Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File: tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier: Xp8UFOq28eFcA9aM2dkwDQtBwPkEsb9OzRTtRiWUnpk=
Subject key identifier: 23:E5:1E:E3:CB:63:93:C8:A1:A0:7D:E7:64:75:EB:6B:9B:F9:5C:67
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer: /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial: 019CAC7E04685FD9C2C1ACB52BD48899AEE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number: 184D
Signing time: Mon 02 Mar 2026 03:01:05 +0000
Manifest this update: Mon 02 Mar 2026 03:01:05 +0000
Manifest next update: Tue 03 Mar 2026 03:01:05 +0000
Files and hashes: 1: ExGpRunqaEGx1C87iYbOQskR5uw.roa (hash: RiaEfvnW4XKOfGx9ToOnBoSA9Vrw+toQDu46/ctYlAQ=)
2: SH-0mJS__xq0Nrwordyx2eNpy6E.roa (hash: MFyq3HcX0V4paZzyvO44VehUzFoDp8T3DaYSoMIBwAg=)
3: eUXXUdsIFWgmK4QDPBj079S1krA.roa (hash: tLqc3PNhBtm/slptj0WlzHoHZqeLEYUFaZxJp22uQOY=)
4: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: Qf8J/s/hHRbYyvhAEtn/dYYfDMFsi9JU8Pe2Ckaeuqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:04:68:5f:d9:c2:c1:ac:b5:2b:d4:88:99:ae:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
Validity
Not Before: Mar 2 03:01:05 2026 GMT
Not After : Mar 3 03:01:05 2026 GMT
Subject: CN=23e51ee3cb6393c8a1a07de76475eb6b9bf95c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ab:84:f8:13:44:6a:d1:44:93:bb:3a:21:c1:
c4:96:ac:9d:db:04:27:19:d8:4c:9a:e5:ae:55:3e:
ef:de:8f:44:8e:75:b4:db:4d:c6:af:28:6e:8e:c7:
ea:1f:c3:d7:5c:1a:6f:fe:16:fa:fd:8d:b3:fc:e2:
7f:41:14:86:fd:07:70:d7:91:ba:13:33:80:09:af:
41:ff:16:77:68:03:09:11:6f:d4:ac:d4:03:a4:92:
ca:4c:7e:aa:80:16:5d:d1:98:d6:24:8b:59:4c:d7:
47:f9:a1:c8:1a:4b:ab:e0:e6:39:03:36:5e:08:e6:
86:68:f0:55:f8:19:24:7a:4a:7d:e1:8c:e1:db:4d:
62:d5:f5:f5:26:da:45:60:55:2e:e4:17:8c:fd:10:
56:e2:5f:3c:6f:35:05:47:0d:10:b5:3c:ba:42:3d:
df:91:48:99:cf:89:0d:79:25:9c:3b:02:e2:66:47:
97:f1:4c:c0:18:ae:49:ad:b7:23:1f:5c:2b:c5:61:
ce:01:cb:1f:63:f2:d9:33:fe:25:9e:ba:e0:de:10:
4f:32:a9:de:ca:9d:c8:5c:03:90:46:b2:e0:cc:85:
a0:37:ff:8e:05:37:5d:8c:7a:cb:c0:bd:a9:a0:8b:
57:2c:01:ec:89:be:c8:7c:93:03:1f:be:16:13:f4:
d0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E5:1E:E3:CB:63:93:C8:A1:A0:7D:E7:64:75:EB:6B:9B:F9:5C:67
X509v3 Authority Key Identifier:
keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:86:4f:ca:fc:63:9d:c7:f2:14:86:73:74:c7:45:ec:1e:ac:
a8:18:b5:20:04:c3:36:cf:07:b4:9d:89:d7:7a:74:44:6d:a3:
2c:10:51:b8:6e:35:4d:9c:f1:36:72:f5:66:2f:ff:8d:83:c9:
e7:45:19:4c:ee:bb:31:fc:5f:1a:8c:c4:db:e2:cb:d6:1a:c6:
d6:13:cb:9f:77:41:9d:76:0e:51:88:e6:85:6b:ba:d0:5f:1a:
8c:99:b7:43:f1:27:9c:de:af:c4:59:e1:e3:a1:53:4f:17:b7:
63:17:26:80:bc:96:00:72:cf:20:fa:a9:2a:cd:cf:c2:32:65:
f1:38:9e:ae:9d:86:8d:6f:1f:eb:21:75:84:4b:7b:01:c7:55:
1f:2b:ae:47:93:81:4d:1f:5c:a5:9a:75:a6:d4:f0:39:f0:3e:
65:59:f2:a6:5d:31:23:d1:d0:9a:3b:5e:f2:33:19:e5:74:2f:
00:a4:c6:e3:69:87:1a:ff:30:ab:cb:69:f0:bf:61:c0:f3:94:
dc:c4:37:79:d6:24:94:e5:60:cb:42:2f:47:51:4d:1c:4f:1f:
86:bc:4a:88:3b:bb:b5:65:a1:24:06:f7:ac:05:eb:85:36:89:
42:26:72:f3:b6:01:7f:ab:a5:67:d5:73:9e:9d:5e:75:72:24:
ad:4f:49:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:43 2026 by rpki-client