Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
File: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft (raw, json)
Hash identifier: PLtjuT+VjkKhlG8CSF2Y+I8a3QFSohsB/nx5rmaSZd8=
Subject key identifier: 31:CD:34:CF:85:4E:51:87:0F:A2:E6:0D:56:45:7F:60:21:52:FD:DF
Authority key identifier: 4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5
Certificate issuer: /CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
Certificate serial: 019CAA58987F214B0ECF797A4203A0C875DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
Manifest number: 0F2C
Signing time: Sun 01 Mar 2026 17:00:58 +0000
Manifest this update: Sun 01 Mar 2026 17:00:58 +0000
Manifest next update: Mon 02 Mar 2026 17:00:58 +0000
Files and hashes: 1: Mw_jlWOX47w8ZEpuvWB3HZ4VYvQ.roa (hash: sfhBIh2mCq2mgYz96ptYyTEOfSgYQ6EGFDmjhxXGLyI=)
2: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl (hash: zvk8d9CqpvrBrR4pR8kO7JVIY32/CCQulVf3AbGgBWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:98:7f:21:4b:0e:cf:79:7a:42:03:a0:c8:75:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
Validity
Not Before: Mar 1 17:00:58 2026 GMT
Not After : Mar 2 17:00:58 2026 GMT
Subject: CN=31cd34cf854e51870fa2e60d56457f602152fddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:08:13:5e:5e:7d:7f:e8:31:32:4a:04:ed:e8:
8a:b1:31:fc:25:78:e0:dc:da:ef:4e:eb:1b:14:58:
80:78:a6:4e:1b:17:be:d5:45:f4:d0:7f:30:ae:3b:
cc:ae:4f:3a:1b:2a:f1:78:3c:70:2e:77:e2:e7:3a:
9f:18:7d:12:0d:2f:2e:d0:d2:3d:a7:22:af:39:90:
87:8d:ec:0a:79:b7:81:43:b2:06:da:48:24:b5:8e:
07:3b:0d:42:9f:a1:3d:6f:55:f5:4e:6f:a6:36:31:
85:c5:2f:3d:f6:de:c6:49:be:6f:0f:55:d0:13:a3:
74:63:4c:6a:12:c1:51:6b:32:c0:0f:e1:83:01:c2:
48:6f:00:33:82:9b:a7:e0:5e:64:29:1a:91:65:ab:
da:77:43:b7:38:3f:e1:71:fc:f2:8b:2a:7a:2a:de:
86:ca:4b:71:0c:d1:75:15:e5:ae:11:86:64:d6:71:
c9:4d:ad:a1:f3:b4:d5:c6:fd:34:af:96:a9:bc:85:
e0:6f:fa:02:4a:bf:b2:ea:ef:21:c0:95:61:84:0b:
23:c0:1b:86:1b:a9:b4:7a:c7:a4:2d:71:eb:7b:2e:
8c:ab:ca:2b:91:50:32:b8:f2:21:69:60:a1:90:f9:
44:f6:a3:ad:c0:c5:95:b1:a7:b4:8c:8d:9b:a3:6e:
1b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CD:34:CF:85:4E:51:87:0F:A2:E6:0D:56:45:7F:60:21:52:FD:DF
X509v3 Authority Key Identifier:
keyid:4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:49:86:96:00:4c:26:88:5e:80:fb:4a:ed:c6:44:74:f2:4e:
ad:56:88:7a:9e:df:00:06:97:e9:b3:ce:d8:e4:fa:ff:a5:28:
1f:de:d8:f9:0b:22:de:7a:86:3c:3b:d2:bd:ef:41:7a:44:6f:
69:88:cf:7b:83:4d:08:db:e8:a0:b8:bc:dd:0c:83:e5:ec:31:
b7:f8:a9:64:a5:b2:00:ad:91:dc:bc:68:43:1a:e5:c0:b0:00:
20:d0:1f:c4:8d:a8:ed:cb:2c:71:5e:3e:10:d3:43:a8:bd:d9:
8d:6b:92:0d:4a:9d:d7:dd:9f:4d:1a:e8:c0:79:0e:a2:13:97:
b6:54:ae:8b:43:a4:b5:1d:5d:ef:d9:ba:32:e1:d5:ca:e8:df:
d5:55:26:28:0c:b8:b2:21:08:6f:81:9b:5d:88:1d:cb:9a:5c:
6f:9d:e7:93:9c:0b:0d:49:ef:cd:38:9f:c3:7e:7d:b3:d0:76:
da:08:b7:00:70:f0:56:e3:67:fc:71:36:8e:a3:c3:36:97:6f:
4a:73:b0:60:62:f7:6e:24:92:5e:f2:47:52:9c:60:72:5b:97:
5e:f0:ff:6c:ba:8a:2c:ab:ea:eb:65:4c:40:8f:8b:7a:a0:c3:
08:22:7a:6f:c1:13:ba:25:df:2e:d2:3b:79:f5:55:a0:d9:17:
ca:9c:a1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:44:51 2026 by rpki-client