Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
File: tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft (raw, json)
Hash identifier: kP/2UGojK1sJsMqCvZHkn4I8mqLyAPnHoeivaLPjBp0=
Subject key identifier: 5A:A2:F6:25:D3:9F:11:27:56:6C:61:07:36:8A:25:F8:01:96:F1:C0
Authority key identifier: B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3
Certificate issuer: /CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3
Certificate serial: 019CAB6B635ADB075E64965FF6FE6785B2DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 22:01:07 +0000
Manifest this update: Sun 01 Mar 2026 22:01:07 +0000
Manifest next update: Mon 02 Mar 2026 22:01:07 +0000
Files and hashes: 1: tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl (hash: Zz2u8KWK8Qv1bLswAJb2+L81GcitAlPT37LltIaYOYs=)
2: yZwyp6pL6dNlodNGDiCb82xzbNo.roa (hash: LBR3tLVZPF+ibt91CHtQViRrck7hdn7NxiOMDBIBNf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:63:5a:db:07:5e:64:96:5f:f6:fe:67:85:b2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3
Validity
Not Before: Mar 1 22:01:07 2026 GMT
Not After : Mar 2 22:01:07 2026 GMT
Subject: CN=5aa2f625d39f1127566c6107368a25f80196f1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fe:4d:ab:12:65:9c:2b:6f:d5:94:37:b5:39:
86:9b:db:7b:3a:9a:34:87:64:3b:c6:5a:be:6c:78:
1b:42:6a:f4:d1:40:27:9c:a4:74:cc:14:00:3d:bb:
c4:7a:d1:ab:57:7d:8b:ff:4a:45:aa:97:a3:cf:a0:
29:de:1a:6b:98:04:09:25:e2:25:eb:19:1e:1d:e5:
38:39:4b:d4:89:a0:da:f3:82:ce:c5:b6:c4:bf:f0:
17:65:4f:05:19:80:4b:d6:fa:1c:66:da:09:4a:dc:
59:35:a7:b3:e3:b5:9c:0d:be:09:1f:6c:93:67:17:
73:55:0f:1d:29:0e:c9:0e:6f:7e:c2:c4:0f:96:44:
6f:c9:b0:1a:ec:0c:07:e0:37:d4:e4:13:6f:e4:74:
58:01:c6:54:76:e7:f5:53:b3:e9:59:a8:89:ca:96:
5c:f6:c6:33:a3:4b:21:19:bf:9b:1a:df:cc:d1:1a:
aa:9e:d1:99:7d:c7:6d:b5:ff:b9:43:b4:76:ba:a0:
82:04:bd:d7:3f:9c:57:ea:38:f4:78:57:34:41:be:
b4:71:38:60:04:13:a8:87:2e:35:26:f0:06:21:ce:
6d:27:36:98:37:f1:e4:a9:af:c9:6b:55:68:8c:56:
66:75:9d:52:81:41:71:2b:de:03:e5:1b:30:8d:c5:
30:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A2:F6:25:D3:9F:11:27:56:6C:61:07:36:8A:25:F8:01:96:F1:C0
X509v3 Authority Key Identifier:
keyid:B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:37:a0:67:95:2b:71:29:58:26:60:cf:f0:d2:eb:73:a0:28:
79:80:94:0a:64:23:43:5d:2c:96:6a:c9:24:6a:db:dd:fa:df:
d4:ec:52:15:fc:7c:11:f8:c9:cf:45:93:8b:9d:28:25:dc:90:
44:c9:0f:28:9a:85:27:ae:13:9f:96:4c:f5:05:32:0f:5b:04:
87:d8:8e:8e:72:d0:bc:43:b7:07:05:74:bf:69:1b:a3:3f:67:
b0:88:0b:bf:df:f4:9b:45:d7:f5:27:c4:6e:ec:43:2e:1f:0b:
bb:3a:d6:32:c4:a9:98:9b:40:b3:06:e8:21:9a:c1:7a:32:a5:
67:ca:c1:1c:b5:22:dd:e8:05:a8:83:fe:51:87:b3:ce:1c:0d:
33:31:03:62:69:7e:9a:1a:58:3d:7b:17:56:a2:49:4c:c4:d6:
a6:5a:2f:23:ee:66:40:90:b8:ea:07:10:27:c9:06:ac:6b:e3:
61:31:a2:ed:6f:eb:1c:b3:13:de:31:3b:2a:5d:df:3e:7e:f2:
b5:59:ff:3e:04:1b:50:3a:4c:8f:5a:09:72:ed:bd:91:79:8b:
1c:c0:c5:22:e2:52:d9:6e:14:99:64:a3:60:89:7f:10:6f:bf:
7a:d6:7e:4b:11:0e:54:ff:c7:4a:aa:71:1e:40:fb:1b:72:12:
d1:7f:a4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:08 2026 by rpki-client