Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
File: tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft (raw, json)
Hash identifier: QXKWW419QvfOWtMv/ZiyHjrbhgm6iBP363fMY1SklWM=
Subject key identifier: 8A:FF:07:D1:AE:F1:7C:73:67:58:55:1C:C8:C5:36:16:AD:87:F9:65
Authority key identifier: B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
Certificate issuer: /CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Certificate serial: 019CABA1C10BC93C310A7E65B89728325F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 23:00:30 +0000
Manifest this update: Sun 01 Mar 2026 23:00:30 +0000
Manifest next update: Mon 02 Mar 2026 23:00:30 +0000
Files and hashes: 1: 0_bDufbDC749XM6FeQZedL-kk0k.roa (hash: g27LLjmMTEPKwmdpRxcxsvyxvSaT85tGJMHzBXS0Bvg=)
2: Et_E8L3JnyGGi7EORm0tAklWkLY.roa (hash: SpPpnnc6LbJxToXLzGDYpTEBRnHYaBTsGIvm0GxadyE=)
3: tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl (hash: DKjNlUYuvtlcznBKjaFQnz2Gjabf0lCad6ooMIEk76k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:c1:0b:c9:3c:31:0a:7e:65:b8:97:28:32:5f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Validity
Not Before: Mar 1 23:00:30 2026 GMT
Not After : Mar 2 23:00:30 2026 GMT
Subject: CN=8aff07d1aef17c736758551cc8c53616ad87f965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0e:05:78:e5:a5:a2:da:8b:c1:a7:f5:e2:a1:
64:e2:41:24:14:cf:4f:f5:5f:35:d6:f6:68:fd:54:
e5:f5:de:8e:ae:b2:ce:cb:1e:e8:95:e7:04:21:67:
92:29:4d:74:79:39:12:72:33:c7:62:01:2a:2e:09:
68:01:06:65:01:96:86:30:70:48:78:ea:df:57:e7:
50:5f:5c:73:aa:9a:f8:03:1d:5c:96:de:10:32:e0:
64:f8:ce:71:69:cf:7c:68:94:79:83:e7:41:95:ed:
e0:45:f6:6c:a0:51:90:c8:28:66:59:9c:3a:a1:bc:
82:4c:c5:14:a3:ad:2b:c9:96:6d:ca:21:6b:c8:62:
39:c0:04:f8:72:e8:37:17:23:c6:c5:8a:fa:47:4e:
df:d3:e0:11:c4:46:d7:50:3d:11:ec:cd:50:dd:dc:
19:82:14:e4:1b:b7:8f:98:a4:4d:85:c1:49:1a:93:
dd:d8:48:16:79:31:f4:1c:52:2d:47:be:b1:18:d1:
5a:94:b1:65:94:d5:2d:26:7c:fc:6a:26:fa:92:a7:
fa:fe:62:0c:8b:86:b1:79:9f:f0:8b:ee:ff:08:61:
23:5a:dd:59:88:0b:36:fe:1f:f2:d0:7a:40:36:e4:
1c:6d:70:b3:ea:fa:2a:6a:28:65:df:36:a7:cd:4f:
1f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FF:07:D1:AE:F1:7C:73:67:58:55:1C:C8:C5:36:16:AD:87:F9:65
X509v3 Authority Key Identifier:
keyid:B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:08:86:66:57:c9:86:a8:7e:97:eb:a9:27:43:e1:3f:eb:59:
39:c3:ee:72:2d:1d:7d:3d:8a:94:1e:83:eb:c0:2e:91:b3:68:
78:39:5d:96:9e:74:45:87:6e:d2:cb:e8:44:c3:4b:7e:cf:c8:
0f:88:f9:34:7b:36:11:d5:5b:48:a8:e6:4d:8e:b6:27:2f:a9:
dd:f1:ea:9e:14:41:d5:ae:b7:5a:77:75:64:b5:66:e0:12:0a:
47:9a:cb:c2:e4:f8:8d:f9:10:aa:bc:0d:1f:36:87:9a:5f:46:
f6:b0:90:82:5a:e8:e5:19:65:b4:b5:8c:e5:da:6c:27:33:2c:
a0:e7:e6:00:db:73:72:80:c9:14:93:c2:72:35:db:8d:de:52:
c7:33:5c:d0:d5:1b:1a:90:b9:64:d7:15:b8:2f:d9:9d:dd:09:
e7:26:63:3d:b5:af:05:05:cb:b7:df:74:b1:e8:c9:3e:1f:3c:
6b:d9:7d:86:41:1f:a3:ce:6e:86:97:ab:73:22:19:e0:b2:e8:
1b:1a:c7:cd:e8:86:ab:ee:df:ca:b7:72:bf:40:c9:5f:16:7e:
7b:a4:de:af:7d:f6:0b:b5:63:7c:76:cd:27:59:23:d6:c5:db:
52:ec:1a:1a:46:4d:c0:5e:82:8c:4f:9d:b1:48:2a:96:25:4c:
40:62:9f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:30 2026 by rpki-client