Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
File: tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json)
Hash identifier: aBcF19FBqb1ozDy7n8tVNqGkIrRf8JsXJsjrtBLkaSg=
Subject key identifier: 14:2D:05:26:B2:F0:82:5F:B9:C8:F6:4F:C1:B9:44:86:78:46:0C:A4
Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
Certificate issuer: /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Certificate serial: 019CA90EFC4BEA6BF36382D4DE28C78E4346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 11:00:57 +0000
Manifest this update: Sun 01 Mar 2026 11:00:57 +0000
Manifest next update: Mon 02 Mar 2026 11:00:57 +0000
Files and hashes: 1: bXgR8m5zIy_GMOS_a3seOOEoPYQ.roa (hash: dQET79lWM3bPQ1IRR0iZoVaViZjUeP97gYh31kK/K0E=)
2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: gh2ncteSFcsMdwf7Cplnzn+vsWu149wxQAfg6fb8Ujk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:fc:4b:ea:6b:f3:63:82:d4:de:28:c7:8e:43:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Validity
Not Before: Mar 1 11:00:57 2026 GMT
Not After : Mar 2 11:00:57 2026 GMT
Subject: CN=142d0526b2f0825fb9c8f64fc1b9448678460ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:54:b7:f6:0c:78:a3:6e:7c:02:1c:3d:99:
bf:b3:86:47:05:b4:a4:02:56:d2:be:a7:a0:2c:ca:
62:b2:52:7c:32:6a:67:5e:be:b0:7b:83:f5:84:be:
39:cf:b1:95:5b:52:5c:7b:9a:7b:d5:27:72:4c:bf:
66:50:35:bc:02:31:2c:da:84:64:30:1e:a4:b5:a1:
13:63:e0:0f:db:54:c0:44:90:5c:59:70:2d:b5:b3:
20:7b:e3:6f:04:fc:c0:7a:6c:c2:82:d0:fc:1d:9f:
73:49:0a:d1:a0:9b:9b:3c:c8:ef:b6:cd:86:ab:2b:
85:00:c8:d6:51:11:80:6e:d6:50:5a:12:b4:34:58:
5d:c2:26:ef:25:08:a7:e2:ea:76:f2:a7:48:47:d7:
70:a5:d2:75:02:96:c6:d2:91:4c:6f:1d:ca:91:1b:
c5:e2:c2:d8:dd:8c:f4:24:1f:c5:5c:5d:56:8e:da:
11:ee:38:92:c9:e0:37:b2:df:39:12:60:18:4f:f2:
60:d9:72:53:1e:5c:da:6e:0d:c4:1a:dd:7c:fa:66:
20:5e:95:94:a3:0a:75:a9:b7:d4:4a:b8:11:7c:56:
89:08:a2:da:c8:38:d7:50:12:2f:86:5f:a6:08:aa:
38:a6:e1:c0:2e:ce:5a:a1:7a:35:30:62:15:76:3c:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2D:05:26:B2:F0:82:5F:B9:C8:F6:4F:C1:B9:44:86:78:46:0C:A4
X509v3 Authority Key Identifier:
keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1c:60:33:5f:4c:20:d8:e8:e8:94:b3:f0:52:75:78:a3:a3:
31:5d:c2:95:26:10:f2:8d:22:e2:4f:a3:4a:5d:c2:28:c8:1b:
00:62:a1:76:24:0a:f9:1e:c2:2f:7a:4d:f9:2e:22:c6:52:3b:
54:7b:07:d7:22:d6:cb:6e:f7:f7:a4:42:6e:2b:01:7e:1d:ac:
d4:d8:be:b0:ee:94:44:89:98:24:c4:fa:d2:49:54:42:65:ea:
f3:d8:2f:24:4a:71:cf:08:d2:94:1e:f4:c1:6a:e0:d0:d2:81:
b4:24:e9:73:b0:f3:77:e9:bf:44:ba:90:5a:ee:8a:0a:d3:5d:
41:a6:4f:60:a0:93:f0:72:f1:bb:1b:86:64:14:f4:3b:f8:c5:
e2:79:ef:b9:bc:44:95:cd:da:15:6a:03:dc:c1:0b:95:1b:32:
3a:8e:2a:f3:7f:f0:fa:62:fd:ff:fd:a3:90:4e:31:17:a9:bd:
c8:cf:c5:05:c3:f4:fd:86:9b:63:c2:4f:6a:63:de:70:34:06:
65:32:fc:bd:54:22:e8:4d:79:8c:a5:7e:90:4b:9a:0f:1b:c4:
11:58:e3:81:1d:a6:29:7d:44:a1:08:7a:85:34:2e:17:34:60:
85:72:bf:b6:57:97:5a:f3:ed:b2:50:23:d1:0a:05:06:50:64:
16:fe:bc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:06 2026 by rpki-client