Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
File: tkB0qoRJgw2psgs6-waC08Ay-f4.mft (raw, json)
Hash identifier: xPfdf7rpm6I7SWkAjq2y4e0kATdpZo3V6yz0aX24aQk=
Subject key identifier: 8D:B8:E3:85:D5:4A:8E:B0:60:B2:43:76:6B:0C:8B:48:49:62:2A:28
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial: 019CACEBE33C4826168AF3187E665DE64F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
Manifest number: 184F
Signing time: Mon 02 Mar 2026 05:01:06 +0000
Manifest this update: Mon 02 Mar 2026 05:01:06 +0000
Manifest next update: Tue 03 Mar 2026 05:01:06 +0000
Files and hashes: 1: fK9aO2I8AtgF0c0rdh_GX4O4_G4.roa (hash: u0RKyLKqUhdTzKSmpaGBlbuO8M5rtJXGLGs1u6N9C1g=)
2: nUmXXOPkWjccJgN8O22tzPhWVlA.roa (hash: UqKB7riKgf3jbIKMj8rldXeyuF7eaO+XqFxWCXQioCw=)
3: tkB0qoRJgw2psgs6-waC08Ay-f4.crl (hash: B/IK2cdlvv5zkUHbnIKrOaBn4Alo4cpyxX1frxqW5kg=)
4: xYSs50B2xtsvWdJxMD0UuyzwnRE.roa (hash: wUK1v8a3MmWnPSffQ5f8oxAVVqstmvh7KosqvxbaO78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:e3:3c:48:26:16:8a:f3:18:7e:66:5d:e6:4f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Validity
Not Before: Mar 2 05:01:06 2026 GMT
Not After : Mar 3 05:01:06 2026 GMT
Subject: CN=8db8e385d54a8eb060b243766b0c8b4849622a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:a8:0c:80:7d:eb:51:c4:e4:87:16:ed:c1:
f5:a4:8c:9d:ad:64:9d:4a:70:c0:fe:16:52:41:58:
52:d5:e4:f9:1a:d4:f7:b2:37:87:d5:e6:04:76:b2:
e8:2d:95:78:63:8f:5d:46:a1:f2:a5:8d:f0:99:25:
c2:3c:cf:4e:e7:ba:42:9c:9b:21:84:47:d3:ba:82:
91:36:8d:75:1f:25:72:75:03:56:13:fc:c2:a9:ad:
c5:60:7e:89:3e:ef:88:a1:0a:12:71:da:a6:0c:6f:
73:35:27:ee:8f:69:ab:0c:b9:f9:3a:f1:94:a2:d0:
f6:0b:b2:7f:70:d2:f1:8a:0b:86:6c:51:c6:e3:52:
12:e0:3d:5a:2a:e4:4f:90:d9:fb:a7:bc:08:aa:b1:
05:98:51:19:fb:b2:7f:b9:87:4c:7b:75:69:00:51:
00:d5:85:9f:6e:72:a0:36:55:a1:b7:3d:7a:4e:64:
cf:37:6d:16:40:48:c1:18:d0:82:5d:ce:ab:37:0a:
3a:0c:a6:e1:09:2d:00:06:03:cc:1f:6c:d5:a9:7d:
0a:61:f5:96:df:82:19:f9:10:79:86:f2:8e:cf:0e:
e3:93:63:bd:2d:6e:4c:a4:bf:0c:8a:8f:84:a1:31:
e3:a7:48:58:59:2c:2b:90:0c:b0:b2:a9:ce:f4:6a:
b5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B8:E3:85:D5:4A:8E:B0:60:B2:43:76:6B:0C:8B:48:49:62:2A:28
X509v3 Authority Key Identifier:
keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d2:ef:f9:6b:62:f7:07:8a:c7:88:92:eb:50:86:77:44:3b:
13:43:24:d9:df:0c:57:af:e5:80:ae:3d:7b:40:d3:16:f7:30:
07:73:0e:fd:a4:e6:40:87:f1:a3:ce:af:ba:c1:7e:b8:9e:45:
87:cd:64:e3:f3:ad:9a:f8:be:71:cf:51:d9:a6:c4:23:9b:af:
dc:10:d8:9d:53:fd:15:5a:97:84:5c:4a:b9:07:51:85:6b:9a:
0a:01:65:de:89:42:ff:66:57:c2:8d:c4:67:f1:bf:12:1b:d4:
e8:b8:73:46:fe:ca:98:83:6b:9d:34:ce:dd:63:d2:6d:88:a2:
9f:89:17:cb:b8:8c:9a:30:3b:5b:f3:3b:76:8c:f2:24:10:be:
fb:05:fd:43:9a:17:cc:ee:dd:81:c6:34:1c:22:45:2c:66:4f:
f7:1a:6d:cc:10:87:c1:28:25:ac:c3:85:8d:71:91:cd:95:07:
63:5d:35:1b:21:aa:40:28:30:f9:48:1b:17:e2:a3:2a:cd:05:
5b:74:37:e5:3b:e4:ec:60:2a:7b:0d:cc:4e:0d:72:cc:d8:72:
10:3c:10:ba:7b:f6:f2:61:f3:2c:78:fd:26:bf:16:8b:57:66:
b4:aa:2f:7a:36:3d:f8:f2:ae:13:28:36:27:c5:ed:ba:d7:89:
74:ca:b6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:07 2026 by rpki-client