Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
File: tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft (raw, json)
Hash identifier: dLCGqitokT8We89vraVEK8uRNLHgDauZ60GEPkY4xdk=
Subject key identifier: 24:21:78:C7:37:05:6C:BE:2B:C5:93:A7:56:15:F7:E1:0F:69:CE:8B
Authority key identifier: B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
Certificate issuer: /CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Certificate serial: 019CACEB7A3548259ACF5DF916AA660BA8F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
Manifest number: 184C
Signing time: Mon 02 Mar 2026 05:00:39 +0000
Manifest this update: Mon 02 Mar 2026 05:00:39 +0000
Manifest next update: Tue 03 Mar 2026 05:00:39 +0000
Files and hashes: 1: RNoONMgjC7AI9bUiPXHJnoNxdw4.roa (hash: EyX2BbVopJ5hjqPnGfS3gH2lJBH+hCeBYJzhz4A8ggc=)
2: nUF12WZsvpoiPI9C00eeFdJfaVo.roa (hash: 9SbxvhyRlkdpKS3ff2WOCyOa7It2KK0x1wSPI6mJgOw=)
3: tNl2UUnZ4217WSLfqRDSI0O_BWU.roa (hash: TJsFtOL6bWviF8Z8b9ypqKLo31djdrQdvLmCXkT7uLQ=)
4: tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl (hash: +VI1Jjr/ErqK3Z5hsFZfUpGdf0eRBFmLWuGVZ7DtXcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:7a:35:48:25:9a:cf:5d:f9:16:aa:66:0b:a8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Validity
Not Before: Mar 2 05:00:39 2026 GMT
Not After : Mar 3 05:00:39 2026 GMT
Subject: CN=242178c737056cbe2bc593a75615f7e10f69ce8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7a:37:9b:e2:0c:d9:af:d3:a6:6f:ec:bd:5d:
d1:84:8a:c6:93:f2:11:70:6e:7a:9a:3e:3b:a3:86:
f9:06:14:07:41:d7:a0:30:d8:aa:66:23:dd:bb:1b:
07:b7:9d:bd:d6:8a:11:d3:65:8f:4e:44:2b:81:0e:
32:57:a1:9e:63:e1:33:92:b1:07:62:a3:b4:27:37:
f3:d5:23:f0:14:96:e5:17:ce:90:8e:a3:5e:7f:21:
60:5d:3a:2d:72:19:07:df:83:12:1d:fa:2b:0e:44:
aa:38:43:f7:fc:d5:d2:73:e1:99:60:83:34:f6:ee:
20:51:a4:5d:ad:9f:3a:35:c7:c6:97:46:b4:9d:ea:
c4:2f:00:9a:68:85:3f:7d:4c:1c:77:9b:57:12:65:
5e:69:d8:0d:1a:f2:1a:38:e0:60:18:d5:ea:39:65:
8f:65:55:ad:2b:d1:53:14:61:c1:f4:46:5a:b9:12:
b7:aa:07:44:44:c4:f4:cf:a1:7b:17:ff:65:8f:e9:
4e:85:be:3b:9e:2f:90:f4:7e:dc:23:5d:53:6f:0c:
72:df:91:38:a4:68:d7:87:4d:93:d4:e2:79:ea:18:
35:0c:86:77:0b:d4:7c:cf:30:cf:dd:39:a1:58:c1:
56:44:b4:80:55:7c:ef:a8:a5:d5:fc:89:4c:73:2f:
bf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:21:78:C7:37:05:6C:BE:2B:C5:93:A7:56:15:F7:E1:0F:69:CE:8B
X509v3 Authority Key Identifier:
keyid:B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:46:0e:27:d2:37:0a:8c:72:9c:3b:eb:63:e2:3b:ed:a0:dd:
e8:b4:24:1e:07:10:82:5f:90:db:89:e3:de:22:f1:72:be:6a:
00:e3:3d:71:82:de:ce:6d:4e:47:b3:69:cb:38:d4:50:e3:1d:
0a:41:1a:01:46:05:e2:e3:93:c3:90:29:66:41:1a:57:b3:29:
10:eb:d7:bf:e1:dc:a2:45:d3:5f:ac:ac:ab:4b:90:51:7e:35:
ee:89:d5:e1:9a:98:a8:2b:09:ba:c8:ff:d0:e0:33:5e:e7:4a:
f0:f4:3d:f9:07:18:78:81:ba:f3:4b:e6:09:c2:00:da:c5:3a:
2a:a3:f7:62:e0:9a:66:50:9a:77:ec:43:14:5f:27:38:d4:f0:
90:e8:65:4c:6b:78:f1:22:d0:92:49:8f:6b:f1:c8:af:fb:74:
18:fa:b6:18:6d:3e:2d:89:16:bd:d2:77:79:54:40:a2:12:a5:
24:c6:03:10:46:88:21:3e:db:74:a3:71:45:5c:0c:5a:de:63:
7b:b6:ee:3b:be:ec:e2:1a:ac:8e:e8:da:52:de:eb:5c:09:f4:
c1:ca:bd:19:3a:78:7a:fd:ad:63:52:b4:f0:75:d3:87:ed:7a:
6f:b8:ba:63:f8:d4:b0:c2:57:16:1b:d0:ba:eb:20:67:c2:8c:
e8:d8:1b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:58 2026 by rpki-client