Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
File: tRidnqgtX7tm1sEfGHYzR2A04N4.mft (raw, json)
Hash identifier: pAZv/+a1HeQxhmogKaHJc46NpuckBjnaqo69dIpNH5g=
Subject key identifier: 57:CC:4F:0F:52:06:44:48:C0:B9:49:AA:FB:8C:E2:11:15:17:B2:5A
Authority key identifier: B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
Certificate issuer: /CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Certificate serial: 019CAA586483183ACB5BB7BAE52290F75A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
Manifest number: 27
Signing time: Sun 01 Mar 2026 17:00:45 +0000
Manifest this update: Sun 01 Mar 2026 17:00:45 +0000
Manifest next update: Mon 02 Mar 2026 17:00:45 +0000
Files and hashes: 1: 7GwQxSlC6XgRoIpTEwZKgVnWS-4.roa (hash: xTOxR17JVwPWxSBMYNixvTz0OcXATfB8jZao2sdgwZ8=)
2: PoRIN0dVSAqaAWKn9ELbCUPN7Jg.roa (hash: LsqKFis/T/54SQiHP5UPnUKT29GNEt5RyIpD8UjP9yM=)
3: TeVnupeK_YGYnRPsXm4BzJfTjS8.roa (hash: +to8DEmlcRGaEadfSEWc6hlZ2GarI7KNFF5xKs1DZR0=)
4: a73ilWUc_Nrs3Jl6BZxzTzmJLZs.roa (hash: WvDo87B2C+QVONEixLsbWJGXRyfPQL9c6V0kT+6W0SI=)
5: p3wpRRs-f7GQUm8KtIUlma6wjSs.roa (hash: 90E81RrURGxHLOrJQ2EQ5/Y8TtYWMesX5r41cRtv1NA=)
6: tRidnqgtX7tm1sEfGHYzR2A04N4.crl (hash: BDG1y/Wn0LMHmOnM6Qjr7wKCcnLlORS4bMMhabrX4cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:64:83:18:3a:cb:5b:b7:ba:e5:22:90:f7:5a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Validity
Not Before: Mar 1 17:00:45 2026 GMT
Not After : Mar 2 17:00:45 2026 GMT
Subject: CN=57cc4f0f52064448c0b949aafb8ce2111517b25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:fe:36:2d:9b:db:84:50:a5:e4:cd:5e:91:
9a:98:2f:6e:3c:52:ca:17:72:7f:bb:54:0d:3d:76:
1f:3d:73:c5:03:eb:e8:0d:89:a2:42:85:62:13:08:
ea:cf:65:fc:9d:0a:7d:23:ad:11:56:33:0a:ef:c5:
6c:43:6c:2a:e1:f3:8f:02:7d:9a:b4:d7:65:ea:f7:
8a:09:34:f9:e7:fd:ef:95:45:f1:ee:20:c0:01:f4:
ab:85:5c:82:bf:6c:fd:4a:f4:d4:2e:a7:f2:72:0c:
4f:6b:d5:96:42:41:71:49:cb:a9:00:65:76:62:48:
c2:e6:8e:c2:d8:95:08:55:b7:77:9b:a8:f5:b9:d0:
7c:67:2d:a6:c9:6f:a6:40:75:de:73:52:44:9f:e7:
6a:26:26:9e:0a:25:75:a2:fb:97:91:cb:bf:e8:4a:
8c:da:65:4b:b8:0b:ec:fd:cc:4a:3f:1d:61:68:f2:
92:6c:3b:04:0d:c8:45:29:cc:92:05:c1:f7:df:77:
2e:a7:4f:eb:f9:ca:69:11:aa:86:41:cf:49:01:55:
c2:3c:4f:d2:cb:74:37:49:ef:07:57:cd:20:a0:ae:
28:13:52:06:04:08:b5:c6:28:bf:98:fb:f4:82:18:
b6:f8:20:13:3d:ec:9f:f8:33:5a:1c:3c:20:31:14:
f3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CC:4F:0F:52:06:44:48:C0:B9:49:AA:FB:8C:E2:11:15:17:B2:5A
X509v3 Authority Key Identifier:
keyid:B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1a:73:d6:fc:5d:87:d5:3c:e8:2c:ca:06:76:32:5a:9d:2a:
0c:62:04:b3:aa:83:aa:eb:2e:e8:5d:0c:71:3f:4c:f6:0a:58:
c1:f5:bf:42:95:20:ad:98:5d:d3:0d:dc:41:a2:6a:13:10:6b:
c9:e8:14:d7:6b:4f:99:ab:58:03:09:c9:0b:8f:3f:1f:ed:cf:
cd:be:63:e5:a4:29:60:19:28:ed:ac:bc:8c:13:0d:85:e8:dc:
ab:8a:1f:1c:6b:5d:8c:bb:a6:a6:0e:12:0d:81:a1:c6:4c:0b:
62:7a:76:3d:4a:ff:63:4e:cc:43:22:4a:0d:ad:0f:63:bd:28:
20:e3:6c:d5:74:10:6c:19:31:57:bd:01:d6:98:4d:90:60:c8:
f9:5f:90:37:fb:b8:b0:73:36:0f:06:42:f2:94:59:b5:d8:e6:
20:9b:9b:94:3d:a7:33:a3:d2:c3:2c:41:83:7e:d2:a0:c7:5f:
2b:7f:9d:10:44:c8:7f:38:dd:5d:a3:07:1f:91:44:34:28:28:
20:80:45:72:5a:9c:0e:53:ca:07:99:62:99:e9:20:3e:68:94:
19:e6:65:8a:a2:0a:28:9e:60:72:8e:25:70:92:cb:f7:b1:59:
ec:49:c5:93:9c:31:84:3e:2e:e7:2b:89:10:e9:a7:49:cd:3c:
20:52:34:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:19:33 2026 by rpki-client