Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft
File: tRFbXBJF3DDhIwQHnslKNe1SfGY.mft (raw, json)
Hash identifier: mkx5Rz5sqzc5Yb/O1lq4+jMELtq2oqua1iIGHHKF6yQ=
Subject key identifier: 59:72:4A:95:E1:78:1C:2B:CE:9E:87:4E:32:0C:28:F3:3E:D4:00:23
Authority key identifier: B5:11:5B:5C:12:45:DC:30:E1:23:04:07:9E:C9:4A:35:ED:52:7C:66
Certificate issuer: /CN=b5115b5c1245dc30e12304079ec94a35ed527c66
Certificate serial: 019CABD8E1E1A2D911D6B500AD6FD450E01C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRFbXBJF3DDhIwQHnslKNe1SfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft
Manifest number: 0208
Signing time: Mon 02 Mar 2026 00:00:43 +0000
Manifest this update: Mon 02 Mar 2026 00:00:43 +0000
Manifest next update: Tue 03 Mar 2026 00:00:43 +0000
Files and hashes: 1: VwLAIV5D66a6FPS07LFDWIQS-_0.roa (hash: T9H++z3WO1CHzgCbp0BP6ZLUx+OwVcmGlNY7g9M8Uf4=)
2: tRFbXBJF3DDhIwQHnslKNe1SfGY.crl (hash: DSQuJLvgMbDH1RmVnV1ZcVipifdG2c2E2WjbLnjPJVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRFbXBJF3DDhIwQHnslKNe1SfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e1:e1:a2:d9:11:d6:b5:00:ad:6f:d4:50:e0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5115b5c1245dc30e12304079ec94a35ed527c66
Validity
Not Before: Mar 2 00:00:43 2026 GMT
Not After : Mar 3 00:00:43 2026 GMT
Subject: CN=59724a95e1781c2bce9e874e320c28f33ed40023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:aa:24:7e:43:85:f8:db:ed:38:41:89:58:
74:27:51:c6:77:22:14:ce:ad:48:29:5d:9a:c3:0a:
21:82:87:1d:46:19:58:83:62:a6:42:4b:1d:f9:2d:
d5:0e:ec:ec:20:f6:1f:71:42:d8:cc:77:bc:bf:cd:
48:6a:c1:13:de:b1:06:00:a4:63:7a:4d:b6:49:44:
b1:e3:8e:1c:65:fe:32:69:29:6c:6d:4b:c7:af:9a:
61:86:53:4d:55:32:80:60:7d:c6:03:88:a1:8b:0f:
a9:78:bd:a2:3c:64:d0:c0:a8:35:78:36:7d:a9:96:
76:16:7d:68:6f:a2:2b:bc:36:4d:a7:bf:87:7d:4c:
4b:4e:3f:17:6d:d7:3d:99:8f:58:72:d7:dc:28:3a:
a6:f9:e0:be:bf:ff:bc:23:ae:c5:f2:8c:59:89:81:
10:7e:81:9d:ed:6b:2c:9e:a0:2a:e3:57:ff:37:17:
67:96:2a:3e:7f:e8:e4:de:a4:93:3e:4b:d3:72:0b:
c5:93:13:09:be:85:4c:e3:89:f2:b8:41:09:ca:c2:
aa:c5:49:2a:ef:d8:63:41:bb:96:9e:17:0b:da:20:
d7:f6:86:47:db:d3:6b:25:4f:df:d1:88:94:67:58:
2b:07:ed:05:77:e3:ef:ec:9f:0f:f8:50:74:0a:aa:
e0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:72:4A:95:E1:78:1C:2B:CE:9E:87:4E:32:0C:28:F3:3E:D4:00:23
X509v3 Authority Key Identifier:
keyid:B5:11:5B:5C:12:45:DC:30:E1:23:04:07:9E:C9:4A:35:ED:52:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRFbXBJF3DDhIwQHnslKNe1SfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a5:4f:8c:65:89:6c:30:4a:e1:c0:a9:72:57:62:2a:50:1c:
25:97:93:1d:0c:68:2c:8d:0b:f6:8e:d4:3a:68:76:7d:08:ba:
00:f4:de:60:e3:66:06:e8:f4:ac:88:bd:91:7c:a8:78:4c:52:
ec:95:dd:29:ac:fa:4f:2e:3f:df:82:2c:ea:f4:47:0a:9d:a5:
cc:84:c6:5e:cd:79:43:9d:c5:c2:af:a5:fe:a8:19:8a:bc:99:
be:6b:c3:d1:c1:a1:44:8e:e0:44:3e:9c:9b:84:42:3c:8a:c6:
43:9c:4d:4a:de:8c:80:0a:05:d6:94:ba:84:36:4d:34:3e:dc:
f9:27:66:44:94:80:a2:75:24:e0:c8:6b:4e:cf:23:83:f9:5f:
31:8e:4a:d4:3a:78:ad:66:11:7e:48:a8:7e:10:8f:e6:77:5d:
6b:dc:45:b2:35:09:96:8e:96:db:fd:94:69:e6:5d:9a:01:74:
7a:7e:37:57:7a:92:bc:05:28:86:37:5c:df:2a:ea:10:b8:c8:
31:ac:ec:b9:a6:17:ac:d2:fb:3e:98:36:ab:02:f0:73:ce:40:
07:e1:3e:d0:54:4e:b6:8a:82:c2:cd:5b:4f:c3:e7:24:b2:e7:
62:89:bb:94:d6:0c:26:a4:9e:bd:da:76:83:7f:2b:f5:e2:52:
ab:30:10:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:51:24 2026 by rpki-client