Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
File: t0zj88XlovnYuKTHeoNh-KIW860.mft (raw, json)
Hash identifier: QzvZ0FxeQ1+F7MsnfosgsRhJplixRkbUZXK/12O3MG4=
Subject key identifier: CD:09:1C:48:16:2D:34:B6:07:16:19:77:B4:19:29:03:49:AA:80:08
Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
Certificate issuer: /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Certificate serial: 019CABD9E23749AF9B45B6B43B531DE7EAA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
Manifest number: 1362
Signing time: Mon 02 Mar 2026 00:01:49 +0000
Manifest this update: Mon 02 Mar 2026 00:01:49 +0000
Manifest next update: Tue 03 Mar 2026 00:01:49 +0000
Files and hashes: 1: 7yXVbkDIped5AlVJWBLhNwB93qU.roa (hash: U+X2A4hl4OztYccmnndX5mgP9l1pKYkV+aIE4TVtE9o=)
2: Lac9mI8_0GODDuYUWUFmqBSt9mc.roa (hash: CCm67OvIIp58ZZddyH8lbNoIHH7qksW59/3/CScmsJ8=)
3: g4mflD0Y4dFeWIYXrHeIdFF1Tzk.roa (hash: LWoE8PLWl9I6/87QZF5e3VTAa9OFMyf8LK0mAIwQhYU=)
4: t0zj88XlovnYuKTHeoNh-KIW860.crl (hash: vJiLOp8zU3gEioQ+nCKUwgeKCFPl8Z26YNXEv689K80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e2:37:49:af:9b:45:b6:b4:3b:53:1d:e7:ea:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Validity
Not Before: Mar 2 00:01:49 2026 GMT
Not After : Mar 3 00:01:49 2026 GMT
Subject: CN=cd091c48162d34b607161977b419290349aa8008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1f:b5:b3:77:b7:1a:85:fa:de:fb:f2:c6:55:
24:37:d5:da:3a:c6:ab:c3:14:25:4c:20:c6:e5:22:
82:41:7c:11:22:31:0f:d3:e6:20:71:b4:b9:d5:e5:
10:49:83:3a:44:65:23:19:a8:f7:28:d0:60:ca:b0:
c0:50:2d:90:c5:c3:22:f7:aa:0c:25:d3:11:9b:5a:
bb:4a:cb:f7:96:d4:b0:ca:d4:6e:24:a7:c9:5d:88:
8a:e5:f7:34:5b:25:a3:93:27:21:2b:96:15:1a:5d:
68:bf:4b:73:d1:0e:7c:a5:3d:46:b9:d8:f0:11:af:
dd:42:7d:2f:cb:e3:76:ad:2e:09:03:c8:c6:41:db:
7b:e4:d0:77:20:52:7c:99:b7:7e:8b:eb:3d:3c:63:
a7:d2:85:f6:09:7c:25:80:1d:53:25:dd:22:d0:9a:
0c:32:e0:47:a5:1e:3b:d7:8b:91:72:21:2b:94:51:
ec:45:53:64:da:8d:cb:45:54:25:90:79:5a:f1:f6:
5f:00:69:80:e0:a0:49:a2:2f:e6:ca:ff:df:6f:2b:
fb:04:d8:3b:47:70:03:28:97:72:7b:0c:6f:28:52:
c8:60:c4:29:23:f7:dd:26:1d:0b:1f:0e:60:14:29:
b5:ee:df:5e:31:56:b2:6d:d3:38:07:97:d9:8e:97:
f6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:09:1C:48:16:2D:34:B6:07:16:19:77:B4:19:29:03:49:AA:80:08
X509v3 Authority Key Identifier:
keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:07:f5:0c:3f:f7:c2:e8:00:db:0f:28:d4:8e:c4:8d:cb:fc:
35:89:fb:1f:b4:8b:be:23:63:cc:36:c3:91:a9:8b:c6:d2:5d:
ef:58:a5:74:c4:47:59:e2:e4:d0:c1:c9:56:0c:5f:97:c1:1f:
61:fa:2b:28:77:bd:34:a1:aa:27:fc:4f:dc:4f:e3:1a:51:a1:
fa:c7:a4:39:42:79:ee:2d:18:db:93:bf:03:fe:41:83:a4:e1:
09:64:b0:a3:aa:74:8c:36:d4:d3:ea:b6:d8:b3:c3:c4:eb:3a:
75:e1:92:3d:6a:bf:d1:02:c1:67:59:85:73:fe:a8:6d:58:d2:
43:0b:1c:af:21:9f:d8:f5:49:9c:dd:11:4e:c7:d0:38:b6:1a:
6f:34:06:bb:3a:54:e9:e6:8f:fa:76:f8:29:95:79:48:9f:24:
7b:a5:a5:1d:08:5e:13:55:a1:9f:35:71:91:40:5f:f5:c4:07:
9b:4e:6c:99:e1:35:b8:0a:c3:b5:5b:35:9a:72:74:85:91:26:
67:03:5f:29:b3:e5:f6:2c:9e:20:c7:fe:8e:48:44:9d:45:72:
3b:e6:6f:51:9e:db:96:8d:5d:48:3f:b5:4b:f7:cb:f3:32:81:
fa:da:6c:e5:cf:ad:8a:2c:f6:bb:4b:d4:b1:cc:b8:fc:fc:3f:
da:82:76:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:01 2026 by rpki-client