Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
File: tiuWfFIUXmeksyBrHKSShTyg34Q.mft (raw, json)
Hash identifier: 7WKvewEIdV0RkLZWYO/bLSaqgkgEN3UMfw5oTXnzNfM=
Subject key identifier: 0C:B0:1F:3C:C3:14:FD:45:2F:8C:F9:8F:E9:B0:EE:5A:45:1B:DE:AE
Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Certificate serial: 019CA8335F9A821BDCD5F64E0749928A3F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 07:01:04 +0000
Manifest this update: Sun 01 Mar 2026 07:01:04 +0000
Manifest next update: Mon 02 Mar 2026 07:01:04 +0000
Files and hashes: 1: A6OsoYIYGh2Z_D1_x4aYKOVS478.roa (hash: R4DsSDCiEh+974EKIZS8RQ1BClrbE9cHjb1aIFSzJGw=)
2: _dnntVUjWH4EUr4UpgbEErzH-do.asa (hash: vI/4RAPzURUhd78xQi/Y6eBRsyDpScnrAtCWF0EcTGY=)
3: tiuWfFIUXmeksyBrHKSShTyg34Q.crl (hash: jlKl7rKFLOXMkxcnWTXi4/NGBIq8OTPrDDXHrX5TNrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:33:5f:9a:82:1b:dc:d5:f6:4e:07:49:92:8a:3f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Validity
Not Before: Mar 1 07:01:04 2026 GMT
Not After : Mar 2 07:01:04 2026 GMT
Subject: CN=0cb01f3cc314fd452f8cf98fe9b0ee5a451bdeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2b:1f:24:f6:eb:d1:21:3a:f0:78:9a:10:9b:
65:d8:f3:a9:d2:f2:c9:4a:0b:f9:8f:dd:31:02:84:
a6:56:5c:bb:af:ff:2a:5a:78:56:bf:ef:7d:9a:1b:
a1:27:56:f0:63:a8:f7:cf:a5:83:0c:18:f2:8a:70:
fa:d3:78:13:10:bf:d4:3b:e5:8d:e7:76:00:9a:23:
40:87:1d:02:b6:88:30:fe:a0:15:20:59:73:d1:ba:
18:6d:ed:ff:df:e2:3b:ea:0e:e2:cc:70:36:5e:d4:
9e:bb:14:ff:49:1c:78:6c:7d:76:29:bd:64:70:25:
3d:18:1d:10:a1:f0:37:12:a5:97:96:a6:3c:40:b5:
c8:d0:80:50:df:3d:01:c6:b2:c7:6e:32:90:32:40:
c6:21:4a:11:55:d8:35:cf:e2:dc:eb:88:ed:3e:7c:
14:68:fe:09:fa:4c:99:e3:68:a7:62:84:8d:0c:0f:
ab:28:26:3b:71:ca:42:25:d6:95:25:22:ca:40:e3:
ac:e9:da:c6:dc:6e:ae:d2:53:75:3e:15:a5:6b:5f:
a2:89:24:e4:a4:c6:9f:29:d6:d4:73:02:7e:d5:e5:
66:80:11:a1:f5:e9:a7:e9:3f:fb:f2:09:6a:c3:f3:
17:16:c1:6d:bf:b6:71:73:c2:51:ea:8a:74:61:ed:
22:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B0:1F:3C:C3:14:FD:45:2F:8C:F9:8F:E9:B0:EE:5A:45:1B:DE:AE
X509v3 Authority Key Identifier:
keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:35:6e:f2:0a:d2:9f:ed:99:ba:e2:2a:46:45:04:62:27:22:
21:2c:40:6e:ae:36:d7:d3:a6:1b:41:f2:53:79:c1:9e:e8:98:
fc:b2:f0:e9:b1:d9:b2:f0:88:bb:de:f3:14:12:37:cf:3b:d8:
cd:f4:31:45:30:4a:64:0e:f1:20:38:09:5b:e3:71:48:98:b9:
2c:36:88:8a:86:68:21:2d:90:5c:02:8e:04:58:bf:6b:c7:03:
4d:34:2e:e9:4d:3c:b3:99:73:53:63:35:2d:4f:39:94:d1:77:
4a:43:ca:c3:0e:36:97:33:3f:90:25:34:2b:00:41:ce:e4:d7:
ba:d7:1b:c1:4f:41:eb:b8:dc:a2:8d:34:1f:cf:bf:56:ea:c2:
47:de:39:e8:67:cb:fb:c7:c7:3c:10:c9:5e:0b:6a:bf:7a:27:
f3:5f:50:10:e9:22:68:33:04:a9:13:88:b5:7d:c4:d3:64:de:
01:8e:08:25:ed:ec:c4:db:ed:60:b5:98:a2:f0:98:4b:41:ad:
c9:68:c3:ba:0b:30:01:e7:49:ef:fd:5e:8c:63:47:66:c9:61:
fc:f0:b4:e8:9a:0f:13:02:ca:d6:bb:2d:8b:d9:e8:40:24:ae:
f4:7e:00:a9:df:ee:dc:be:fc:91:ac:62:65:50:bb:ab:60:21:
4f:25:59:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:48:03 2026 by rpki-client