Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
File: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft (raw, json)
Hash identifier: ksi/8rSdF08PNQJLhdGQnW+HFPIyk7B7s9oeLhRvu9Y=
Subject key identifier: 45:08:01:17:B8:A5:C0:EC:71:09:DC:14:74:E3:FA:30:4E:D4:A1:4E
Authority key identifier: B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
Certificate issuer: /CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Certificate serial: 019CAA21FCC4993342EE60B9A5C0A37B1112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 16:01:19 +0000
Manifest this update: Sun 01 Mar 2026 16:01:19 +0000
Manifest next update: Mon 02 Mar 2026 16:01:19 +0000
Files and hashes: 1: VIjK-dF1RkU8oL9JO5ackgQvQqk.roa (hash: EuZj5CNsImrt381xNpJVt+ICs2RyaQvBUySYpPa5Un8=)
2: tBz0by2NzKIkh_m261Gzm8WL1fA.roa (hash: HsCmK+FnFFM5EN4UPd625pAFTouSWoOu/R7Evk3aoN0=)
3: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl (hash: h+AAKQkV8nUZ3654ghsSsn/nzhyGZBL+P8P35ZUxO6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:fc:c4:99:33:42:ee:60:b9:a5:c0:a3:7b:11:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Validity
Not Before: Mar 1 16:01:19 2026 GMT
Not After : Mar 2 16:01:19 2026 GMT
Subject: CN=45080117b8a5c0ec7109dc1474e3fa304ed4a14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d1:73:2f:8c:b9:87:39:8f:b9:42:11:d7:db:
1a:9f:1b:35:e8:d2:3d:7f:e0:38:8e:0c:bd:bb:da:
49:ea:7f:87:30:dd:e5:ab:ad:ed:1e:86:f1:31:3f:
c0:40:c5:58:29:bf:be:5f:a7:ea:b9:b2:3b:a7:f3:
28:13:42:5a:75:99:42:c9:99:aa:20:a8:7b:71:3b:
46:8f:06:4b:29:d4:e5:03:90:3e:8e:f1:35:60:0f:
4d:e7:44:8d:8c:2c:d6:4b:eb:3f:9e:9c:8b:d3:7f:
5f:1c:ae:12:aa:a8:0e:96:2b:45:9f:f6:f4:0f:f4:
32:0d:9e:cd:6c:f0:4a:14:8b:ec:b9:4b:9b:2b:c5:
65:d3:f6:e3:6f:85:e3:ac:a4:63:29:4e:db:88:51:
cc:ac:79:8c:4b:ae:d3:1d:fe:24:7c:e5:7e:47:6d:
be:23:3a:a0:a3:c2:72:76:dd:b4:53:fe:e9:68:11:
97:34:69:f0:e2:84:e4:00:00:48:45:eb:41:55:8c:
a6:3f:48:f5:72:02:53:e6:77:e4:81:c2:b4:8e:36:
c8:7b:15:ca:7b:f1:0a:35:23:d8:2e:f2:5c:21:09:
79:e7:b1:0e:29:f7:c9:c0:df:8e:e9:08:82:09:b6:
45:23:b0:d8:9a:37:a9:fc:99:df:66:e0:99:e0:ea:
9e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:08:01:17:B8:A5:C0:EC:71:09:DC:14:74:E3:FA:30:4E:D4:A1:4E
X509v3 Authority Key Identifier:
keyid:B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b0:4d:5c:c8:76:46:a1:19:1f:0e:d8:18:06:b7:22:d4:71:
40:7c:80:d2:5f:43:d7:27:46:15:a1:2d:a0:ad:f5:ef:70:d2:
d3:4a:d8:1e:9e:c4:23:9b:69:8d:69:f0:2b:e7:e3:0c:4b:1d:
b4:1d:18:7b:7a:5c:1a:6b:ba:78:85:e8:32:7f:82:52:05:5a:
a9:98:e8:8f:d9:ca:0f:02:4b:c8:22:be:33:45:fe:9e:04:b6:
e0:f8:d6:af:54:4f:47:d4:a7:bc:7f:e8:85:8d:ef:41:10:31:
32:68:3c:01:dd:17:08:fd:24:dd:d4:97:d4:1b:19:b4:be:3d:
71:87:c4:81:cb:3b:3c:7f:2f:be:d4:7a:99:4b:49:4a:9a:a7:
0c:22:de:db:83:22:b5:97:c7:0e:47:f2:31:bb:fe:4f:b1:15:
2a:44:dd:da:c2:68:9f:d3:df:58:35:6f:13:5b:7f:2f:42:82:
10:be:ae:8f:1f:d9:0c:7c:3c:74:3d:79:e3:1f:d3:21:a2:ca:
30:4f:02:7d:1a:a4:a7:69:ff:fe:b4:32:9c:0c:e0:7f:e8:ef:
47:1c:dd:d8:28:50:8d:e9:fb:4a:f3:c3:60:f5:fd:87:40:c4:
d5:2b:98:fa:0c:81:33:5f:63:1a:96:a7:49:c2:4a:d4:4b:4d:
7a:77:b1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:40 2026 by rpki-client