Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
File: txKyWiME97pEw40Dld3y7QT1x-8.mft (raw, json)
Hash identifier: 0euyVgFfOnepvZdEUAdH9KCVPR0BvXxkr2a0PguukGE=
Subject key identifier: 4F:29:AC:05:B6:5E:18:D5:AB:B6:8A:79:22:E1:C7:A6:36:22:3A:34
Authority key identifier: B7:12:B2:5A:23:04:F7:BA:44:C3:8D:03:95:DD:F2:ED:04:F5:C7:EF
Certificate issuer: /CN=b712b25a2304f7ba44c38d0395ddf2ed04f5c7ef
Certificate serial: 019CABD9DA7C5F2EC34BFDEB35D83284F278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:46 +0000
Manifest this update: Mon 02 Mar 2026 00:01:46 +0000
Manifest next update: Tue 03 Mar 2026 00:01:46 +0000
Files and hashes: 1: UaDGeJWsIXI8NDyfXgRgg0KcJv4.roa (hash: G/op3Q8p3v4tlB5sWD/LQVTf6+Xz6sN8yv1KW42vf5Q=)
2: txKyWiME97pEw40Dld3y7QT1x-8.crl (hash: uri2kkJhzHRxZvdPVqku2ToHXkLyrwtYaYHIljUmXCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:da:7c:5f:2e:c3:4b:fd:eb:35:d8:32:84:f2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b712b25a2304f7ba44c38d0395ddf2ed04f5c7ef
Validity
Not Before: Mar 2 00:01:46 2026 GMT
Not After : Mar 3 00:01:46 2026 GMT
Subject: CN=4f29ac05b65e18d5abb68a7922e1c7a636223a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:e1:8d:2e:c9:65:04:4d:17:cc:8e:ea:9b:
c9:4a:d4:29:8e:dd:a8:0e:1c:78:6c:b1:c1:6a:35:
3f:4c:cf:ac:99:be:cb:7e:53:d8:36:81:70:42:21:
bc:87:35:9e:08:44:81:c0:20:5e:9c:71:ad:7a:c3:
c4:bd:b8:6a:91:c0:e9:df:6f:2f:ad:03:fc:d6:6a:
c9:17:0b:9b:6e:45:00:4c:07:bf:24:c3:38:a9:02:
4b:d7:8e:d2:41:89:3e:c2:bf:07:a6:dc:a0:e5:3c:
50:3a:ea:d9:05:9a:cb:59:ce:78:c7:85:26:6f:5c:
36:4f:db:1a:b7:c4:41:22:34:61:04:b4:94:ca:e4:
87:91:de:ea:a9:3a:8e:21:3f:dd:4e:b8:f6:08:43:
12:b0:bf:7a:1f:66:19:35:86:74:73:32:a4:43:a7:
2a:44:64:ec:45:66:36:7b:97:f1:ac:60:ab:f6:e8:
fd:c1:ea:27:fe:87:6b:81:64:93:91:8d:ab:61:dc:
cb:68:25:24:60:74:dd:2a:e8:e6:63:4f:d8:fa:80:
2b:dd:89:56:bb:cb:89:05:e2:8b:dc:e0:fe:78:8a:
23:a7:2c:21:6c:58:53:84:d9:22:fd:f3:17:d0:e5:
fa:cc:aa:7a:82:b6:4d:83:57:86:13:94:4e:26:8a:
cc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:29:AC:05:B6:5E:18:D5:AB:B6:8A:79:22:E1:C7:A6:36:22:3A:34
X509v3 Authority Key Identifier:
keyid:B7:12:B2:5A:23:04:F7:BA:44:C3:8D:03:95:DD:F2:ED:04:F5:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:cf:d7:58:7c:f9:57:10:a6:2e:e9:18:6b:7c:55:32:0a:0c:
31:d5:2b:21:67:d9:67:90:ba:61:0b:54:db:fb:85:fb:d6:36:
34:84:cb:78:3b:9d:a9:f0:26:60:45:dd:00:26:2b:04:d2:91:
aa:40:45:c8:3f:5b:8d:cd:3c:dc:b8:7b:54:c9:4b:f7:55:b4:
22:e7:78:c8:a6:ae:9d:c8:b6:e5:60:72:d9:6e:61:91:43:2a:
f3:ed:e6:81:a2:4a:b3:5f:55:87:b8:a9:ac:33:5c:07:63:10:
5b:12:92:1d:52:7c:e3:f4:cc:00:35:a9:79:a1:21:d9:12:8f:
a2:c5:e2:82:de:e3:72:c2:73:28:b0:be:8f:8e:6f:d2:26:ce:
ea:24:e7:59:35:df:3e:74:38:2a:e1:cd:6f:1d:a9:b7:a3:9b:
36:7c:f6:11:af:fe:29:24:ac:d2:75:ca:5b:d8:ab:b3:c3:ea:
88:a5:93:2e:89:a8:e7:96:2e:38:36:14:24:65:f3:89:42:03:
72:3f:c9:e6:be:90:ab:36:e7:4d:5a:b0:f5:99:fe:51:5e:95:
e1:b5:07:29:04:ef:88:67:33:c6:e6:b0:1e:74:98:02:ee:c3:
63:05:51:6f:ab:39:d2:41:81:41:24:e1:7d:29:62:28:71:c7:
58:13:89:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:44 2026 by rpki-client