Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
File: t9yTan9rpQeCJPgBc2_esNroqfs.mft (raw, json)
Hash identifier: 7IYk6fYrNGMQFfvnjDtBPFkCbc3RiSqAGdzKILG+UkE=
Subject key identifier: 88:95:2C:26:86:B1:75:90:6C:0E:5E:33:36:DA:0E:5F:6F:EC:2F:6D
Authority key identifier: B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
Certificate issuer: /CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Certificate serial: 019CAD22AE09F9FAD81FA81731CD40801D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 06:00:56 +0000
Manifest this update: Mon 02 Mar 2026 06:00:56 +0000
Manifest next update: Tue 03 Mar 2026 06:00:56 +0000
Files and hashes: 1: E5S268Ffch1NsUXm5XeEp1Xy-Jw.roa (hash: uZyNbiAwY6QAC7VVWqEYh3JF/qKdTnkMJgQyPmYloS4=)
2: H_uDKBlLLYWjSkRrdAcK39eeDV0.roa (hash: sLa+J14Ys0E4r0lAG5B4hthFqhO6LkphRctxzt1Vj/U=)
3: t9yTan9rpQeCJPgBc2_esNroqfs.crl (hash: yFS15s757uU4VouT+cKCT1p6vzucPw8RccET9Yats40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:ae:09:f9:fa:d8:1f:a8:17:31:cd:40:80:1d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Validity
Not Before: Mar 2 06:00:56 2026 GMT
Not After : Mar 3 06:00:56 2026 GMT
Subject: CN=88952c2686b175906c0e5e3336da0e5f6fec2f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:c6:d9:6c:7a:b4:3b:62:47:e8:70:18:ee:
8a:f3:20:af:0c:8c:a4:82:d1:e1:02:3b:f6:38:b1:
5c:f3:62:28:e5:c4:1c:e5:44:2e:3b:17:0f:46:fc:
50:2a:8c:a1:85:18:ba:8b:e1:21:7f:1c:1f:13:26:
80:e8:c3:42:d6:17:dc:33:62:86:b5:80:06:d1:3a:
01:f6:ea:d5:0c:0f:33:8d:06:19:19:d4:7e:ce:ba:
66:0a:ea:8c:c4:93:9b:0e:bb:fd:65:01:7d:73:1d:
46:47:69:29:cb:ec:93:2c:c0:ad:03:5e:8b:a8:58:
59:57:06:48:ec:c7:bb:08:02:4b:f9:25:32:39:a0:
a0:f8:e8:45:40:1d:93:93:11:e7:13:bd:70:a7:f1:
c5:c5:2a:62:84:cf:c2:38:72:a8:0d:0d:09:f9:cf:
25:61:db:10:2c:e2:19:96:a3:0c:4b:73:a8:c2:7d:
6c:d9:01:ea:e3:12:cd:c9:65:d4:f0:3f:d4:17:84:
9f:b9:c2:55:ea:4d:1c:1a:cc:22:52:f0:e5:88:23:
6f:41:fb:08:2b:a8:06:79:78:45:2f:c5:47:47:92:
a0:b5:2c:80:f1:15:81:bb:33:90:89:7a:c2:1c:62:
9f:ed:c1:d8:88:85:e5:e0:2e:c4:d0:b4:12:18:4f:
f2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:95:2C:26:86:B1:75:90:6C:0E:5E:33:36:DA:0E:5F:6F:EC:2F:6D
X509v3 Authority Key Identifier:
keyid:B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:10:bc:94:48:28:01:96:92:2f:40:18:0c:4d:5f:61:cd:53:
50:f6:5a:7f:65:77:ef:de:a4:e8:82:c2:dc:85:0a:ec:41:ea:
58:32:2e:07:be:12:ba:bc:e2:67:3a:a6:10:51:08:a1:2a:a6:
b0:fd:cd:3e:47:72:76:64:03:cd:f6:25:63:b2:fd:7a:78:c0:
c9:cd:5a:5e:fa:f5:34:b3:5f:61:b5:90:4c:dd:97:1e:ac:68:
c7:dd:65:50:49:f5:4f:97:59:cc:d8:85:74:15:07:28:4f:c2:
5e:5c:e2:10:85:44:a5:25:b2:4c:38:a9:3c:04:61:70:49:11:
d2:cc:ce:78:82:6f:05:6e:4f:cb:79:16:00:c2:26:d9:76:a8:
b0:8f:98:92:09:d7:44:09:88:d6:af:ee:ed:5d:31:41:d8:9b:
83:08:90:1e:1d:a8:a0:7e:69:f4:e2:2e:05:fe:ba:0a:be:f6:
da:94:f1:00:35:54:53:4a:3a:6f:e4:c2:0c:33:9a:58:8e:b2:
ef:1b:10:54:57:6b:bd:0e:87:c9:ee:f5:c9:42:46:f7:d0:ca:
42:9b:a2:06:0f:bb:8b:fc:fe:67:c3:1d:c4:a4:f1:18:e4:22:
c7:54:04:96:3a:06:3f:95:3a:a9:b5:e1:07:74:50:bd:16:b3:
c8:bc:5f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:59:46 2026 by rpki-client