Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json)
Hash identifier: QxjfdC0fGIhhD9Jx00j78Rd8RmTwaGtC55OFOh9YFnw=
Subject key identifier: 51:94:F6:25:DE:83:38:89:A9:8D:8E:E9:03:7D:16:C4:8E:7A:0A:75
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 019CAAC64A15B46346659B4FD3B2F9CDF8E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
Manifest number: 115B
Signing time: Sun 01 Mar 2026 19:00:47 +0000
Manifest this update: Sun 01 Mar 2026 19:00:47 +0000
Manifest next update: Mon 02 Mar 2026 19:00:47 +0000
Files and hashes: 1: WMqwkkOCeJIiDGczokQt6OKgfpo.roa (hash: 6yCQ2yXVHO2BxnZqJR1Rvu8adOAClmHZ2J60vDEAoZw=)
2: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: pcLY5MqVWpksCT+HkkNweYeIsVGK3u1eyVjve3wV/tk=)
3: ydyTTB3FHmlgmrUF4u_cEkdDzws.roa (hash: sm5RJb+IplkwipOY1e61+aLvM0eV38hivV05zuDbU50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:4a:15:b4:63:46:65:9b:4f:d3:b2:f9:cd:f8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Mar 1 19:00:47 2026 GMT
Not After : Mar 2 19:00:47 2026 GMT
Subject: CN=5194f625de833889a98d8ee9037d16c48e7a0a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:94:6a:f7:f6:0e:82:a5:1a:b7:36:74:49:aa:
3a:79:7f:66:63:a2:aa:d2:fb:e4:86:2d:03:5e:10:
61:09:9f:a7:c3:cc:7a:35:4f:a8:1c:54:5f:12:d5:
68:5d:f2:f8:02:97:14:54:8d:a0:fb:b3:e0:eb:83:
81:06:04:3c:f9:ef:6e:3f:f9:6e:ec:97:50:db:aa:
6a:ec:8f:48:4d:01:32:94:80:df:1d:1c:be:9a:bc:
59:0a:f9:8f:b6:60:51:67:8d:17:5e:bf:ba:08:64:
9d:d0:29:9d:b6:da:99:58:ce:e5:92:2a:96:dc:24:
3e:9d:1c:3e:4e:82:91:fa:ed:c4:e1:58:bb:32:8c:
6b:72:bc:97:0b:57:58:ad:26:81:6c:86:d8:37:da:
cb:b3:14:96:d6:b2:ee:38:f7:ca:6e:f1:47:ff:45:
6e:34:e8:59:2c:12:59:cd:34:a8:26:21:e9:fa:fc:
64:32:1f:68:c6:0d:a2:8e:19:5c:a4:55:6d:e5:c1:
9d:45:d8:cb:c0:15:84:49:d3:44:a1:f8:56:49:ce:
93:f6:72:1d:e7:6c:d9:18:41:b1:b1:f9:3b:35:cb:
8f:7d:c2:93:f6:12:9e:0d:9c:29:22:56:76:9d:b5:
2c:8c:74:3a:bc:04:fa:da:7f:d0:f3:db:3e:b2:71:
76:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:94:F6:25:DE:83:38:89:A9:8D:8E:E9:03:7D:16:C4:8E:7A:0A:75
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f7:f1:e8:c7:77:e0:41:de:72:4a:c3:53:18:be:8c:e2:53:
62:5b:64:87:bd:5e:5e:97:59:c2:a2:72:fd:22:dd:9c:38:17:
11:51:af:c8:69:0f:c2:89:c4:93:87:5a:d1:c4:70:a6:75:3e:
82:1f:e3:e0:52:47:6e:09:77:35:cb:53:1e:48:94:4f:07:89:
be:c2:d4:7b:cf:32:f4:15:21:53:55:ee:48:e4:9b:50:c9:72:
0d:b1:5e:8c:fa:0c:81:4d:e4:7e:cd:97:ac:06:f8:1e:46:b9:
2f:88:d0:32:ba:cb:43:37:8f:e9:7a:28:fe:d3:1c:98:e8:0b:
b5:9e:8e:50:24:eb:f3:c5:b6:bd:af:cd:b3:f3:94:ea:25:08:
38:39:08:f3:5c:ce:fb:23:75:9b:cc:60:38:c1:4f:45:11:63:
8d:cb:3e:d1:20:40:c1:b0:fa:e3:95:f8:05:74:cc:91:1b:84:
c2:a1:18:99:fb:f2:66:e2:ce:37:81:9e:8f:6a:26:d6:9e:76:
43:67:58:0b:e4:2a:78:f4:2e:4b:1f:bf:52:e9:4c:e3:d3:ed:
b9:12:2e:0c:fe:30:07:14:87:94:13:5d:70:71:5e:b8:8b:11:
89:ee:e5:4f:4a:4c:b0:be:25:24:aa:d6:97:f5:3d:4c:ac:35:
cf:0a:15:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:21 2026 by rpki-client