Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft
File: tIoonrst1oBtYLjFrQNseY9mugY.mft (raw, json)
Hash identifier: oG+YX2+jydIw/fOGx/Thxvi0eWFZBdPBzXUyxjxRCLI=
Subject key identifier: F0:2D:04:B4:67:26:8E:1E:0A:8D:0C:77:5F:A6:ED:58:34:BB:C6:21
Authority key identifier: B4:8A:28:9E:BB:2D:D6:80:6D:60:B8:C5:AD:03:6C:79:8F:66:BA:06
Certificate issuer: /CN=b48a289ebb2dd6806d60b8c5ad036c798f66ba06
Certificate serial: 019CACEB6348C7B4114A1DE4C96AD3A63658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft
Manifest number: 0702
Signing time: Mon 02 Mar 2026 05:00:33 +0000
Manifest this update: Mon 02 Mar 2026 05:00:33 +0000
Manifest next update: Tue 03 Mar 2026 05:00:33 +0000
Files and hashes: 1: RIJmcpqsOyhRMT_8YH6FyORD_tY.roa (hash: vIj6Llw4m9MXR4LYPtKFKtVkVJTQSERGEAEPyXkjVmg=)
2: tIoonrst1oBtYLjFrQNseY9mugY.crl (hash: zl3Hahrzc9tR5HIvuvdnhlqgpnuS66lmJBbZpMwnqbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:63:48:c7:b4:11:4a:1d:e4:c9:6a:d3:a6:36:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48a289ebb2dd6806d60b8c5ad036c798f66ba06
Validity
Not Before: Mar 2 05:00:33 2026 GMT
Not After : Mar 3 05:00:33 2026 GMT
Subject: CN=f02d04b467268e1e0a8d0c775fa6ed5834bbc621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2f:9b:21:8c:b4:dc:e0:4f:7d:a8:c1:b3:d7:
53:01:c3:40:ee:26:5e:c5:8b:1b:c1:9e:d5:7b:37:
ef:06:68:f3:76:69:f7:30:67:b1:b2:1f:df:f1:8f:
6d:04:51:20:fa:99:f8:18:6c:e6:26:ae:57:8f:70:
5e:85:f7:24:8c:e2:e6:c6:8f:e8:8c:b7:3e:d1:1a:
a3:7a:b2:53:0c:22:bd:4c:c3:21:60:f8:1f:06:8b:
15:36:e5:97:27:3b:c0:10:53:10:98:66:8d:d2:a0:
fd:f9:25:f3:81:9d:b9:4a:6a:52:22:ee:0d:03:3a:
88:47:e1:88:2f:1f:83:c0:5c:78:64:77:35:4e:e1:
9e:6b:83:77:23:32:dd:6b:88:b1:d8:15:4a:72:f6:
87:cb:c1:1f:0d:f3:5a:1d:20:c9:d0:f1:29:59:23:
94:1e:be:2c:71:75:5c:a2:72:4d:f6:4a:66:74:81:
8b:c9:f2:64:4d:62:35:66:28:41:30:86:2c:9f:57:
cd:9d:68:4e:f6:c4:5b:bf:f7:5a:b0:ab:86:fe:17:
67:93:9d:07:bb:a8:89:2d:c6:4f:d2:8f:76:9c:a2:
58:cb:57:90:fb:77:9b:c3:fd:e3:e2:df:9b:d7:79:
04:dd:4b:9d:3f:54:90:ee:b4:87:70:e5:9d:b3:63:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2D:04:B4:67:26:8E:1E:0A:8D:0C:77:5F:A6:ED:58:34:BB:C6:21
X509v3 Authority Key Identifier:
keyid:B4:8A:28:9E:BB:2D:D6:80:6D:60:B8:C5:AD:03:6C:79:8F:66:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:79:53:d5:24:c0:89:2b:3a:64:b5:40:91:ad:23:2b:14:b0:
36:80:ae:28:b2:c4:4f:7b:3f:46:21:b4:f0:b2:34:cb:cf:17:
b1:dc:57:2f:bd:ca:eb:ae:64:2b:5c:d2:c4:77:1d:03:e9:0d:
9c:97:3b:ea:1e:ff:95:7e:f0:dc:dc:7a:8b:ad:b3:a1:65:0c:
70:70:1d:f4:f7:70:86:70:49:58:d3:54:2f:8d:0a:da:d9:1f:
29:1d:e1:1e:27:c2:5a:7a:d5:56:a5:a8:71:c4:2b:5f:d3:29:
05:e7:ee:cd:8c:c4:9d:34:27:6a:5b:8a:70:6d:a2:50:66:49:
4e:d7:7d:4a:05:34:51:13:96:5a:82:cb:90:6d:87:30:99:b8:
a6:ad:55:ad:78:fa:f0:e5:ce:d9:6e:35:d0:1f:24:8f:e7:d1:
a7:cd:0e:b5:bf:0c:2a:1d:d8:b0:b4:f0:ce:62:b0:7f:b1:1f:
7d:40:75:81:08:1f:48:79:4a:1a:f4:03:92:6a:66:ac:a7:2d:
e8:f5:cb:24:df:0d:22:b8:8b:08:83:ab:86:f7:e4:04:6c:20:
f7:57:a2:c6:d8:a7:a2:0b:ab:f7:6d:e6:03:f2:7a:a4:f3:f1:
5d:38:38:04:8e:aa:0e:8b:b3:43:7b:42:54:ac:94:9a:2c:b1:
e0:d6:ad:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:02 2026 by rpki-client