Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
File: tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft (raw, json)
Hash identifier: zSvPxO47pha+kapso/GX845l6UnFj6wJ4zNWj7jcV8c=
Subject key identifier: 12:46:75:95:1D:B6:65:EB:7C:D5:97:89:EB:4F:95:48:53:F5:27:4C
Authority key identifier: B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
Certificate issuer: /CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Certificate serial: 019CA9EB6FEEC6CE19C6131043E1138A2054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
Manifest number: 04E4
Signing time: Sun 01 Mar 2026 15:01:44 +0000
Manifest this update: Sun 01 Mar 2026 15:01:44 +0000
Manifest next update: Mon 02 Mar 2026 15:01:44 +0000
Files and hashes: 1: JaJgHNZlSAbtuKvLA3-BudJJTlo.roa (hash: uT77HGoSLR7ak2tNmSlHYY46dhCnEltA+vTWyDTCj6Q=)
2: tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl (hash: UjNGDiGQSf8wZlEISKYJXehE2kHqKmCViiFFHD7+Wfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:6f:ee:c6:ce:19:c6:13:10:43:e1:13:8a:20:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Validity
Not Before: Mar 1 15:01:44 2026 GMT
Not After : Mar 2 15:01:44 2026 GMT
Subject: CN=124675951db665eb7cd59789eb4f954853f5274c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:de:85:4a:fc:dc:01:11:2f:af:7e:f1:b7:
97:1c:bc:83:56:72:2e:c3:64:ff:e7:c1:fa:9d:5d:
6a:cc:30:21:5c:16:bb:44:b7:b0:20:9f:21:13:b9:
07:1a:9f:f6:6f:27:79:3e:e7:d0:d6:a2:25:db:e8:
49:7c:06:ee:2b:d4:66:4c:1f:e0:20:60:5f:13:13:
eb:ea:74:bf:13:9d:45:09:3b:61:ba:45:05:13:6b:
5a:a6:b3:8d:df:d4:6b:3e:7b:7d:e2:a4:a6:93:0a:
4a:4e:8e:d2:c8:29:59:da:dc:37:42:b5:c9:2e:78:
d5:28:ae:54:01:af:cf:be:30:e3:28:1f:5c:fb:71:
ec:f1:a1:9c:7d:4f:1b:1e:5e:db:ff:bd:0d:c7:56:
35:90:9d:1d:10:d6:db:f0:21:76:2f:f7:9f:b8:e3:
8a:46:07:6c:b3:23:cc:3c:98:2b:bb:ad:4d:20:fd:
d6:7c:38:c8:f9:b7:0b:7f:4a:fe:4b:ca:40:f3:3b:
1f:0f:f2:71:9a:7b:92:ac:82:ce:4b:35:2b:35:6f:
75:b0:ec:d8:a9:fb:c0:8c:6c:a1:9d:3e:d7:54:6c:
0b:f8:4f:3a:51:9b:a9:f6:08:24:84:3d:01:6d:a7:
3d:fc:d9:12:5e:19:03:19:71:f4:f3:46:62:70:f6:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:46:75:95:1D:B6:65:EB:7C:D5:97:89:EB:4F:95:48:53:F5:27:4C
X509v3 Authority Key Identifier:
keyid:B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4c:3b:21:d9:67:82:8b:f9:96:ad:9c:af:9c:80:b7:01:ae:
de:c1:40:38:98:a0:f6:4a:31:f6:8d:4e:ab:8c:89:ef:92:a6:
1f:2e:18:4d:36:c1:0c:d6:90:48:04:3a:5b:d9:ce:76:a3:0f:
45:08:8f:2e:3e:c3:8d:8c:ca:b8:cb:0d:d1:b7:fc:cc:45:6f:
f5:90:06:87:eb:43:da:f3:0e:72:5c:09:92:93:6d:39:a2:d1:
09:7a:de:2e:32:72:35:18:b5:f0:3e:ee:57:03:29:31:f7:6e:
f2:b5:15:f8:ee:bb:52:5b:0c:09:11:a4:5e:10:61:ba:0f:d2:
d9:55:5b:0e:bb:ba:55:5f:26:e9:b1:60:80:78:18:5f:ee:9a:
0f:64:d3:8d:62:63:e5:58:2e:d7:bc:fb:25:cb:78:13:1c:cd:
24:b7:ed:4b:08:d7:c7:41:43:2b:b8:13:5d:a5:e7:6e:e6:7a:
07:64:66:0f:e4:97:ac:d0:58:17:57:3c:47:e4:f7:a0:93:5c:
a3:54:cd:70:a9:6b:f2:58:3c:36:a2:bc:99:34:6d:4b:39:dd:
5c:d3:03:14:1f:28:54:16:5a:55:57:1d:eb:24:63:42:09:68:
db:37:d6:e7:b8:0e:b0:24:f0:2d:10:82:e3:5d:8a:b4:56:f4:
34:16:ec:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:33 2026 by rpki-client