Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
File: tBErtZsGJ9ojr5DA8FhLcbUPd48.mft (raw, json)
Hash identifier: JtrNzT05BU3eOixTD+GsAeQ0nScLiO91z8zURZQvmvk=
Subject key identifier: B3:32:B4:7F:60:8C:32:C5:5C:75:C3:6A:F2:34:3D:49:F4:D6:81:E8
Authority key identifier: B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
Certificate issuer: /CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Certificate serial: 019CABA260BAB1D31A6B2623F6513975703D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
Manifest number: 17D8
Signing time: Sun 01 Mar 2026 23:01:11 +0000
Manifest this update: Sun 01 Mar 2026 23:01:11 +0000
Manifest next update: Mon 02 Mar 2026 23:01:11 +0000
Files and hashes: 1: LYGy5EllLjLC7TGMDgwkX0_QvDU.roa (hash: xMfq4e5OlYkNcnNj+cpAE6tuZxSVsEy28YruLrqthqE=)
2: tBErtZsGJ9ojr5DA8FhLcbUPd48.crl (hash: 6V4UCUceHqJ/NYdEQOC8qm5hqvRiJPmyoa9OJbEEvj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:60:ba:b1:d3:1a:6b:26:23:f6:51:39:75:70:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Validity
Not Before: Mar 1 23:01:11 2026 GMT
Not After : Mar 2 23:01:11 2026 GMT
Subject: CN=b332b47f608c32c55c75c36af2343d49f4d681e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:1a:d8:90:4a:69:61:0c:58:3a:0d:c7:a0:
38:c4:72:e1:59:d6:ab:51:88:7a:d6:a7:83:aa:8b:
50:02:90:d8:a9:4f:ac:1a:b7:8c:cc:91:ad:33:36:
aa:7b:70:35:f4:ae:c9:15:5b:ef:d0:09:5f:0f:41:
8e:d6:9d:70:0a:87:88:ef:64:6a:b6:4c:be:2a:f6:
71:b0:4b:62:cf:0c:79:11:2d:d5:d0:51:61:9b:82:
f1:0b:71:28:39:59:d0:a0:61:db:36:db:1f:55:98:
da:e0:c4:f1:30:38:c5:f6:c8:48:34:04:a2:f5:e2:
a9:f9:49:d6:fd:02:67:73:3f:81:07:8c:09:15:9d:
dd:7a:51:d2:bf:8e:09:0c:9f:21:13:14:04:6a:e3:
a6:69:f1:be:4a:56:b7:f7:a2:21:33:a7:f4:4a:b8:
55:c1:94:ca:f2:7e:2d:1e:ff:56:c5:61:a8:ea:67:
9b:55:82:20:a9:2c:6c:5b:ba:35:9a:f2:df:b3:cf:
4f:b5:22:dd:31:c1:40:9a:c1:6c:8d:12:c5:dc:b3:
34:f5:83:4d:cc:a0:6c:86:b7:11:0a:4f:ed:82:e9:
48:2b:f6:15:b0:96:11:52:b1:66:65:1b:0b:46:68:
f3:61:a2:d0:42:4b:fa:38:46:e3:9c:d8:6c:41:76:
5f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:32:B4:7F:60:8C:32:C5:5C:75:C3:6A:F2:34:3D:49:F4:D6:81:E8
X509v3 Authority Key Identifier:
keyid:B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a5:e6:b7:89:1b:3d:f2:ba:dc:36:c4:d5:8c:a3:38:0d:7d:
6b:ef:95:57:27:98:85:ee:15:77:d2:88:29:e5:c3:bb:1f:f7:
d0:86:12:9b:cc:b9:8c:9d:b8:a1:30:bc:ff:fb:c7:d8:91:58:
6e:b0:db:44:14:c8:0f:72:89:4c:32:e7:93:2a:c6:52:78:9b:
9a:78:1a:e9:2b:36:00:66:04:be:8f:5b:41:7a:ff:3a:ec:ea:
be:c6:d1:61:4b:ff:15:7d:d8:a0:09:51:57:e9:99:e7:57:2c:
80:c2:1e:c5:8e:7e:85:ad:03:aa:8a:9a:e5:92:6e:ec:a0:d1:
3d:45:a9:1c:ff:c2:f5:c1:92:39:05:e7:b0:c6:77:81:1f:07:
45:61:0f:1e:e0:4b:de:c2:49:cb:87:6c:11:89:0c:7c:50:80:
23:87:52:6a:9d:64:7b:aa:61:c6:70:5e:e9:23:f9:e8:d2:8a:
00:c4:a6:6c:84:4c:26:f1:e1:ee:d0:12:f7:6f:01:12:40:c3:
39:dd:f7:5b:20:ca:7f:7d:32:d0:18:cc:98:4d:55:3e:25:41:
9c:c3:b0:07:f6:e3:c2:3d:7d:68:00:a4:e8:95:4d:17:85:58:
d1:fc:74:cd:c1:6e:ba:85:fe:4c:16:9c:a6:55:d6:6c:9b:24:
a5:98:33:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:47:26 2026 by rpki-client