Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
File: tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json)
Hash identifier: K2k7Y7czfcaeeOqAavVf/h/JrSjw3QZbO983FdGHdaA=
Subject key identifier: 57:7B:EB:8C:D2:6E:F1:9C:BC:2A:90:08:C3:27:AC:DE:0C:D8:DD:EC
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial: 019CA9EB03822207BE180F0B98162F2AE1FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
Manifest number: 1451
Signing time: Sun 01 Mar 2026 15:01:17 +0000
Manifest this update: Sun 01 Mar 2026 15:01:17 +0000
Manifest next update: Mon 02 Mar 2026 15:01:17 +0000
Files and hashes: 1: 07tUw4jtD4mf_hWsatPxJ_MIHL8.roa (hash: QrwrQX4QZucxWYaBIBlKAIfP7PxcTKwh9rMlp5A3Hx0=)
2: 1-QtHxqhDRc8Ad39doS8rj57e8O8.roa (hash: lx29AojPlQO1dFNnHX1vGuPHztiqJFCtnNtbhP7mv1A=)
3: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: 6MOOkIAmBWJJt+cxG/PNfY7r1NgzeX8prIHxrv77FnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:03:82:22:07:be:18:0f:0b:98:16:2f:2a:e1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
Validity
Not Before: Mar 1 15:01:17 2026 GMT
Not After : Mar 2 15:01:17 2026 GMT
Subject: CN=577beb8cd26ef19cbc2a9008c327acde0cd8ddec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:72:9a:7d:95:69:bf:62:41:e1:f2:99:18:
61:ef:c1:47:0b:b0:5c:18:36:0f:d3:60:61:40:67:
9b:ad:3d:db:67:dc:3f:18:a7:c3:e7:70:3e:03:3e:
fd:a3:89:37:24:33:9b:8d:b5:82:e1:48:a6:6d:b0:
f7:df:9b:dd:d7:a5:92:d4:f0:43:ae:f1:c4:61:7c:
0a:90:00:fa:1f:31:1e:d4:d8:95:50:b7:73:55:c2:
13:6b:06:06:ec:eb:90:5e:0f:5b:9b:f3:01:53:2f:
f9:d9:7d:a2:52:ed:c6:36:1b:52:91:1f:57:18:62:
cc:33:50:46:1f:91:e3:d6:a2:de:fa:cc:47:72:7c:
15:69:29:f0:2a:c7:1f:6e:f5:34:ae:9e:a2:7e:8e:
08:40:26:04:8e:73:2c:b4:e1:0f:2d:b7:b5:67:42:
65:03:e6:4c:cf:b4:c0:91:81:86:f6:0a:d2:d0:0f:
95:75:65:33:4a:f7:75:0d:2c:e8:cd:bf:0a:35:4f:
9a:c3:8f:a0:9d:33:b8:e9:57:ec:22:7b:be:88:2e:
49:19:bd:ce:32:02:5b:14:78:f2:af:52:49:3b:86:
e6:84:72:86:76:04:ed:67:9f:0c:f1:ca:12:cd:f7:
f6:d8:c3:d2:ca:40:da:63:79:ed:f0:de:fc:ac:7c:
d8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7B:EB:8C:D2:6E:F1:9C:BC:2A:90:08:C3:27:AC:DE:0C:D8:DD:EC
X509v3 Authority Key Identifier:
keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:35:af:54:84:d6:5a:60:7a:85:3d:70:93:72:ea:0c:56:54:
05:4d:92:a3:47:97:c3:6b:72:64:56:df:0f:d2:d2:71:e2:13:
b8:e3:0f:58:e9:09:eb:94:6e:74:44:bf:7f:10:12:da:4a:fe:
b9:8f:55:e0:45:5a:55:f7:c2:17:d3:5b:8b:d0:84:46:22:e5:
f3:87:eb:62:a5:cb:f2:07:cb:10:6a:7a:29:2f:75:ed:47:db:
dc:f9:a3:ad:36:41:e5:0a:8e:97:e3:20:af:1c:02:3a:53:d3:
90:b3:96:28:01:cf:86:1d:a5:a4:81:a0:81:39:ce:a3:7b:0c:
38:77:fa:bd:e0:d6:59:00:52:7a:4c:ef:63:8f:d3:50:76:c8:
b3:fb:e8:49:db:2d:30:24:91:f0:e9:fd:bf:e8:e1:ce:fb:56:
24:25:5a:79:41:48:1a:65:26:b4:19:c4:d6:d7:e2:77:50:2f:
fc:68:b1:10:c6:93:f6:82:fc:e2:db:14:58:75:65:7f:48:a9:
93:9f:2b:c8:dd:1e:a3:79:08:84:ef:db:e0:2e:ce:69:03:42:
d8:19:b3:d1:b8:5c:a2:65:2a:3e:38:79:2e:6f:3d:e7:42:35:
a2:8b:5d:1f:0b:09:66:d5:8c:52:af:a1:58:ee:11:bd:5c:0d:
f4:a0:00:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:38 2026 by rpki-client