Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
File: tF9VYNefBKktehUPPtjaQwir6jM.mft (raw, json)
Hash identifier: e9H1+Z0nkfJJ2dwn1045Apq79V/pvGiaZHBqSZoRrNE=
Subject key identifier: 47:BB:9C:79:B4:14:77:32:A2:68:77:E0:2D:F7:05:DF:2E:E9:F0:5C
Authority key identifier: B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33
Certificate issuer: /CN=b45f5560d79f04a92d7a150f3ed8da4308abea33
Certificate serial: 019CACB4B2FE670731DDB05B20D686522BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
Manifest number: 13CF
Signing time: Mon 02 Mar 2026 04:00:49 +0000
Manifest this update: Mon 02 Mar 2026 04:00:49 +0000
Manifest next update: Tue 03 Mar 2026 04:00:49 +0000
Files and hashes: 1: iDP1bGdTiUqEFNWH9pQ_fwFAZO8.roa (hash: juc+ynuClZ4OorzxxoiPvzF8miwUosVKgq4mBUka3tw=)
2: tF9VYNefBKktehUPPtjaQwir6jM.crl (hash: rfxkzMNdtsSJfhFQ2gq3eUtYU9Wp3Ljvhr1gwlGoHl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:b2:fe:67:07:31:dd:b0:5b:20:d6:86:52:2b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45f5560d79f04a92d7a150f3ed8da4308abea33
Validity
Not Before: Mar 2 04:00:49 2026 GMT
Not After : Mar 3 04:00:49 2026 GMT
Subject: CN=47bb9c79b4147732a26877e02df705df2ee9f05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f7:23:73:00:cb:5b:32:23:1e:3a:76:c7:4a:
78:0a:cd:2a:30:a8:37:65:69:f9:71:96:2e:27:ca:
03:eb:35:06:5b:5c:7c:cb:6c:d8:90:dd:1b:a8:40:
74:c5:bb:a0:14:e2:ce:da:9a:4b:0d:48:90:0d:fb:
aa:7e:a5:f3:1e:7a:f6:c5:99:0a:1e:c5:2c:cc:6d:
b9:5f:7e:19:43:71:e9:a0:ff:06:06:84:47:bf:18:
03:72:04:06:25:7c:b8:15:e4:64:60:e0:50:70:d7:
42:6f:fa:3b:d5:dd:3c:99:a6:3c:c9:e2:26:55:f3:
52:a0:6c:ae:35:7b:f5:66:cb:16:18:b2:e1:83:bd:
2c:6e:c7:e0:0a:04:d1:67:6f:ac:b4:4f:b1:86:f4:
59:42:f2:57:97:dd:c6:a2:72:f9:ad:86:a5:93:b3:
6b:8d:ca:03:8e:b3:ad:c9:b3:3c:bc:bc:a6:56:80:
61:f9:36:90:25:97:45:07:73:d8:98:cd:a6:31:b1:
a2:9e:48:b8:21:16:17:22:b2:55:39:ea:f3:32:69:
f7:82:7a:3a:85:78:6a:47:f9:58:b8:c8:59:b0:aa:
66:e8:9d:cb:06:77:1c:4f:0d:75:3f:e8:2b:8c:5e:
56:2b:9f:d1:c8:4e:c0:12:89:29:52:39:88:bc:d3:
c1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BB:9C:79:B4:14:77:32:A2:68:77:E0:2D:F7:05:DF:2E:E9:F0:5C
X509v3 Authority Key Identifier:
keyid:B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b2:88:b7:15:0c:a6:a9:01:5b:db:89:d6:35:94:5c:1f:7b:
07:1d:93:94:c3:ac:d5:8d:90:88:0a:d7:f1:d9:74:b2:6d:34:
a4:89:28:70:5d:65:31:ec:62:0a:c0:bb:68:5f:7b:22:5c:38:
cb:0e:1b:5d:85:c5:f7:b4:ed:f8:7f:c6:21:84:d0:7c:7f:9b:
b7:84:7c:bb:f6:98:d5:7c:9b:6b:a2:3e:06:5a:ba:56:dd:02:
3a:cb:2f:b0:5d:c6:bd:5d:33:4a:cc:ad:46:71:88:2b:6c:9a:
c9:da:5c:8d:bd:9d:b4:98:e2:10:dc:17:6f:01:14:b1:8c:2f:
b8:72:2b:5b:74:8d:3e:57:cc:e0:27:f0:3f:2f:ae:1a:a5:6c:
d2:50:c5:9a:98:75:a4:29:dd:76:3d:e7:bd:d5:df:02:2c:15:
26:1c:7c:c9:96:c3:a0:57:fd:b7:8a:8b:ec:11:f2:78:e3:a9:
1d:b1:e6:e7:fc:64:43:68:c3:d7:79:36:58:0c:2c:72:2e:5f:
bd:f2:30:64:7e:15:6b:38:98:56:1d:be:2d:2a:4a:39:1f:32:
f3:58:ff:9c:5f:22:44:c6:99:e3:71:8c:77:37:a8:40:2b:6e:
1e:39:a4:9f:32:14:5a:91:09:cb:12:9d:62:a8:56:92:e5:6a:
ad:50:8d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:40 2026 by rpki-client