Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
File: tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json)
Hash identifier: yNcuJbi7LutpnbjEXOxAJ1RJmNq/zFN+ErNBWfN/pSs=
Subject key identifier: 74:71:6E:A5:38:A4:7A:24:5B:4C:5D:E0:9E:6A:A4:D4:55:B8:4B:93
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial: 019CAAC6E9789BC3F7B5AB4B450D18DCAE52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:01:28 +0000
Manifest this update: Sun 01 Mar 2026 19:01:28 +0000
Manifest next update: Mon 02 Mar 2026 19:01:28 +0000
Files and hashes: 1: 1-GyqlA5KmcLfrL7pM3klE299nlw.roa (hash: J/BXL3XYbhHb/gfys6Z72uUSQjUFONh9EZ4ff4040ZQ=)
2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: BPJOQLlfoumTnVuUt8MWGuRQZpDsYJdGFbG7w5GdHYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:e9:78:9b:c3:f7:b5:ab:4b:45:0d:18:dc:ae:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Validity
Not Before: Mar 1 19:01:28 2026 GMT
Not After : Mar 2 19:01:28 2026 GMT
Subject: CN=74716ea538a47a245b4c5de09e6aa4d455b84b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:24:70:e6:4e:60:af:6a:30:a4:d5:d4:b6:
09:d2:1d:e3:9a:b8:38:9d:77:eb:b4:3c:00:e0:3c:
14:7e:1d:aa:d1:be:4e:51:1c:b4:ae:0e:b5:1c:29:
4b:7c:ed:ea:1e:13:df:67:0d:6c:00:72:28:99:63:
67:fa:fc:ed:bd:10:2c:f3:50:28:e6:26:49:9a:78:
82:59:33:ee:06:63:27:e8:e7:b3:11:02:7a:34:9c:
9e:82:f8:03:f9:f1:3f:4f:a9:3f:46:de:e5:a7:bf:
68:e5:3e:fa:cd:bf:cb:10:a6:92:4c:dc:b1:6b:c3:
a9:f1:0e:ff:dc:76:fb:2f:37:d9:62:40:76:77:52:
5b:8e:5b:72:f3:37:f5:97:47:4b:c0:2d:1d:3d:aa:
d9:23:9d:5a:45:93:91:c2:50:5a:13:62:ec:30:70:
42:e5:20:ac:4a:d0:8f:9e:98:bf:1c:8f:0a:ed:e7:
8a:c6:09:64:a6:da:1c:91:fd:90:fb:92:35:04:97:
11:59:34:17:50:62:af:9d:8d:b2:2e:f7:cc:56:18:
70:4c:c1:bb:25:bf:68:80:49:e6:16:c2:e9:a2:7f:
15:3d:39:1f:1e:7e:b7:76:b1:07:ea:ea:08:26:79:
e9:09:8e:70:98:68:4b:2a:ca:75:dd:77:6d:4a:2a:
f0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:71:6E:A5:38:A4:7A:24:5B:4C:5D:E0:9E:6A:A4:D4:55:B8:4B:93
X509v3 Authority Key Identifier:
keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f1:e5:c8:d1:dc:34:0a:33:20:7a:79:3b:4d:2f:c2:53:00:
b8:31:22:f1:6e:89:e2:ce:0a:cc:06:86:1c:23:54:e8:cd:37:
2b:00:8d:65:62:04:96:31:df:f8:49:49:3e:98:75:b9:3c:36:
9b:48:46:31:f6:a3:2a:d2:8a:ee:85:52:cc:7b:10:3f:08:fc:
e8:0a:5a:7c:d1:b0:80:e1:56:24:9a:84:0d:fe:bb:0e:49:60:
02:f4:91:bf:8b:9d:10:0f:63:ce:42:b3:fd:79:6b:98:49:42:
84:5b:7b:39:d1:03:e1:8a:4f:58:f6:96:2d:29:65:73:4f:e6:
b6:3a:3b:64:05:0b:72:ae:12:31:b2:f0:2e:ce:78:89:8d:a6:
43:4c:27:e0:28:2f:a6:5d:d1:7a:13:4d:fe:0c:d2:71:03:20:
ad:5b:14:48:03:3d:d9:9f:6f:c4:9d:f5:7f:4d:40:74:e0:57:
03:ef:87:d2:47:12:62:fd:7f:f2:f5:2b:30:6e:cc:1b:97:58:
5b:03:ba:e5:bf:e4:fb:ed:3a:f3:6e:1b:58:e8:17:cc:15:80:
76:20:41:6c:f2:58:9c:b2:67:28:f0:0e:a7:9c:a9:6c:21:c2:
22:3b:e6:a5:e1:fd:af:69:9d:94:11:9b:8f:a0:87:62:82:b8:
9e:5c:16:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:30 2026 by rpki-client