Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.mft
File: tDpxymDXTkXSuXSKsQZlKf0BM34.mft (raw, json)
Hash identifier: THE6S5kWHkLYGnTtAl+tPhPv6kT7XOETywVNwNppq4k=
Subject key identifier: 60:B2:C3:8D:2A:4B:F8:D7:B9:E5:F6:DF:92:FF:BE:0A:20:62:C6:8B
Authority key identifier: B4:3A:71:CA:60:D7:4E:45:D2:B9:74:8A:B1:06:65:29:FD:01:33:7E
Certificate issuer: /CN=b43a71ca60d74e45d2b9748ab1066529fd01337e
Certificate serial: 019CAAC64F38647B5598EF790982B663ADA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDpxymDXTkXSuXSKsQZlKf0BM34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:00:48 +0000
Manifest this update: Sun 01 Mar 2026 19:00:48 +0000
Manifest next update: Mon 02 Mar 2026 19:00:48 +0000
Files and hashes: 1: ZcHXLBJSx_Tt6F_s5FsMwgXSk6E.roa (hash: DXyT/IUpWKmwacoz1gYsfpWFfm80bfOxmbXLHhHgltY=)
2: tDpxymDXTkXSuXSKsQZlKf0BM34.crl (hash: z19AG73ymWtBd3hoJDgeth9CYLJJNMDGkwh1C6fetZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDpxymDXTkXSuXSKsQZlKf0BM34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:4f:38:64:7b:55:98:ef:79:09:82:b6:63:ad:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43a71ca60d74e45d2b9748ab1066529fd01337e
Validity
Not Before: Mar 1 19:00:48 2026 GMT
Not After : Mar 2 19:00:48 2026 GMT
Subject: CN=60b2c38d2a4bf8d7b9e5f6df92ffbe0a2062c68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:3c:97:1d:f2:30:97:81:35:d6:f4:1a:fe:
7a:54:eb:26:9f:8a:18:2a:5c:0e:1e:46:64:37:55:
c7:7f:ed:83:4a:a2:9c:60:56:5b:43:f1:42:4e:97:
fd:5b:f6:2e:fc:28:66:38:a8:a6:b7:e7:d8:70:34:
a0:e2:7b:86:03:cf:2a:7d:61:5c:34:a7:53:c3:eb:
cf:2f:42:42:46:1b:96:e4:4a:61:fb:e0:09:f5:0d:
df:85:d7:b2:20:93:24:35:2a:c0:76:10:5d:87:ec:
20:85:f7:3b:a0:74:22:1c:7d:90:db:26:39:22:8d:
be:56:7f:b0:ec:7e:9a:4e:ce:7d:92:d9:e4:64:f3:
1a:e3:bd:da:11:22:b0:b6:f4:1d:a6:c0:ac:b0:2b:
ae:1f:91:60:b1:be:ad:e8:49:e6:fd:a8:78:e9:b3:
65:da:c9:21:9f:88:26:ab:5e:71:6e:63:be:b9:75:
a8:02:21:c7:62:f4:02:18:3a:3b:c0:f5:5d:0e:fd:
0e:27:71:ee:1c:2d:d9:bd:a7:57:dd:95:b1:33:3d:
38:58:12:24:0b:e5:2d:bc:15:f6:41:4c:4a:3a:aa:
06:b9:6d:f2:07:62:9f:ca:66:f5:20:18:62:eb:f9:
e5:af:df:60:d7:5f:86:a2:98:44:2d:52:75:59:41:
fb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B2:C3:8D:2A:4B:F8:D7:B9:E5:F6:DF:92:FF:BE:0A:20:62:C6:8B
X509v3 Authority Key Identifier:
keyid:B4:3A:71:CA:60:D7:4E:45:D2:B9:74:8A:B1:06:65:29:FD:01:33:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDpxymDXTkXSuXSKsQZlKf0BM34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8f:f7:e2:2e:21:75:e7:99:d4:9c:28:e1:8c:01:d0:34:66:
a7:b9:26:1b:55:3b:2f:62:ff:54:31:c7:fe:1e:99:c9:f6:7f:
ee:8e:ee:c6:4d:b9:a1:26:5f:92:3a:8d:39:61:a8:8c:09:83:
db:19:e3:4b:69:cd:a5:ad:75:bf:38:2c:8e:e4:e4:fe:d9:5c:
7d:3e:3c:22:f8:58:1a:d8:fe:8e:2d:3a:e5:0e:29:fa:8e:70:
19:46:a9:a2:d3:6f:fe:70:ed:ff:f4:00:4b:41:8d:31:5d:30:
ca:c1:da:49:bb:71:09:87:f8:ca:bf:8b:ca:8d:96:b4:da:ff:
0c:3e:a9:68:7d:72:77:2e:48:c7:53:47:6f:3c:87:a6:bd:01:
e7:b9:6e:58:2f:5b:e4:37:f1:56:a5:d1:ff:b6:a3:58:a1:71:
dd:e1:05:61:be:33:82:35:76:d6:63:28:41:57:2d:7f:8a:3e:
1e:ca:a3:dc:ac:fb:76:af:31:cc:f8:9c:0d:5e:ae:da:98:6e:
67:11:7d:5e:4a:56:73:d6:a5:83:7d:5b:20:4c:e3:00:8e:54:
55:96:76:66:4f:f1:7e:ed:06:90:3f:17:d5:bb:66:31:26:79:
a6:c2:99:04:39:91:22:79:24:27:1b:09:cb:21:92:c9:2d:d5:
80:f8:5f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:21 2026 by rpki-client