Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
File: tI8GPSnpEPAzvstlbouZAfaeyXQ.mft (raw, json)
Hash identifier: tjoIsABjdgTOHhQ57tJqrqrxGExaelZMXjsC2wXWkbQ=
Subject key identifier: A6:46:84:01:78:C2:29:7F:7F:3A:42:70:7C:56:0C:C1:70:EA:D6:F3
Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974
Certificate serial: 019CAC1042FC2C46E22709A4C443904FB422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
Manifest number: 1145
Signing time: Mon 02 Mar 2026 01:01:12 +0000
Manifest this update: Mon 02 Mar 2026 01:01:12 +0000
Manifest next update: Tue 03 Mar 2026 01:01:12 +0000
Files and hashes: 1: YrqYNM1Pym45hQFacw7cbC8M_eA.roa (hash: o7i0wNONs0dKHmOQelWnN9IgkyF6F7BCOkRiYH+yl44=)
2: oxlX37hwRfJw6rYvD_DlOds6oAM.roa (hash: NBmTSUZkwjvyNiisqMltw+Cq5Ss6K9JzeUmdp5uxYs4=)
3: tI8GPSnpEPAzvstlbouZAfaeyXQ.crl (hash: Tu0G4N0mHp9L+10yw8HqAtABK3xhIQunRiid/rE9xTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:42:fc:2c:46:e2:27:09:a4:c4:43:90:4f:b4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974
Validity
Not Before: Mar 2 01:01:12 2026 GMT
Not After : Mar 3 01:01:12 2026 GMT
Subject: CN=a646840178c2297f7f3a42707c560cc170ead6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:28:af:14:ae:6c:95:fa:3f:09:c2:42:04:
9b:2e:f7:19:0f:1f:5c:ea:4d:61:62:d6:8b:cf:bb:
83:38:db:b1:e4:46:d7:8a:2b:95:e1:c7:80:ac:b9:
99:c9:6f:0e:fa:75:21:24:1f:d9:15:d8:5c:8e:95:
1a:be:30:bf:7a:0f:74:92:27:f1:7d:88:75:8d:5f:
cf:bd:33:80:e7:b1:7d:16:b3:32:c1:53:22:5e:f1:
36:04:4b:aa:0a:58:f3:fa:4e:1b:82:66:85:6d:62:
62:47:9f:0f:d6:11:62:2e:49:d6:a7:88:ce:12:8f:
2b:e0:3e:ca:d2:9c:ed:7d:48:ca:67:9a:f8:37:b0:
41:50:c4:ef:b2:8c:31:79:49:67:c8:5d:57:b2:e7:
f4:e4:d9:b6:de:f7:e7:1d:82:db:2d:0c:5b:df:3e:
53:ae:52:51:4a:25:a9:65:e4:c4:45:cc:1f:6b:0b:
ba:33:70:26:0c:58:9f:39:70:c3:77:2f:a7:d5:1b:
70:cf:de:a7:bb:f9:90:cc:78:d7:92:72:2c:d5:16:
9c:39:1c:3b:8c:6a:1f:65:d4:66:77:20:db:25:fe:
18:1e:ac:05:27:4d:82:83:dd:b0:11:a5:70:4d:a1:
1d:19:95:47:4a:47:4f:7a:33:bc:66:d8:53:20:fb:
8b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:46:84:01:78:C2:29:7F:7F:3A:42:70:7C:56:0C:C1:70:EA:D6:F3
X509v3 Authority Key Identifier:
keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:98:86:9f:0e:e1:b0:c9:d3:88:23:53:ee:32:6a:c4:42:94:
59:da:3b:d3:7b:3c:a4:a1:93:43:c0:32:f5:2f:f5:5b:86:c8:
2d:65:a1:67:09:b8:aa:10:0e:e2:8a:01:74:ac:54:89:ef:62:
91:cf:e4:48:6f:9c:ff:8f:41:51:a9:40:38:e1:14:62:e8:9f:
4e:dc:6f:5f:71:c5:18:0e:0f:bb:57:c1:55:7a:cf:af:bd:a6:
a2:fe:0d:b3:5a:d6:ed:54:2f:f1:69:bf:7d:49:a6:78:89:f6:
4e:79:2b:70:ce:45:33:1d:c6:c0:a3:75:26:4c:d0:9a:f7:18:
d0:93:27:b6:8c:ab:1d:e9:76:67:c3:35:c9:34:3d:a1:ea:82:
3f:af:a8:75:83:f4:6b:c8:25:43:04:dd:d3:74:42:de:ea:c0:
26:ae:11:15:cf:eb:f3:b1:6a:5b:6f:94:c2:ab:c7:c9:b8:b4:
20:d9:33:e4:93:36:2d:25:70:17:b6:16:70:f2:cd:45:12:b6:
23:a6:23:f0:2f:81:fa:08:78:34:ce:83:6d:e0:80:7b:83:4d:
d5:a1:a6:dc:fa:b3:96:fe:76:69:f4:9f:9d:32:87:a5:fb:e9:
4f:b6:dd:11:ca:63:9d:64:68:16:33:5d:fe:67:f6:0a:b9:e7:
79:d5:11:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:48 2026 by rpki-client