Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
File: tBuxzdW4a-d4BoidLhsgKswnsiU.mft (raw, json)
Hash identifier: QnlJ2sJ9rbKYuuR/kan8QINQ4HrgHZycrjSuFkVDpY0=
Subject key identifier: 4F:AF:DE:11:E3:4A:BD:BC:77:82:B6:6E:DF:36:E5:81:D9:3B:5A:20
Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
Certificate issuer: /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Certificate serial: 019CAB33EE7FD2C734FF01968EF85ABC3594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
Manifest number: 0514
Signing time: Sun 01 Mar 2026 21:00:33 +0000
Manifest this update: Sun 01 Mar 2026 21:00:33 +0000
Manifest next update: Mon 02 Mar 2026 21:00:33 +0000
Files and hashes: 1: In4EzW4PifpkipDj7qZT5AtFRqI.roa (hash: 7ol6yCYPKNd+spUojNfO6UXZVpdbeZk6ckVx301HrIA=)
2: tBuxzdW4a-d4BoidLhsgKswnsiU.crl (hash: 9S1jHa7gq8M246BGTHStyN0wmhpRLCFhZVn15fyi2xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:ee:7f:d2:c7:34:ff:01:96:8e:f8:5a:bc:35:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Validity
Not Before: Mar 1 21:00:33 2026 GMT
Not After : Mar 2 21:00:33 2026 GMT
Subject: CN=4fafde11e34abdbc7782b66edf36e581d93b5a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5a:cf:87:c3:18:2a:63:62:29:af:10:4c:78:
aa:8f:f3:06:aa:c4:2e:d3:84:f2:a8:6c:0c:ca:d4:
30:c7:90:5a:06:dc:72:65:57:0d:03:57:81:bb:4e:
59:c9:25:50:78:ce:78:ad:5b:b2:8c:da:91:b4:52:
fd:ee:f5:14:82:f6:68:22:5a:8b:78:13:5b:11:b7:
38:b2:4c:66:db:9d:3d:b1:32:95:6e:c5:da:22:02:
94:9d:e7:cb:61:05:4a:30:b9:82:9c:21:59:60:d9:
dc:1a:90:30:8e:72:4f:b5:d2:7b:ed:c0:31:54:68:
53:b1:98:b8:d2:05:de:1e:76:7f:55:ee:c6:df:e8:
b4:a9:e8:31:78:fe:0c:98:e6:27:ee:ce:d6:91:ef:
a6:02:bf:de:ff:25:a5:99:18:63:8b:35:77:62:08:
cb:d5:93:d2:fa:14:3b:a8:e1:e1:24:6f:39:bb:29:
ca:d6:49:06:05:43:db:e2:4e:16:81:fc:d6:f0:fe:
9f:10:58:7c:da:be:ab:2d:aa:af:08:c1:67:9e:a8:
bd:4d:3d:46:ab:6a:52:72:c0:3d:ef:ed:7e:ca:3e:
eb:49:a5:87:2e:5b:dc:94:3d:c5:19:cb:56:7b:12:
b8:6a:1b:e6:a0:24:78:30:6e:a2:9e:6a:69:b4:27:
5d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AF:DE:11:E3:4A:BD:BC:77:82:B6:6E:DF:36:E5:81:D9:3B:5A:20
X509v3 Authority Key Identifier:
keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:44:7a:22:d0:7f:2b:22:f3:50:eb:fd:2f:4e:7e:ad:46:4b:
f9:e3:ec:1f:f2:f6:49:39:b4:9c:6d:f9:58:ee:06:90:ab:aa:
d9:65:de:ae:95:6c:ae:6b:c7:f2:26:cf:8a:f3:d8:5a:43:45:
c4:b5:46:b6:f9:34:a6:b2:9b:b8:42:c3:c8:0a:1e:76:98:cf:
19:94:68:70:3f:1c:48:d7:7f:c9:0e:41:f4:13:f8:2e:88:d0:
68:e2:66:3a:36:96:d6:bb:bb:bc:d8:ae:ca:2d:5c:a4:82:b7:
a8:f3:79:e5:d6:39:95:e4:dc:fe:14:56:fb:69:d9:f4:cb:06:
b8:19:ca:4c:ff:ca:cf:64:bd:cf:6e:28:90:07:12:d6:97:31:
28:4e:21:f0:76:55:be:e1:71:59:cc:9b:53:61:f2:42:d9:b5:
0f:f3:db:07:e6:d3:3c:d3:b7:a5:6d:26:fd:5f:fe:49:20:16:
a8:ab:89:af:c9:e6:55:bb:a4:79:e3:04:03:f7:7f:00:27:24:
76:d2:bd:90:50:2c:d8:32:26:9a:50:fb:dc:8f:f2:a5:c7:ca:
de:50:0e:8c:29:be:9d:14:9c:95:97:4e:68:da:e3:6e:5b:9b:
32:da:ff:d6:c1:77:09:73:87:47:91:35:54:11:38:4a:92:9c:
1a:b5:dc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:17 2026 by rpki-client