Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
File: tNc6atd6j4WbQD2yznFegtHPMv4.mft (raw, json)
Hash identifier: EMOgV7FwR7eEqpVmM4YeNXKBA2NSEz9HNF9bpm32kp8=
Subject key identifier: 94:87:03:E8:56:8A:52:30:3D:4B:EC:ED:76:5A:47:C5:37:6A:B4:A1
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Certificate issuer: /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial: 019CAB6AD0A2C6BDA6A8AAD5C756D4776B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 22:00:30 +0000
Manifest this update: Sun 01 Mar 2026 22:00:30 +0000
Manifest next update: Mon 02 Mar 2026 22:00:30 +0000
Files and hashes: 1: EQDYZSB-4iaJyQwjSjIIBQzlhys.roa (hash: TgbIpBd4+tQ0V9vZqIWgoPeSE6DQXvJ+wX5nCs7obXI=)
2: _Ww4rYBbxbAH2gUCkDRQ1hd15WA.roa (hash: 84bc4cZmGpgQymic02SrkDgsWwCytvG15eu2yEnR910=)
3: tNc6atd6j4WbQD2yznFegtHPMv4.crl (hash: gweAkjsIN4OJI8zMPcdBulMDlSzCl8Fo/Izk0szvnfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:d0:a2:c6:bd:a6:a8:aa:d5:c7:56:d4:77:6b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Validity
Not Before: Mar 1 22:00:30 2026 GMT
Not After : Mar 2 22:00:30 2026 GMT
Subject: CN=948703e8568a52303d4beced765a47c5376ab4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:ec:3c:41:03:ee:78:4a:bb:2c:d3:56:fd:
c9:ac:9e:cb:f1:fb:4b:ab:2c:e3:c4:75:a0:08:92:
e1:30:b1:60:77:0c:a0:bc:25:1f:cd:ff:59:6d:e6:
a6:30:ef:58:39:bd:de:ba:e7:14:13:5e:3c:db:7b:
82:c0:a4:36:b5:77:a3:9c:a4:97:2d:75:b2:0a:15:
11:07:3b:2a:05:b9:fe:86:f6:79:3b:f5:85:1f:2c:
cb:54:47:64:8b:bf:1c:6a:69:5f:2f:e2:3f:03:1f:
32:ce:87:71:7b:0e:e4:74:be:25:d1:22:27:46:99:
8c:f2:d0:1c:b0:ef:c0:3b:b7:27:52:e0:a4:1c:d6:
4e:24:11:d3:c3:7d:30:b2:8b:78:29:da:28:9b:17:
90:5d:08:8b:c6:4b:c6:30:87:f6:32:15:e0:f5:de:
96:34:4e:e3:42:65:43:79:d1:21:42:b6:47:ab:5d:
84:2b:94:d6:3b:29:86:83:21:9e:b0:6e:c1:7e:66:
5d:d8:ff:45:3d:63:10:d7:2a:12:1b:bc:9a:cf:48:
03:58:ed:bc:81:c6:ad:5e:d6:75:ca:2b:ec:de:c3:
0f:42:af:8b:41:1a:45:db:00:0d:b6:fd:3f:56:98:
e4:93:20:fd:b4:6d:1b:56:9a:a2:2e:5c:f1:49:b8:
56:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:87:03:E8:56:8A:52:30:3D:4B:EC:ED:76:5A:47:C5:37:6A:B4:A1
X509v3 Authority Key Identifier:
keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b9:70:fc:3b:aa:3d:e7:02:13:a0:25:c1:ea:9b:95:fc:ca:
57:5b:de:c1:41:3a:33:7c:6a:03:d4:ba:c3:39:00:d0:40:52:
3c:a3:dd:66:69:00:5a:d6:93:b3:86:08:9b:a2:b4:d7:89:63:
ab:ef:99:b8:f6:e3:44:5f:c5:fb:f1:4d:f4:06:58:ae:69:d8:
a0:15:d5:b0:cc:67:17:eb:12:4b:cf:76:9d:a9:bd:ee:05:55:
e5:b6:fa:40:66:38:8b:57:18:1a:e2:13:9c:1d:33:f9:02:93:
4e:0b:57:c0:39:f3:ed:21:ab:d6:b6:b4:4d:6e:22:77:02:de:
07:74:21:b6:28:c6:92:b0:df:ad:56:f8:ec:24:5a:7a:75:f4:
a4:b6:c0:64:1c:cc:74:e4:d6:49:7d:3b:2a:90:77:88:73:78:
cd:dd:38:e5:94:53:99:f6:58:58:86:f6:9a:2b:d9:ae:be:83:
63:22:b1:85:bd:db:5f:05:1c:6a:f9:0c:6b:a6:32:07:13:9f:
53:32:ed:01:68:86:69:7f:c1:97:86:88:58:d7:1b:e3:f9:ee:
f3:9c:74:d1:3b:1b:bf:91:0f:08:c1:25:4e:33:70:a3:b4:70:
82:05:3f:51:7f:77:3b:ec:f7:3d:9d:57:fc:f5:6a:b2:6d:62:
aa:c8:1d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:17 2026 by rpki-client