Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File: tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier: 8McEqP2Lb9G8pNzNsxh2eKg9vFD65QTOjm1nrXZDeg4=
Subject key identifier: F9:C7:D5:D0:AF:6D:A9:A5:A8:FB:57:F6:E3:73:4F:0F:A2:F5:54:47
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial: 019CAA59298CDAA723E0441A97D4C4FA9DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:01:35 +0000
Manifest this update: Sun 01 Mar 2026 17:01:35 +0000
Manifest next update: Mon 02 Mar 2026 17:01:35 +0000
Files and hashes: 1: FCOqF_sQRgQBJURZwz5LSyaOjJ8.roa (hash: 6lS73JUDNo7BbYfLMWtS8VyH4+hvb7PzpHKXOKKSc8o=)
2: S_kn4DkQroHqq7HAquDXguodEnE.roa (hash: 9xxNTgjpkgjoYZUn/S2u9DKQyLLVAn0QlTy3a/LjFvI=)
3: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: nHcH+uvGQ0JQOm0sW2NaC6FWp5jD4oyDuxirxYj2Y/E=)
4: wkBj6meKGNLkzfK8dNJpio292qU.roa (hash: fCT5GXsj0OqKgF2zl8rl9o29Q7I6qVhp6IsQiy2sl9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:29:8c:da:a7:23:e0:44:1a:97:d4:c4:fa:9d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Validity
Not Before: Mar 1 17:01:35 2026 GMT
Not After : Mar 2 17:01:35 2026 GMT
Subject: CN=f9c7d5d0af6da9a5a8fb57f6e3734f0fa2f55447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:da:e4:a0:6f:66:9a:38:02:37:31:27:8c:
a5:33:2d:91:01:70:14:cd:c6:98:19:fa:e2:6a:60:
a5:e2:74:7c:a0:54:bd:89:fc:e9:fe:0f:4f:ae:b5:
f8:1b:90:ec:04:10:b0:8c:66:f3:7a:64:7f:b7:2a:
d1:57:0d:1c:e8:df:4a:d7:dc:70:42:e3:ba:45:0f:
bc:53:b3:5f:84:40:6a:83:c7:b9:06:da:97:e6:f0:
5c:cb:f7:f9:10:87:a1:39:9a:fd:a9:9c:2a:6e:b8:
2a:67:41:43:a7:29:11:ff:46:4d:21:5a:4f:53:13:
e4:76:7f:d5:fd:0b:f9:f1:fa:36:4e:d4:67:9f:5b:
76:55:7b:1a:a0:0d:f5:ba:b9:e4:b8:c0:35:e2:00:
5a:2c:cd:5b:2e:37:a2:60:b4:45:13:09:57:87:cc:
e7:1f:5b:2c:5c:5d:65:83:2b:70:7b:78:d6:86:39:
30:4d:a0:9a:d1:77:24:f0:dc:4a:4a:a2:17:56:c6:
ce:ed:8a:13:cb:dc:7c:31:a4:db:2a:b5:a0:e5:85:
ba:75:46:56:1d:b0:54:62:b5:c5:6f:7a:47:9e:59:
d5:ff:1a:47:43:c4:c7:66:72:d2:80:56:ff:b9:d2:
21:93:74:a5:23:73:03:21:db:9a:b7:35:fd:1b:88:
e0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C7:D5:D0:AF:6D:A9:A5:A8:FB:57:F6:E3:73:4F:0F:A2:F5:54:47
X509v3 Authority Key Identifier:
keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:52:7c:1e:35:cc:cd:26:58:b0:db:a1:03:45:b3:79:c1:3a:
5a:52:d3:7c:c4:9a:43:20:da:a7:18:73:88:10:ce:bf:e6:d6:
2c:99:65:f8:65:e9:71:c4:06:0d:66:f4:51:d3:86:f2:19:b5:
c1:84:15:09:5d:4a:ba:1c:9f:45:01:d4:ca:ae:72:fe:b1:f1:
08:73:10:42:7a:4d:d4:c3:fd:cc:92:55:d5:b6:84:3a:b8:88:
3c:7d:f4:53:72:4c:b3:83:b8:39:a9:33:51:c2:5d:b8:bb:e2:
e6:4d:da:78:d1:3a:b4:a2:4d:07:e9:32:7d:fc:a8:f7:65:c3:
b5:18:8b:b7:d5:0e:d9:09:96:9e:19:8c:45:5a:53:31:50:74:
7a:35:09:19:c7:1c:5c:cf:5a:bb:31:cd:2c:ef:52:b4:0a:63:
49:a7:e7:f3:82:9a:d4:46:02:97:36:ee:1f:ff:a8:e3:87:48:
46:35:86:df:eb:06:6d:02:40:df:42:49:53:33:00:de:66:b5:
01:bb:be:cb:4b:4a:15:60:0c:88:b3:69:11:bd:47:f7:d3:7f:
fe:1b:13:58:4b:60:3b:6b:7b:4f:e5:b8:d0:20:46:53:4e:75:
17:c5:83:77:95:ef:ea:33:16:86:8a:8d:63:2b:da:45:ac:73:
7b:6c:bc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:02 2026 by rpki-client