Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json)
Hash identifier: 5dNUcOsJp9tziKPd4DFhLoHjUaTFuwJs+JIAMDzj5x0=
Subject key identifier: 12:04:45:C9:48:32:A3:CF:09:67:2A:14:24:DC:0C:FF:6F:DD:F8:84
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial: 019CAE3538078A0B6D9ED3CDC1ED87FFCF81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 11:00:49 +0000
Manifest this update: Mon 02 Mar 2026 11:00:49 +0000
Manifest next update: Tue 03 Mar 2026 11:00:49 +0000
Files and hashes: 1: MvE_ASHksIA5Hihl4HjNkYFAKXs.roa (hash: R5hIaQTFtxbBLPslX/5K15uRVo3wvIX5E+vyZLpZGOk=)
2: sTa2ruH12AN1447UXDyFG4sK58o.roa (hash: QQfIB8V26GpvkAguN7nqO2FkvauGQGA+m32WWNo/GsE=)
3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: kQpwg0i8WAQYb8KJmN2htWoTl5dv4CrvAfOgJmJo2mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:38:07:8a:0b:6d:9e:d3:cd:c1:ed:87:ff:cf:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
Validity
Not Before: Mar 2 11:00:49 2026 GMT
Not After : Mar 3 11:00:49 2026 GMT
Subject: CN=120445c94832a3cf09672a1424dc0cff6fddf884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e3:a2:e9:09:64:df:c2:2e:41:84:35:25:21:
13:29:14:f2:53:b6:ce:d7:02:6a:05:5a:4e:e1:0c:
94:9a:ee:20:21:05:0d:99:15:b3:5a:09:f4:3a:b4:
79:93:eb:ec:49:ff:9a:f1:4b:21:56:f0:7f:ab:bc:
04:e7:bf:05:41:2c:91:70:a3:4f:e2:a6:6a:8e:a2:
3b:14:9e:f3:7b:54:69:4f:09:33:0b:10:63:4d:03:
dc:85:f9:d8:db:9f:7e:bf:62:d1:09:eb:40:86:b5:
d0:37:1e:56:28:29:a5:79:b2:c9:d7:bf:49:eb:0e:
eb:6a:20:89:77:ba:35:86:b8:ca:01:dc:38:2b:28:
b2:bd:e4:f2:dd:5c:c6:07:35:75:38:36:89:2a:f9:
d0:a8:a4:47:cd:e0:95:39:95:a5:5f:ab:e1:7e:bb:
78:c6:13:47:e3:38:ea:55:08:56:4a:23:ca:94:a2:
da:bb:01:fd:ac:10:6b:a0:43:e7:9c:5f:38:3a:20:
7c:57:39:76:b7:0d:f7:79:ff:ea:96:d2:54:90:14:
10:ce:86:8c:2d:18:f8:b2:5a:14:17:10:44:9f:4d:
ce:8d:a7:9d:e9:ee:f5:53:f5:8b:0a:79:4b:e8:84:
e5:1a:87:35:4b:a6:7c:0f:62:5f:25:0f:25:96:25:
f5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:04:45:C9:48:32:A3:CF:09:67:2A:14:24:DC:0C:FF:6F:DD:F8:84
X509v3 Authority Key Identifier:
keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:00:ae:b3:42:f3:57:aa:66:3b:af:14:1b:58:60:a7:2a:f8:
4f:13:35:a6:e4:11:c7:9a:e1:b4:98:ed:46:f6:d4:b7:85:30:
8d:05:83:8f:01:9a:87:46:64:37:dc:f9:7a:03:cd:af:07:7a:
09:eb:a0:a1:89:3f:cc:87:6b:3c:24:ac:25:9c:5c:7e:7b:20:
35:64:b7:65:f2:24:15:07:68:36:98:cf:0b:fe:52:fe:6c:79:
fb:8d:61:0d:6e:bd:00:13:29:5d:e6:61:c1:50:38:cb:7f:f9:
96:2b:d0:7d:04:04:dc:8e:04:c6:37:5d:6d:52:32:db:f3:9a:
e7:69:75:1c:75:71:25:fb:3c:d5:65:10:96:08:11:88:be:9a:
5c:e0:cd:1a:2c:0d:d6:0e:c5:6d:1b:17:51:97:f8:67:ed:07:
23:e9:25:7a:ec:16:d8:ed:44:4d:0f:8d:d2:a4:c9:6e:cc:3b:
72:d1:cc:3a:2d:69:2f:c0:46:fc:44:1b:9c:08:fc:04:f9:b9:
53:08:07:36:43:7c:d9:18:8f:4c:25:f7:7c:31:77:1d:7e:d1:
91:ec:52:46:a5:78:5f:64:36:48:b6:74:52:39:42:d7:3d:0c:
33:89:41:5f:9f:9e:d8:c1:2e:5c:91:8c:23:08:ed:62:48:fc:
e7:27:8a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:25 2026 by rpki-client