa:6d:b5:d8:d0:e8:ca:2c:
87:c9:ec:d5:88:23:82:94:08:e0:10:be:80:9b:9b:
e0:8b:77:99:2c:12:a9:cc:a4:67:e7:c3:69:dd:64:
cd:63:fe:16:56:b6:d3:10:66:d2:f3:49:da:ef:86:
cf:6d:6c:9e:7d:3a:dd:2d:f6:38:52:c9:35:3a:df:
10:e8:27:b8:51:39:ed:a0:f0:7a:be:a4:05:47:44:
8e:5d:3e:bc:43:bc:de:19:65:98:13:bd:09:3f:9b:
f3:93:b1:b5:e3:8b:d1:a1:47:1c:94:18:e4:d9:41:
0a:d1:b5:38:cc:1a:80:52:4c:7d:20:a0:e5:5c:5e:
c5:ea:47:53:f6:3d:61:16:83:6e:0c:65:73:8b:5e:
34:27:b3:a1:23:dc:a3:56:45:90:69:66:e6:6f:5e:
57:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BC:94:1F:BF:38:1F:99:9F:16:72:73:9B:5C:01:6F:40:86:64:9B
X509v3 Authority Key Identifier:
keyid:B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:96:d1:3b:80:37:73:79:70:eb:81:5d:cb:02:20:7f:7c:3e:
b2:32:7c:03:00:de:8d:26:83:da:92:d9:da:b6:36:ca:a6:09:
12:ba:59:32:bb:2e:5b:22:bb:a7:97:48:3e:cc:82:1b:72:84:
db:ab:8c:19:b8:4b:c1:85:dc:f6:bd:4f:35:38:8e:35:4f:ff:
c1:1d:98:19:d7:ea:32:14:a0:b3:af:a6:3e:41:5f:dd:7f:89:
43:de:b5:7a:85:77:2a:66:8a:de:8d:76:c9:1b:7c:3c:34:6a:
4a:c5:b1:4b:5f:bf:ab:dd:1f:e9:6c:81:e9:4b:ef:8d:e0:17:
58:20:5d:aa:79:f3:08:d5:88:b3:65:04:fa:2f:76:5f:24:42:
f8:ae:33:d7:56:23:fd:a1:7f:cd:67:68:dd:f8:45:27:be:62:
e3:c2:33:4f:e0:9f:61:77:bb:e3:f8:68:86:f2:4b:7b:ef:ee:
05:89:9b:2d:8d:3f:af:98:49:8c:b9:cb:10:95:0d:d6:13:3d:
ec:6a:02:dd:d3:7e:6d:37:af:83:88:7c:8a:76:35:08:7f:8f:
54:d0:f8:33:9a:c2:8b:e4:76:88:cf:b5:a2:ca:a7:45:3d:3a:
01:b0:11:61:03:00:30:47:2f:d0:76:db:95:46:6c:44:b9:d7:
f9:36:c3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:18:17 2026 by rpki-client