Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
File: tPM_b9KbrwPMTUha9fa3DaawCZ8.mft (raw, json)
Hash identifier: HNPEYsVNxivsBo5iNPCqdJM/SYDccz8HrhtTvPvdutM=
Subject key identifier: 56:47:3B:9E:5F:11:E2:39:B9:6C:F6:E8:B3:05:D4:AA:99:96:96:98
Authority key identifier: B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
Certificate issuer: /CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Certificate serial: 019CAD907612B711FE4F20A2B08783305E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
Manifest number: 1120
Signing time: Mon 02 Mar 2026 08:00:51 +0000
Manifest this update: Mon 02 Mar 2026 08:00:51 +0000
Manifest next update: Tue 03 Mar 2026 08:00:51 +0000
Files and hashes: 1: Fmn_d_Mky7sAyYX6SnAgjbHa1Cc.roa (hash: FmLoKPhtszPmnHtcY6zDJ3BsNEoID8FJ22Wnnvq62SY=)
2: tPM_b9KbrwPMTUha9fa3DaawCZ8.crl (hash: g0LNx3XMohcvT2Mhlvs0iVHczG27ZxFz31MpIA69my0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:76:12:b7:11:fe:4f:20:a2:b0:87:83:30:5e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Validity
Not Before: Mar 2 08:00:51 2026 GMT
Not After : Mar 3 08:00:51 2026 GMT
Subject: CN=56473b9e5f11e239b96cf6e8b305d4aa99969698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:8d:44:04:b3:33:24:a8:7c:ea:a8:bd:93:
08:13:76:74:3a:62:d0:20:9c:0d:1c:bd:ba:f8:bd:
6d:f9:dd:39:5b:04:52:67:44:a0:d1:35:9d:7f:3c:
be:81:d7:f1:e0:f9:93:aa:4a:79:33:82:09:fd:14:
63:86:96:0c:f8:de:4a:c7:39:7a:23:8b:b8:d7:4c:
b7:4f:e9:78:03:13:f1:f2:6e:23:5b:b4:2a:ad:b8:
58:32:d4:09:15:87:e3:13:e6:9a:94:01:29:10:29:
fb:a5:37:c5:8f:f2:69:1e:c3:a8:4c:f8:59:12:da:
36:a5:c3:da:a2:a0:b7:33:c5:25:9c:ae:04:21:1e:
0c:f0:25:c6:c6:b4:e3:a2:70:33:56:e9:ca:04:a0:
de:76:2f:9f:bb:61:5b:88:01:29:10:fa:a5:92:35:
cd:cc:fa:51:4f:e9:b7:bd:94:4e:be:75:85:2b:ab:
83:da:3f:ec:1d:a1:cb:d6:08:a9:bb:82:b5:bb:7e:
e2:c5:23:0c:d3:cb:b7:e9:0d:b6:70:b6:09:84:16:
59:d0:a2:df:20:4e:50:f6:0b:00:79:10:01:80:da:
f4:a0:93:3d:8a:3f:66:ef:b6:83:32:65:a6:07:e4:
73:0b:09:6b:ce:a0:72:8a:dd:9c:ea:9b:84:63:f9:
c1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:47:3B:9E:5F:11:E2:39:B9:6C:F6:E8:B3:05:D4:AA:99:96:96:98
X509v3 Authority Key Identifier:
keyid:B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f7:fd:8e:c1:13:ea:b7:4e:52:1e:be:25:f6:e8:c9:21:ab:
d6:18:31:02:20:6c:1e:69:05:70:4b:f3:9a:07:48:93:01:b2:
fe:b9:78:8f:22:89:c9:ce:50:46:78:b7:cb:63:82:49:82:3e:
fb:bf:a1:3e:54:86:5a:83:df:ec:c8:ca:6f:8f:41:68:e6:05:
65:ed:5d:0e:05:11:7c:58:a3:2d:04:95:a8:21:44:77:9f:d8:
33:d5:d0:d9:af:55:e3:0b:ea:f8:0e:08:a0:ca:df:f1:9b:a3:
64:b6:fe:f9:7d:27:ea:f1:96:5b:ce:b3:8e:f6:63:fd:c8:99:
3e:04:e4:e0:22:e6:15:c3:64:51:fd:fc:2c:9d:4b:c0:3f:b5:
b2:58:44:38:7e:0d:96:1b:ec:99:ad:76:e6:c7:4f:59:e6:c3:
45:84:10:ab:89:ac:52:a7:91:a4:12:c8:c9:46:20:fa:00:aa:
72:f0:16:18:84:be:d8:36:cb:5c:26:7f:db:d2:3a:4a:36:b8:
45:33:39:65:a2:31:44:ed:04:e9:26:5d:df:75:42:1e:59:d2:
49:2d:b9:f9:05:e8:9e:d3:90:a5:d0:a1:04:4f:6e:7a:b2:0a:
bf:f1:91:79:c3:23:2b:ed:0d:39:6d:03:b1:3c:38:2b:2d:31:
5e:20:00:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:36:13 2026 by rpki-client