Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
File: tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft (raw, json)
Hash identifier: ldcRyOhWs32o1l7L7c6OeflGl+ZH+3pXQdBx3LboFT0=
Subject key identifier: CD:F7:DE:6D:CB:D2:DC:DF:88:38:EB:97:26:5C:7E:C1:0C:DA:52:49
Authority key identifier: B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
Certificate issuer: /CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Certificate serial: 019CA97D879C5FE2759BB2964735C8EC4987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
Manifest number: 0530
Signing time: Sun 01 Mar 2026 13:01:42 +0000
Manifest this update: Sun 01 Mar 2026 13:01:42 +0000
Manifest next update: Mon 02 Mar 2026 13:01:42 +0000
Files and hashes: 1: EgBYTsP4WnLdOgI7v9fWewoBmRQ.roa (hash: SdXuNAo4cL+y4o9C6xVzKmsv8YTzVdsZLx73iiyVrKA=)
2: LfLdRDtUwafS7E6VWyXgK2UQq9g.asa (hash: lI3eaRCZDcPeEC/xgibETDzOKxk64bCjv0zsjJHosh8=)
3: tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl (hash: YZevsX+ySOdoOMJDl3vf8/6P+LzR+7H5yMWXaVjrz1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:87:9c:5f:e2:75:9b:b2:96:47:35:c8:ec:49:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Validity
Not Before: Mar 1 13:01:42 2026 GMT
Not After : Mar 2 13:01:42 2026 GMT
Subject: CN=cdf7de6dcbd2dcdf8838eb97265c7ec10cda5249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f5:37:98:b8:72:98:be:d5:3e:04:90:c9:67:
99:97:21:46:66:48:ec:a1:0b:53:aa:6e:ed:e0:ae:
90:3b:57:ad:c9:b5:9f:d2:35:7c:f3:07:e1:eb:43:
7d:ef:e4:81:be:6a:db:4f:78:f7:d8:37:58:dd:88:
3a:6b:84:75:ac:a1:cf:55:02:1b:be:16:1b:5c:a6:
46:d5:35:90:39:b6:76:d7:68:32:45:22:68:4b:24:
a3:42:f5:7f:8e:29:78:46:41:dd:72:1b:b5:37:3b:
ae:5f:29:7d:88:37:f5:a7:a1:4d:0d:54:3a:25:59:
9e:24:ba:c4:f4:4b:51:e2:11:fd:4c:ee:7b:57:6c:
e1:82:7f:9f:83:96:59:b3:d3:31:20:e7:ca:c8:f4:
76:73:90:b9:a4:73:d7:52:be:c1:f2:2e:1c:e5:15:
51:07:0d:00:a6:d0:3e:58:48:87:a3:86:31:ea:1b:
b7:5c:82:c1:ff:21:2f:ae:53:09:fb:ef:28:e8:fe:
98:f8:1e:92:67:ff:1a:66:98:43:42:2e:06:0c:72:
20:0f:c0:2f:a1:22:f6:dd:2b:f9:fb:e9:cd:38:92:
fd:8d:4c:1f:21:1f:d8:ec:bd:c1:eb:be:4d:3d:79:
82:c8:c6:68:c5:c7:b0:a7:67:78:c9:44:94:9c:a8:
8c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F7:DE:6D:CB:D2:DC:DF:88:38:EB:97:26:5C:7E:C1:0C:DA:52:49
X509v3 Authority Key Identifier:
keyid:B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:57:aa:fe:3d:3a:c7:a2:0b:58:be:5a:ce:89:35:0f:3d:0d:
0b:70:b2:8e:50:4d:ca:ea:65:6a:d8:2d:9e:11:07:e4:76:fb:
18:1c:d9:b9:d3:60:88:ab:a5:ec:31:09:11:ba:37:8b:0b:01:
50:d4:85:10:f5:f7:3f:28:e5:e8:a6:20:42:cc:fc:be:31:c2:
93:fa:a2:20:7b:b7:69:4d:9b:37:16:8d:75:a9:03:ca:6e:a7:
20:15:bd:73:d4:eb:73:3a:81:84:cb:fc:63:fa:b0:3f:59:d2:
76:97:e5:87:81:21:74:5f:93:67:fa:14:1f:63:cf:35:f9:48:
7b:33:68:3c:c5:c1:b4:e0:fe:18:25:cb:80:1b:fa:be:dd:7a:
dd:95:4e:72:c2:12:dc:62:78:db:09:a6:44:e9:a9:56:ab:95:
1b:45:74:a8:08:57:b8:7c:37:dc:33:c5:76:df:c4:9e:ce:e4:
78:f8:21:a9:e9:7c:da:48:1f:62:ce:91:47:f2:69:80:e2:2f:
9f:8f:a9:14:4d:c4:82:91:23:71:85:fc:64:7c:8a:2e:30:f3:
19:4f:01:12:6f:76:25:94:51:96:31:9b:a7:aa:c8:5b:95:11:
37:43:8f:47:94:4c:4f:a1:b4:c9:ea:56:b6:65:9d:b1:e1:aa:
ed:d0:f5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:51 2026 by rpki-client