Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
File: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft (raw, json)
Hash identifier: Hwqil/Nq5s4AvFxuWjCIdxh06RuHIkeCllGlGtK9j68=
Subject key identifier: E4:B9:25:92:9F:6C:D6:DE:6C:BD:03:1E:F3:91:F2:94:5F:52:D6:BD
Authority key identifier: B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
Certificate issuer: /CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Certificate serial: 019CABD92CDA7ED3C984F498933D6C6B07E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
Manifest number: 1533
Signing time: Mon 02 Mar 2026 00:01:02 +0000
Manifest this update: Mon 02 Mar 2026 00:01:02 +0000
Manifest next update: Tue 03 Mar 2026 00:01:02 +0000
Files and hashes: 1: PeFK_yeJmAggBubY51FT5ExR7yY.roa (hash: kZM9hfI1X20jdNyqPobjCTSrN0qe4fcSM/JWGaBh8YA=)
2: XiIDJMPchO2MVQJnr2v3LL6-fD0.roa (hash: +0DK4fXLVL2er4TUt0Ah7Mip7BfbX2JKpUWdTlpILkM=)
3: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl (hash: WSMDKLY4OTNRg8POElDPCNovOxh5vP+lGHbyaRZ2giE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:2c:da:7e:d3:c9:84:f4:98:93:3d:6c:6b:07:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Validity
Not Before: Mar 2 00:01:02 2026 GMT
Not After : Mar 3 00:01:02 2026 GMT
Subject: CN=e4b925929f6cd6de6cbd031ef391f2945f52d6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:6f:54:d8:9a:c4:1e:60:64:1a:9e:b3:86:
09:0f:26:85:ff:8f:c8:79:e0:6f:38:67:84:a4:6a:
f2:29:fb:7a:5f:1c:e9:e9:75:d6:84:77:a5:92:70:
88:1b:c0:86:ab:9f:89:d5:b8:37:49:50:6e:81:4a:
7d:77:6c:0c:a8:00:67:33:48:13:cd:7d:69:c1:47:
54:cd:c7:78:6d:a0:f4:24:1c:23:23:5c:95:02:18:
26:27:60:dd:de:30:11:0a:35:e7:15:59:08:13:a3:
90:6d:92:4a:ee:8e:06:98:c0:91:0a:77:4d:9d:25:
38:a4:4d:a3:cf:06:55:d8:81:70:71:ca:e5:75:cf:
e5:f8:3d:0b:0f:d8:9e:fc:74:9f:d9:79:fe:a1:3e:
af:6c:8f:40:27:88:b1:4b:78:73:fc:0c:c6:c8:47:
f0:7a:d3:a5:2a:34:63:22:73:22:28:e4:09:5f:ef:
6d:1b:57:64:56:9b:fd:72:83:96:2d:c3:a0:5d:be:
d7:e5:a3:67:d1:02:ba:27:fb:36:02:97:7d:69:c4:
f2:d8:67:a1:9d:9d:39:b2:c4:68:18:05:d2:10:37:
2a:da:fb:34:f5:83:76:69:bd:74:8e:b2:da:67:20:
f9:88:a8:56:ba:80:96:04:c9:81:6e:50:3e:aa:75:
a4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B9:25:92:9F:6C:D6:DE:6C:BD:03:1E:F3:91:F2:94:5F:52:D6:BD
X509v3 Authority Key Identifier:
keyid:B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:cc:51:63:c2:d2:5d:97:29:3e:ad:bc:1e:7a:b4:ad:aa:26:
6a:db:4b:e2:ac:75:82:f7:19:ae:76:9e:f0:33:d5:97:50:cc:
5a:6d:44:19:3c:64:68:f3:73:95:c3:43:95:64:6e:4e:e1:02:
cb:df:e3:6c:5f:c7:1b:6e:37:af:ea:aa:4f:56:d8:3a:bb:4e:
da:38:62:8e:e7:e4:92:47:83:b2:57:aa:65:0b:02:1b:85:2f:
34:67:3b:c2:d8:0a:66:ee:ef:d5:08:18:48:8b:0f:79:3c:8b:
89:4d:e6:50:27:dc:56:8a:26:9b:3f:8c:e6:84:d8:0b:32:ff:
b6:e4:3c:fc:8f:76:e5:85:cc:5d:1f:fc:68:02:15:61:a1:bc:
58:43:44:21:17:30:59:12:f6:f2:e8:09:63:c2:64:9f:1b:3b:
ef:e2:b0:c8:fd:6e:15:71:b2:27:a1:f3:1a:3a:7f:ff:f1:81:
9b:38:da:0d:cc:07:1e:f6:c6:35:09:79:a9:c8:17:ea:04:5a:
1d:0d:ea:9f:c8:d1:37:b1:1b:bd:44:49:64:81:69:77:c8:a2:
0b:34:8d:1f:15:e8:3d:00:ca:db:15:3b:d2:ca:b6:0a:34:7c:
25:fe:f0:b5:ea:91:c2:a5:40:5e:4d:d8:5d:bf:59:05:a9:ea:
ef:50:f4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:33 2026 by rpki-client