Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
File: tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft (raw, json)
Hash identifier: 4+16QGiaq45cSaSSpx6EIvBkwxdzkXf3j1Y7UY6Qs98=
Subject key identifier: 74:FA:CE:EF:EE:A1:D5:06:38:95:0E:91:25:D0:93:3A:75:34:D9:F3
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Certificate issuer: /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial: 019CAE357AD75EF8BA44AB91BCABAF09CC5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
Manifest number: 15CB
Signing time: Mon 02 Mar 2026 11:01:06 +0000
Manifest this update: Mon 02 Mar 2026 11:01:06 +0000
Manifest next update: Tue 03 Mar 2026 11:01:06 +0000
Files and hashes: 1: 7zP-vrGMSLLfqRfiE-wgv93MQnc.roa (hash: RFbWknjP21J0ZtXdcY+/jqdLrNcb7a87Mqd1uXals1g=)
2: GmKON0n4q41F09JbkIeSWlYg2vg.roa (hash: MA8HRllJQ5XTGjB4uhWUi8OdDfPzCM6iy7P4PReIInE=)
3: tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl (hash: 7d+yoPfGESbrHIZx8rSGm3NGGm2LSVGotW1f3RsEhYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:7a:d7:5e:f8:ba:44:ab:91:bc:ab:af:09:cc:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Validity
Not Before: Mar 2 11:01:06 2026 GMT
Not After : Mar 3 11:01:06 2026 GMT
Subject: CN=74faceefeea1d50638950e9125d0933a7534d9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:63:22:af:bf:b5:7d:f7:90:bc:9c:af:29:09:
8d:08:0e:74:74:1d:27:52:80:72:18:9a:5c:d5:fd:
5e:40:de:fc:50:68:b8:d5:85:f8:72:2d:45:41:34:
35:fa:e2:a3:d5:6a:55:60:c5:f3:03:3b:e0:b2:ee:
c3:46:ba:59:f4:bd:e0:4a:91:05:cd:57:93:fe:21:
e1:5d:62:d5:22:52:2a:4d:e3:c3:a5:6e:4f:53:01:
d3:ae:4d:4b:e3:7f:48:73:6c:91:53:37:e0:eb:e4:
fb:d4:e5:53:21:75:3d:59:44:31:4c:48:e7:dd:dc:
c6:95:42:cb:ab:6b:2d:62:14:0f:2b:69:8c:ac:9b:
ae:ee:fc:46:8e:73:53:36:02:26:11:b8:40:c6:d6:
52:a0:f4:8a:1d:be:5f:88:5a:f7:29:61:89:68:af:
4d:b9:95:24:78:d9:6f:f8:7e:de:b9:f1:b5:63:eb:
eb:3b:5c:52:6c:f7:96:c9:73:0c:a2:7e:be:2c:bc:
3e:c0:23:0e:13:68:ed:e5:f1:89:f0:46:da:46:b6:
ee:3f:11:88:d6:c6:4a:15:88:70:1a:10:75:1b:55:
ef:7d:53:a1:66:35:31:d2:74:84:34:42:29:80:ad:
c1:64:c4:30:94:72:11:62:41:80:7d:16:9a:5b:46:
2a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FA:CE:EF:EE:A1:D5:06:38:95:0E:91:25:D0:93:3A:75:34:D9:F3
X509v3 Authority Key Identifier:
keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:dc:2c:02:90:53:4b:21:09:52:7f:09:88:d4:b9:42:11:4f:
f4:c1:7f:1b:ce:76:27:9a:2f:01:ae:bf:10:a7:36:7f:07:44:
81:42:6f:3d:5b:d4:87:80:95:9d:9f:1e:4e:f9:aa:61:4a:4c:
86:e2:5a:22:d8:cb:4f:90:00:b6:20:b4:0c:d4:19:19:b2:18:
a1:5a:24:e5:ee:91:60:7c:4c:56:e6:c8:30:76:38:01:1e:63:
36:05:a8:ad:ba:19:57:b9:ad:f4:2a:fa:49:ec:fe:6e:d5:9b:
1e:8a:f2:09:2b:80:ff:6b:cd:39:17:e6:87:38:7e:d4:86:de:
52:ea:83:00:9d:27:21:1b:38:74:c1:b5:d8:48:b9:d6:21:d8:
2e:cf:b4:d1:51:ab:ce:fd:fe:d7:ea:54:8c:47:96:ed:f6:cd:
39:d6:4d:23:0b:b2:01:c8:e4:1c:8f:2b:3e:87:13:4a:11:95:
45:04:57:a5:09:6d:56:c0:97:a6:6b:e0:1e:bc:68:65:54:6d:
7b:e8:6a:db:48:82:90:ed:38:a7:eb:62:ec:13:12:13:fa:50:
1b:93:54:94:0c:17:8f:58:90:5e:34:80:c8:90:37:e1:1c:b8:
3b:87:04:e7:6f:d4:55:a8:51:17:6d:01:f9:ce:35:45:e5:7c:
bc:84:30:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:22:33 2026 by rpki-client