Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: aaN9p9Wij1Qh+YJ7IG9rvIXzepzqg9G8Vnx7gZEiuV8=
Subject key identifier: 6B:13:4C:32:0A:20:76:DB:82:BF:8A:84:E4:71:E6:79:C4:80:D4:B7
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 019CABA1D8F2437412FED9CFE0CFB9BA7879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 23:00:36 +0000
Manifest this update: Sun 01 Mar 2026 23:00:36 +0000
Manifest next update: Mon 02 Mar 2026 23:00:36 +0000
Files and hashes: 1: 1-XW1Sz2PaZ2CH23FH35lEDI1Dvg.roa (hash: OwzM/XrJoESuDpIjRWGFQ9kHnBpSBVpQxsgx+bma9vw=)
2: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: 3AYZzhi3eP1a/gjoFjoRqSdF4jiEfhgl9+um1aTwGI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d8:f2:43:74:12:fe:d9:cf:e0:cf:b9:ba:78:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Mar 1 23:00:36 2026 GMT
Not After : Mar 2 23:00:36 2026 GMT
Subject: CN=6b134c320a2076db82bf8a84e471e679c480d4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:46:ba:b7:79:7d:7f:45:38:82:48:30:32:
c3:d7:2e:1a:17:72:7a:24:ae:ef:6d:74:67:80:05:
40:1f:3a:e1:d5:61:a3:de:c9:99:aa:65:05:40:ac:
62:6e:2d:70:ab:ef:27:31:bf:a8:33:06:ae:0b:63:
00:8b:f5:c5:4b:cb:62:69:b7:8d:01:c5:3c:96:dd:
a5:b1:1f:6d:4a:5d:21:4f:a1:4e:49:31:81:ad:86:
10:24:6a:c4:99:e9:08:ae:03:4b:8a:2a:f6:6f:e5:
39:30:25:1b:4d:1e:b4:8f:44:3c:6a:fa:25:16:39:
37:0c:d1:e2:eb:32:7c:cd:bb:61:26:47:6f:53:97:
18:fc:ed:15:8f:1e:c1:fa:a4:5e:a7:2e:60:fb:a6:
fb:2a:69:70:a8:e7:28:30:da:be:5e:d5:35:33:5e:
49:59:72:e7:87:cc:9e:7e:5a:0e:e0:ed:55:72:d8:
c1:82:c2:bf:80:45:a9:b6:73:a7:3c:39:18:de:4b:
04:5e:62:ac:27:2c:86:66:09:b8:bb:03:36:84:48:
c0:4d:7a:27:92:a9:1c:82:95:a5:28:1d:61:75:48:
68:e0:c2:a0:93:f6:01:ce:99:5a:f0:70:9a:1d:1d:
3d:37:93:40:7c:b7:c7:cc:5f:4d:45:73:43:6a:76:
fb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:13:4C:32:0A:20:76:DB:82:BF:8A:84:E4:71:E6:79:C4:80:D4:B7
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f1:7a:af:05:f0:05:80:a0:c9:31:d7:d7:17:db:ec:71:22:
da:6a:cf:e6:19:f7:7f:5b:59:80:d2:af:10:74:a8:da:d4:d3:
ab:b0:9b:47:0a:00:28:16:71:13:e8:99:b9:d4:23:99:a2:40:
48:ec:cb:b7:41:28:a3:a3:c7:96:dd:74:c3:5b:75:f2:71:2c:
c4:95:95:18:61:ac:da:03:2f:02:e9:84:04:93:48:e5:9a:0e:
36:3a:62:ca:60:05:ce:38:36:b2:7c:85:96:5c:28:fb:68:71:
5a:12:1b:be:fc:ab:18:52:38:87:41:c4:1c:71:14:8f:4b:7c:
8f:2a:63:29:b3:1d:c5:76:0f:63:22:0c:49:c1:74:14:62:27:
98:0c:3d:b6:83:4c:c4:63:21:86:71:f0:bc:fe:52:4c:d6:08:
6e:82:24:a7:0d:28:c0:30:2d:b3:db:76:76:6c:b3:58:01:d2:
49:76:c7:2e:c4:ef:d3:fb:cb:7f:45:b2:bd:b6:1f:ac:a5:65:
0d:31:75:61:6b:d5:45:f9:67:da:20:c2:87:eb:a4:30:23:f4:
90:b0:cf:24:f6:04:d6:2a:0b:7e:1a:9a:b7:40:0e:12:fc:f4:
52:22:7b:24:cb:26:92:3c:ec:50:f3:a5:bb:f0:aa:43:dc:c7:
92:2f:53:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:00 2026 by rpki-client