Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.mft
File: tDlfbOqaAYpMyEgY5qo1INMiIYs.mft (raw, json)
Hash identifier: 64/pRyH9djLamvMfuWrYYA8Rw4dQwu1N/SPDNMoQdx4=
Subject key identifier: 42:4B:38:08:0B:95:38:2F:DB:3C:9E:CA:E1:4F:84:27:E0:FF:4C:15
Authority key identifier: B4:39:5F:6C:EA:9A:01:8A:4C:C8:48:18:E6:AA:35:20:D3:22:21:8B
Certificate issuer: /CN=b4395f6cea9a018a4cc84818e6aa3520d322218b
Certificate serial: 019CAAC65DDF137FD2DAEECF04336F4C649A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDlfbOqaAYpMyEgY5qo1INMiIYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.mft
Manifest number: 0EC8
Signing time: Sun 01 Mar 2026 19:00:52 +0000
Manifest this update: Sun 01 Mar 2026 19:00:52 +0000
Manifest next update: Mon 02 Mar 2026 19:00:52 +0000
Files and hashes: 1: 7o3HU3pC1XthlFE5rMAnOdMOkGY.roa (hash: x+AUbDFdu4k2QNBnXRev35S/cF6y/B0UGwPHMfJj01k=)
2: tDlfbOqaAYpMyEgY5qo1INMiIYs.crl (hash: oFYYG2RNw6PChjdMjP9ibuVi27m2uOSYJJgryRPJibQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDlfbOqaAYpMyEgY5qo1INMiIYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:5d:df:13:7f:d2:da:ee:cf:04:33:6f:4c:64:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4395f6cea9a018a4cc84818e6aa3520d322218b
Validity
Not Before: Mar 1 19:00:52 2026 GMT
Not After : Mar 2 19:00:52 2026 GMT
Subject: CN=424b38080b95382fdb3c9ecae14f8427e0ff4c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b1:53:15:02:3d:31:fd:29:8d:ff:d1:dd:12:
b8:93:e2:16:b3:a0:43:b8:f8:62:0e:c6:15:b5:e1:
81:59:17:e9:e8:a2:28:ba:0b:1b:c3:67:67:6c:6f:
b2:5a:e5:05:d6:cd:9a:f4:95:db:14:82:12:b1:30:
d9:8e:f3:a6:43:9d:13:e4:5b:4f:8b:ab:d1:bc:a8:
86:e9:d3:53:2a:8d:30:f6:2f:2f:6b:a5:43:14:85:
15:c4:39:0c:6e:79:29:2d:25:72:f8:e4:02:45:15:
c0:ba:a4:85:50:d6:15:fc:83:e8:d1:08:31:5b:d2:
c9:a2:90:48:07:8d:00:55:0f:79:04:4b:4e:00:df:
8b:75:9f:63:47:65:29:e6:99:2a:34:99:9a:ae:6e:
d3:c5:e2:1e:ac:c7:97:7d:4b:3b:b6:88:8b:3a:10:
2e:ad:89:ef:a0:91:21:75:b4:45:14:b8:08:ca:f7:
89:b5:ef:9f:15:3b:ca:6d:34:00:15:ee:9a:d2:b6:
b8:18:34:45:c5:1e:a3:f1:67:40:bf:e7:25:56:ad:
3d:d8:95:8d:c9:f2:15:27:68:e2:b3:8b:54:2d:1a:
f6:11:da:36:bd:87:29:d1:c6:19:d5:f0:a7:c7:2c:
eb:fb:cf:0d:61:db:63:90:4e:a7:e5:3d:6b:57:e0:
3b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4B:38:08:0B:95:38:2F:DB:3C:9E:CA:E1:4F:84:27:E0:FF:4C:15
X509v3 Authority Key Identifier:
keyid:B4:39:5F:6C:EA:9A:01:8A:4C:C8:48:18:E6:AA:35:20:D3:22:21:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDlfbOqaAYpMyEgY5qo1INMiIYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:53:5c:0a:80:f3:92:d3:46:d9:60:a3:0a:5a:00:ce:13:42:
9a:c8:4d:73:dc:08:e6:91:02:8c:bf:9a:45:3b:0d:cf:04:87:
28:2b:9f:12:c3:ca:b5:44:70:25:7e:df:1e:65:33:4f:4c:6d:
14:dc:f8:c8:53:69:d9:29:70:11:e3:ad:4f:60:99:98:25:6f:
5d:9d:d3:eb:b0:d4:e3:9e:d4:1c:15:72:cd:40:e9:da:8a:89:
e0:d9:4b:83:9d:aa:83:ef:1e:f8:d5:65:4a:f7:64:cb:18:52:
e6:49:ba:31:10:3c:2f:b3:e2:19:ea:42:9d:a7:af:a8:28:78:
1e:a6:d7:34:3b:b7:85:20:ac:ae:88:7f:e9:f2:f7:7b:26:3e:
5c:7a:d9:0a:04:a4:b5:6f:e9:79:99:1f:03:dd:2b:ea:fb:63:
9c:7d:9d:f6:00:11:f8:60:a7:1f:7a:1f:37:4e:1a:f4:24:ef:
dc:20:81:c4:c1:07:17:90:64:9d:51:7b:d0:c0:7d:64:2e:21:
4d:00:1c:fd:26:61:e9:22:12:f6:75:68:3d:9d:44:f6:2f:9a:
79:3d:19:a4:1f:53:e6:71:15:af:69:00:41:cc:01:6c:57:b6:
43:70:bd:ac:db:59:20:38:53:2b:cf:c0:f6:ab:8f:58:85:e0:
84:a7:30:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:48 2026 by rpki-client