Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
File: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft (raw, json)
Hash identifier: Uiymo2RdkrJTQ35rQNrhbmN/qhF19ErYF6o7weeMrcY=
Subject key identifier: 6F:FC:FF:DE:AC:E7:86:0B:6B:8E:49:13:A4:9B:7F:AC:FC:8C:7C:C7
Authority key identifier: B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
Certificate issuer: /CN=b48184549e12e9934bffb7615bca3d0c25681360
Certificate serial: 019CAC7E3D10313BB56DA1083F8B724D1C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 03:01:20 +0000
Manifest this update: Mon 02 Mar 2026 03:01:20 +0000
Manifest next update: Tue 03 Mar 2026 03:01:20 +0000
Files and hashes: 1: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl (hash: TV2HDowk3ybeDXPKqZPjXDGFtphDBNIf9KH7nUlVCvo=)
2: tuDCv4lvmfDzJRQ3OOYakiJXpLk.roa (hash: B9WwSI4TdVDoQmekvK0lWtI32JXbnkCFS/fzwW4JyBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:3d:10:31:3b:b5:6d:a1:08:3f:8b:72:4d:1c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48184549e12e9934bffb7615bca3d0c25681360
Validity
Not Before: Mar 2 03:01:20 2026 GMT
Not After : Mar 3 03:01:20 2026 GMT
Subject: CN=6ffcffdeace7860b6b8e4913a49b7facfc8c7cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:42:16:d1:8a:0d:81:d9:f3:89:da:00:09:
c4:4f:97:ab:91:9a:67:d1:1d:27:1e:d1:60:63:46:
66:a4:8a:14:45:fa:44:ad:4b:57:b2:06:87:0e:8a:
bc:50:b8:93:cd:09:19:9d:47:28:d3:21:11:7e:5a:
8d:c7:01:c6:51:31:75:21:76:0a:2b:bd:0b:14:7a:
c0:f1:bf:09:99:e0:bc:88:dc:d6:6f:a1:38:49:13:
71:a8:a8:0d:a5:b8:3d:06:88:f0:07:e1:0f:a4:9c:
45:db:e1:00:2d:27:9b:37:51:9a:2f:82:1c:97:0d:
05:90:91:08:cb:15:63:b9:17:61:0f:e9:6e:ed:f6:
a7:39:f4:1b:eb:b0:63:15:23:25:93:6a:c1:32:1f:
10:76:ee:ff:89:df:a4:ed:19:ee:c8:e4:d1:1c:cf:
2f:d5:f9:cf:e2:32:cb:2e:f8:2e:35:e0:31:3d:0c:
f0:fb:9d:1b:ae:16:d2:19:af:f2:ed:e4:30:ca:ae:
60:78:e2:72:8e:4c:17:71:49:73:ab:ba:5c:5c:b6:
c5:3c:a3:ab:15:cb:86:ac:0b:f6:fd:15:a7:dc:f1:
54:5b:b9:e5:72:20:68:df:22:db:8f:b2:7e:64:70:
fe:0d:85:28:11:02:43:43:f8:e3:bf:54:49:f6:71:
ff:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FC:FF:DE:AC:E7:86:0B:6B:8E:49:13:A4:9B:7F:AC:FC:8C:7C:C7
X509v3 Authority Key Identifier:
keyid:B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:cc:6b:20:83:be:52:34:6d:ca:c1:ce:09:c4:0e:55:fe:d1:
2c:c1:cd:0f:9f:9f:2a:d7:93:cd:0b:75:ff:de:54:45:b2:3f:
f7:9e:c1:4c:92:27:ad:62:2c:a4:0f:53:72:77:56:a9:57:65:
d7:1f:59:45:e3:ed:58:11:d9:a5:15:1e:02:03:12:54:fb:41:
4a:bf:c8:30:fa:7d:fe:91:98:54:9a:2a:30:81:24:a6:e6:75:
04:13:fd:91:c9:ce:b4:d6:aa:85:77:9e:47:42:83:60:c5:86:
d4:61:19:53:9a:a1:e6:5f:1e:f2:cb:fd:46:f8:85:37:57:e5:
7b:b7:2a:29:01:e6:fa:d2:da:6a:d9:bc:e8:fe:01:57:57:c9:
30:e0:bf:df:b9:32:35:d0:dd:d1:61:76:f9:2b:fb:24:85:54:
2d:e9:90:df:19:93:f3:90:bc:ee:9f:43:5a:cb:29:a3:91:da:
3d:cd:82:c7:38:3f:ff:d5:17:ab:62:d8:1b:43:22:45:fd:8a:
b6:1e:b8:fc:b1:6b:a1:30:b4:e4:fb:ef:aa:c6:f4:01:92:c1:
ba:9b:0e:80:16:da:05:5f:76:63:a5:63:db:19:3c:12:80:0b:
9a:5c:43:a1:53:a1:f2:82:cb:83:af:03:e8:26:07:3a:6b:9a:
3e:2a:45:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:03 2026 by rpki-client