Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
File: tK4oip3bDvUKKUs8rpY-FHycfck.mft (raw, json)
Hash identifier: CnMfdn7H+DG2TkuGokv4GvMOl4YMFaCQHXvASwKa6xk=
Subject key identifier: 5D:5B:C3:48:23:01:46:D8:29:9E:49:E9:31:A5:EE:30:D3:16:13:B9
Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
Certificate issuer: /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Certificate serial: 019CABD9007FAEE6C53E84428F7C9B9F16C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 00:00:51 +0000
Manifest this update: Mon 02 Mar 2026 00:00:51 +0000
Manifest next update: Tue 03 Mar 2026 00:00:51 +0000
Files and hashes: 1: TWgMkDcy_HR5XMg6rXv7Ax4ipk8.roa (hash: H/mEg4ne87MR+9DERthNodFmmxJcKV/plF/1hfT1FKo=)
2: XXDs_1WF8xAupVE6WOS_dNf9osM.roa (hash: 20X1/QsaSj3DVDtfhjJ7nUqhCYkTj6/5wZfHSwDpBiU=)
3: tK4oip3bDvUKKUs8rpY-FHycfck.crl (hash: Cc1nv+vU4eYC4XX3mG/M7c82xeqrZUF7bmN8NBHotiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:00:7f:ae:e6:c5:3e:84:42:8f:7c:9b:9f:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Validity
Not Before: Mar 2 00:00:51 2026 GMT
Not After : Mar 3 00:00:51 2026 GMT
Subject: CN=5d5bc348230146d8299e49e931a5ee30d31613b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:45:9b:c7:18:75:58:04:86:3b:a3:6e:ba:da:
e7:ef:16:79:21:dd:dc:fc:b8:76:66:4d:5f:03:43:
91:98:dd:79:22:9a:38:ce:b6:33:8a:67:5f:f5:5a:
ff:6f:30:07:73:59:38:ad:39:26:06:a0:82:6b:f7:
40:ca:28:d0:a1:a7:af:d0:2d:f7:29:98:9d:f9:b0:
46:e5:fe:64:a8:46:62:53:5a:95:6f:06:1d:15:bf:
14:6d:74:cf:f9:fd:56:f3:1b:e3:e6:4d:f0:eb:0a:
2f:12:5c:1e:b5:95:12:3b:f7:76:fb:16:7d:02:64:
99:c3:13:68:85:99:40:4a:76:e0:cd:b7:6e:95:f7:
66:5d:40:23:90:ff:8a:d7:17:ec:b4:f9:8c:00:ee:
80:c5:a9:56:79:d8:59:4b:e1:31:27:6d:74:19:ab:
3c:d1:79:76:57:1c:9b:5b:39:8a:67:cd:8f:3b:2a:
34:b7:2c:39:86:28:70:d1:3c:40:31:ec:f8:d1:39:
82:b5:0c:d9:0e:8d:f5:0b:2b:06:cb:44:73:99:b4:
e5:b2:a7:89:0d:1f:88:e0:3c:7d:90:59:c9:28:d3:
55:a0:25:d6:f8:bf:44:44:e1:de:c5:68:e6:19:57:
75:f3:27:80:2b:cc:e7:08:05:a4:de:6c:4a:1f:cd:
13:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5B:C3:48:23:01:46:D8:29:9E:49:E9:31:A5:EE:30:D3:16:13:B9
X509v3 Authority Key Identifier:
keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1c:5b:fc:32:83:79:8d:53:c4:6c:aa:b2:7b:c4:ed:a1:15:
bc:8c:29:d2:39:1b:94:59:f5:05:fe:45:d8:76:fb:9d:50:ef:
91:34:c5:e2:92:57:67:18:e1:05:58:23:20:f4:89:92:41:78:
22:3f:d4:5f:4e:0b:fa:64:ab:b9:b4:93:ff:9b:3e:0d:20:62:
fe:74:c4:33:33:6a:bf:76:7a:bd:b6:50:1c:77:29:b8:37:18:
c3:a8:83:ce:e5:36:94:ee:4e:a4:d5:85:a9:f9:65:b3:70:16:
08:f8:3a:63:b8:fe:7a:9a:d2:9c:4c:e7:bf:c8:e8:6a:76:50:
ae:68:2f:b5:a5:4d:d8:34:20:af:37:97:5f:32:45:e0:04:84:
4f:28:e5:c8:ac:b0:5d:8e:cb:ae:58:42:c4:c7:f9:36:71:d0:
78:4a:0d:59:1e:a5:82:3e:a5:9c:c2:24:9d:03:7a:2c:cd:e6:
7f:34:ec:a3:33:2b:e5:b8:65:da:3c:6a:1a:16:07:68:57:1c:
19:b7:65:3b:4a:f6:50:84:d4:b9:d6:ff:7b:ca:7d:2e:96:6f:
84:3b:1f:44:ff:d4:c8:e1:a3:b1:e7:b6:16:78:97:e1:99:75:
18:31:00:aa:6e:d3:30:a7:fd:a0:37:1e:d9:38:83:95:e2:35:
72:58:0b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:17:20 2026 by rpki-client