Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
File: tPgsjv3jS9meROrwcxtsUltFShk.mft (raw, json)
Hash identifier: Z4DxxGy07ViC2PDC05ilGlKleNt4RGU9yQp2NQhiwjs=
Subject key identifier: F1:35:C6:51:BB:10:DE:4C:D6:4A:56:13:D4:1B:65:14:F1:B2:E3:53
Authority key identifier: B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
Certificate issuer: /CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Certificate serial: 019CAA8FDB6466A21A3B32621ECBB5CFAFF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 18:01:20 +0000
Manifest this update: Sun 01 Mar 2026 18:01:20 +0000
Manifest next update: Mon 02 Mar 2026 18:01:20 +0000
Files and hashes: 1: ny4NdP1dzVwPNWBOTK06eWCj9ac.roa (hash: kKntqqKczGjvuxQUkXngXz6ktNgL1Vp59wjcfYKrynM=)
2: tPgsjv3jS9meROrwcxtsUltFShk.crl (hash: ukV2IJ3Sy+Lt+phGK52wlQMElYIwu8L+sAGfXYx+1Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:db:64:66:a2:1a:3b:32:62:1e:cb:b5:cf:af:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Validity
Not Before: Mar 1 18:01:20 2026 GMT
Not After : Mar 2 18:01:20 2026 GMT
Subject: CN=f135c651bb10de4cd64a5613d41b6514f1b2e353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:83:f8:15:51:99:19:b2:9e:c9:36:de:94:79:
0c:6c:0d:46:24:22:75:86:7b:26:2c:9b:57:34:a9:
e1:48:87:e6:ee:0d:8f:d0:86:be:a8:5a:6e:16:c6:
26:6f:85:6e:cc:46:37:c2:94:71:4e:d1:74:c6:fb:
bd:b8:f9:85:4c:0f:04:d4:54:dc:8d:9a:d6:de:ee:
8d:13:63:60:60:d2:b2:cb:d2:8a:f3:50:b7:55:20:
13:da:ad:82:36:d2:76:86:62:cb:f3:5c:56:6f:d3:
18:77:62:df:90:7d:2b:12:8c:68:7c:9a:90:70:54:
80:09:ea:89:7a:fd:d3:c1:57:92:d8:bf:c8:f3:2d:
85:d7:00:21:9f:93:ab:84:05:b1:48:bf:ae:24:c3:
97:55:db:c9:c1:c5:72:31:db:b7:7a:87:f8:51:92:
e7:92:e4:56:8a:2b:37:d6:8b:b6:c8:10:67:b4:70:
49:8f:75:5e:4f:cc:b9:ef:bb:75:aa:a0:2d:56:c1:
1d:2f:d5:26:10:52:92:2a:9f:74:d2:e8:3c:25:7b:
32:a5:58:fb:c6:c4:2e:8d:97:d2:72:99:6a:56:18:
4f:07:51:1c:90:ac:aa:a0:34:37:77:7e:fc:67:fc:
17:b4:7d:5d:08:8d:7e:f4:66:05:f5:08:68:ed:24:
8d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:35:C6:51:BB:10:DE:4C:D6:4A:56:13:D4:1B:65:14:F1:B2:E3:53
X509v3 Authority Key Identifier:
keyid:B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4a:96:59:91:0e:5e:93:e8:8d:01:2b:5c:76:19:c0:53:b0:
a7:3a:c8:d5:46:d0:77:33:01:90:0f:73:7b:90:14:a5:83:9d:
a2:a9:7b:c7:ce:07:70:dd:d3:73:08:d8:7d:3b:cf:4e:0b:06:
48:5c:75:5f:a2:ed:99:82:2e:09:91:26:30:91:80:68:5c:e3:
b8:86:29:fb:cb:5e:73:22:3d:7c:a5:b7:c7:83:00:36:98:d1:
c5:2e:b5:e7:fc:a4:68:f0:18:3f:33:a3:46:20:66:b2:76:4a:
7d:18:81:29:d9:8b:c8:7d:50:d1:c2:3b:c9:51:ac:25:f9:a0:
2e:ec:1d:f1:c4:7d:bd:48:c4:be:7f:6a:97:22:71:9d:62:2d:
38:65:b8:6b:e6:70:3b:7b:f9:36:e8:38:90:b6:2c:09:b6:93:
85:3e:be:40:db:ab:fd:88:50:a2:75:cd:32:31:fa:28:c1:1e:
c0:81:f7:d8:f8:e8:9f:4e:da:ae:43:ce:fc:4c:fc:71:4e:67:
15:1c:88:7b:81:76:e2:41:5f:0c:d0:03:9b:b5:a4:c8:07:b9:
4e:4c:cf:a0:51:4c:15:48:dd:55:ab:a8:1b:9c:17:c5:28:88:
e2:e2:7f:b2:15:95:ed:76:e0:1c:51:a0:79:22:eb:94:16:16:
f4:b0:78:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:56 2026 by rpki-client