Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
File: tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft (raw, json)
Hash identifier: OICJBYFq7KKpPjUBvC52niIlfqSqN0yOOzPPvNy3X5Q=
Subject key identifier: 1F:00:D0:7E:20:61:C1:8B:B6:CF:77:80:BA:65:AD:26:67:5D:EE:03
Authority key identifier: B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
Certificate issuer: /CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Certificate serial: 019CAA589F674D10B584FAA061DD24DEC5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 17:01:00 +0000
Manifest this update: Sun 01 Mar 2026 17:01:00 +0000
Manifest next update: Mon 02 Mar 2026 17:01:00 +0000
Files and hashes: 1: 9zCWH-Ac1Rhc3_vCx_Ixlkh16vw.asa (hash: 1GzmLCaUmzKWkWm0Xkaj4ZmWi88kwnMLhp1nR2/73XM=)
2: Ay40Es4lmjK5Q5DTaQo_Rj0Il34.roa (hash: l6a+NksOUtbW9bPUki0o5wq7kn4tvxRKIpI840BR/qo=)
3: tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl (hash: 35Tbycbs20byIJq0hR9myZa0RupaDvbIOEAu/KbASas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:9f:67:4d:10:b5:84:fa:a0:61:dd:24:de:c5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Validity
Not Before: Mar 1 17:01:00 2026 GMT
Not After : Mar 2 17:01:00 2026 GMT
Subject: CN=1f00d07e2061c18bb6cf7780ba65ad26675dee03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:92:2a:f9:0f:b8:7a:5a:5d:9c:f9:a7:f3:
5e:bc:be:e1:81:dd:a9:0d:9e:60:3a:0f:3e:c7:36:
70:52:af:23:ad:95:4c:39:6a:dc:89:eb:1f:cd:f5:
01:20:e4:ac:71:ea:83:0f:2c:1b:60:c0:c6:4b:60:
a0:49:97:83:ca:90:87:b7:ce:46:b0:44:32:b0:5e:
ba:a2:d4:3a:c7:23:b2:ed:98:5d:9d:ec:4a:fb:24:
7b:ca:cc:97:72:b7:26:02:64:f2:8b:a8:72:27:9f:
78:5a:d0:85:ba:8e:03:ee:56:4b:fa:eb:ad:b4:ba:
21:eb:48:2f:dc:2c:82:49:69:2a:3b:3b:49:1b:5f:
e9:75:2e:08:fb:c5:18:25:6a:11:6f:e4:48:0d:ee:
09:b5:72:a8:bd:ce:c7:52:5b:2a:54:2a:a9:34:35:
6f:f6:74:fb:e9:15:e3:9a:f8:01:1a:1d:3b:af:cb:
c5:ba:21:10:e0:d2:97:95:64:6c:3d:e7:38:28:dd:
15:10:d7:e2:a4:8f:e9:e1:f0:b6:b5:2d:39:79:55:
98:8d:a5:23:0c:a7:7c:78:50:4b:47:12:ee:a6:4a:
b2:2b:fa:89:fa:2f:9d:0a:b0:00:f1:91:dd:64:93:
fd:d1:32:bf:15:97:1e:94:8f:b4:68:d6:03:71:4d:
62:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:00:D0:7E:20:61:C1:8B:B6:CF:77:80:BA:65:AD:26:67:5D:EE:03
X509v3 Authority Key Identifier:
keyid:B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4d:12:91:cb:25:70:c3:dd:bc:ad:37:ad:38:76:30:cb:92:
46:9f:5c:6c:4c:02:12:00:ca:f5:c0:4f:fa:45:e7:3a:fc:31:
6e:8b:50:e1:18:f5:b0:1b:7f:b1:77:07:55:dc:88:20:a9:9c:
33:d8:65:31:3a:26:e6:c6:f7:08:44:94:c2:66:3b:19:72:0b:
ea:12:d0:8f:71:f1:73:74:80:f4:ba:62:f1:af:42:3c:a9:08:
03:2b:6a:c0:7d:aa:6b:4f:f5:f4:8b:d4:de:c7:2b:c7:3c:77:
f1:f8:9e:98:55:dd:43:ef:39:8c:04:f3:28:20:a9:fb:9a:1f:
f4:dd:7f:f0:b6:45:73:0f:9e:80:8d:42:e1:3f:8e:1a:ac:d9:
0b:58:b8:f4:5b:be:92:8c:9c:73:5f:09:32:8b:16:cf:88:4c:
21:d1:f2:2c:ff:64:82:56:b9:8c:07:60:ee:e0:7d:6f:68:a4:
57:8b:c1:68:32:9f:76:2f:bb:32:59:e1:52:7d:e4:e1:3c:ff:
1b:5a:aa:55:75:d1:af:d1:a5:c4:92:b9:21:8b:9e:0d:2f:ec:
60:e3:0c:3f:c3:dd:e7:07:b8:49:23:a3:06:fd:4c:f8:17:a6:
3c:b4:b6:5a:6c:21:e6:4a:54:1f:9c:df:e1:0a:fc:8d:4d:22:
32:1e:45:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:31:44 2026 by rpki-client