Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
File: t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft (raw, json)
Hash identifier: ih+SnOHDthlR1Urr+5J4zbXIzpL5ND8uaQARddTqdoQ=
Subject key identifier: 1E:CE:5F:2D:9B:0B:C4:EB:35:36:6E:29:CF:5F:B1:34:30:5B:D8:31
Authority key identifier: B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
Certificate issuer: /CN=b754b22c5540508d9629a311ef1e83543657c4ee
Certificate serial: 019CADFE879EEB1C3DA16D85C821DAD1D3E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
Manifest number: 0358
Signing time: Mon 02 Mar 2026 10:01:05 +0000
Manifest this update: Mon 02 Mar 2026 10:01:05 +0000
Manifest next update: Tue 03 Mar 2026 10:01:05 +0000
Files and hashes: 1: 1LsBmA-SbOfGa2eleJLL4F-PoS0.roa (hash: fOsQjw7Bt8zL6Bscj5Hp28N4r7Zpof4N2iXErdaa6yA=)
2: t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl (hash: rkoRSFpMkAz07S5RmLvsbOBXK8Itua3WmOejBzbGvEk=)
3: yUSfqsPPl1YTQhIE73fMTmMnfkE.roa (hash: yAZHs4HcwBg1li8wEtRge9Bo9Q1pztQUu5urOyY+7Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:87:9e:eb:1c:3d:a1:6d:85:c8:21:da:d1:d3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754b22c5540508d9629a311ef1e83543657c4ee
Validity
Not Before: Mar 2 10:01:05 2026 GMT
Not After : Mar 3 10:01:05 2026 GMT
Subject: CN=1ece5f2d9b0bc4eb35366e29cf5fb134305bd831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:c3:97:bd:3b:cf:4e:30:01:5b:4c:12:67:
34:86:03:ff:0e:1e:45:21:bd:66:1a:5f:f3:ba:ec:
e4:0c:e8:5a:b2:e6:a0:cf:43:7c:89:f4:be:5c:bd:
37:96:ea:1b:b6:25:a8:42:8c:31:bb:f2:d7:3a:e4:
01:f2:c0:05:2e:cb:e3:b2:a2:75:7c:0a:29:27:c6:
52:e9:29:01:4e:fe:47:ae:86:dd:39:ce:40:7b:2e:
ee:64:d9:0a:12:db:96:11:37:a1:e2:6b:2c:10:d8:
46:55:86:9b:c6:69:cc:45:96:54:72:c6:b2:bd:18:
79:1b:e4:09:d7:83:5b:d3:af:c3:99:6a:e2:94:f7:
8d:01:e2:ac:87:98:98:99:f3:62:92:50:e8:6e:77:
fd:1f:64:c5:e9:88:be:dc:8b:94:4e:62:e6:30:46:
7c:cb:cb:a9:dc:fe:d9:ef:e5:0c:6f:ce:af:08:46:
65:f4:9a:99:36:34:af:41:b0:57:1a:09:c6:8b:d1:
4e:84:e0:71:52:a5:b4:0c:4d:11:af:44:2d:c2:6a:
0f:37:1c:d4:04:2d:1c:d2:fb:75:9d:d2:dd:f3:ac:
d4:f2:e5:2a:33:0b:01:58:91:fd:28:78:7e:2a:c9:
3e:7b:b9:c8:b8:3f:d4:62:63:e7:19:d8:7b:e6:85:
4f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CE:5F:2D:9B:0B:C4:EB:35:36:6E:29:CF:5F:B1:34:30:5B:D8:31
X509v3 Authority Key Identifier:
keyid:B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:3a:f0:d1:69:36:40:76:ce:92:56:1c:a1:3f:a2:07:30:c8:
72:5c:18:61:28:6d:c4:bf:d3:04:90:fd:d1:1b:79:b6:ed:23:
c5:95:f2:c2:e3:72:76:c6:8f:ea:00:80:7b:cf:62:36:26:fa:
47:99:19:64:0b:3f:81:4a:eb:a6:fe:44:24:d4:ce:91:ad:9a:
23:62:df:f6:91:c4:1e:1a:6d:60:35:6d:43:2f:7d:fa:e1:30:
6e:88:88:81:d9:9d:3f:f2:f3:1f:59:f4:6e:dc:6b:da:36:27:
b3:e7:17:ec:17:84:a4:c5:f5:bf:69:20:19:8a:83:6a:c7:22:
69:66:d9:22:34:d5:8d:dc:1c:01:4e:95:77:60:5e:db:5e:fb:
7e:11:a5:a2:72:89:1b:51:94:c7:e4:bc:e2:2e:05:eb:d0:92:
47:64:81:22:5a:ab:cc:69:0a:e8:68:00:63:80:e2:b6:67:55:
76:a2:06:56:a2:1f:cb:3e:14:33:97:58:9a:24:64:56:d3:83:
f6:a6:18:f4:d6:7b:1a:82:74:cf:54:0c:f9:fa:4d:13:46:84:
76:fd:59:9d:e1:f3:ca:43:cc:6c:51:a4:d3:6f:b5:33:cc:b1:
e2:39:86:4b:71:07:3a:10:8c:54:ae:4e:b6:42:63:18:26:db:
c4:78:61:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:12:47 2026 by rpki-client