Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
File: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft (raw, json)
Hash identifier: NFLj4Vj1QLw4AEFLGMF2ATWCv3N98JmTWuGd6HO8ytU=
Subject key identifier: FE:EA:3D:EC:AA:5D:33:33:B9:35:2F:AF:8D:F7:9B:76:92:75:78:37
Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53
Certificate serial: 019CAD5936834C47A5FFE37441724BC8786B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
Manifest number: 15AF
Signing time: Mon 02 Mar 2026 07:00:30 +0000
Manifest this update: Mon 02 Mar 2026 07:00:30 +0000
Manifest next update: Tue 03 Mar 2026 07:00:30 +0000
Files and hashes: 1: YeKtEsYaTNZoSHj3N6MlBsotJrQ.roa (hash: twTw0giPhGzIQ/V/HMZrgKRp++mkr21dxckWNhdSudg=)
2: ielQr4EC94tydWptb7Zy7oQJTlg.roa (hash: IK1qVKo+95L3ssLme0pcM7macPsa/yBGCJukgetUuXk=)
3: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl (hash: gV100J/2sARYQZZi5RWeAx2nPqu/HUyVOmkRWRrM9f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:36:83:4c:47:a5:ff:e3:74:41:72:4b:c8:78:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53
Validity
Not Before: Mar 2 07:00:30 2026 GMT
Not After : Mar 3 07:00:30 2026 GMT
Subject: CN=feea3decaa5d3333b9352faf8df79b7692757837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:63:ce:aa:76:37:e0:4b:7d:e5:d2:f6:2a:5c:
65:c0:4b:ef:f1:23:17:8a:98:eb:b5:81:ac:2f:41:
a8:fc:b6:56:46:59:69:dd:62:7d:03:93:75:4a:ad:
35:76:e0:59:8e:8e:13:d1:57:5f:1d:7a:b5:0d:1a:
7d:2e:1a:52:f7:3f:08:41:1c:87:35:07:ec:fe:08:
58:0d:b5:a4:b7:09:82:8a:3f:bf:7b:b6:1a:81:25:
b5:dd:b8:53:23:29:b1:16:4f:55:6b:51:e2:92:0c:
de:fe:eb:d0:cb:23:4c:76:10:0b:64:01:75:f2:46:
66:a3:a9:2c:35:a0:75:20:69:50:da:48:0e:5c:72:
20:3f:70:bc:20:98:e9:33:09:e8:ae:18:9e:ce:28:
81:c3:64:3f:74:52:37:84:23:ef:9a:5d:dc:05:a0:
59:2d:44:74:de:60:ae:9a:6f:88:29:88:32:ba:5f:
9d:dd:4d:81:9e:63:d8:06:14:36:2b:56:b7:a2:53:
96:9e:26:3c:3f:39:90:b3:7e:e8:69:ff:dd:0f:4e:
ca:64:54:58:c5:55:c2:05:51:47:54:a5:5f:fe:7e:
0d:f1:09:45:9c:28:e7:95:3f:37:bc:c5:0b:0f:d3:
a7:4d:b2:ec:b5:69:f2:6b:05:34:ef:92:c4:18:85:
a6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EA:3D:EC:AA:5D:33:33:B9:35:2F:AF:8D:F7:9B:76:92:75:78:37
X509v3 Authority Key Identifier:
keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:86:f0:9b:e1:b4:85:76:fc:9f:9a:44:30:ad:3a:75:ad:70:
20:76:62:cb:c9:f1:e8:ee:d6:51:0f:08:b7:e9:6f:a7:54:d7:
de:1e:58:e6:fd:6f:b7:aa:11:f4:6a:e4:0a:5c:78:8c:40:2d:
20:bd:d8:89:7c:de:b4:67:9b:78:b9:2d:42:10:29:64:46:25:
43:7d:ef:8b:64:a7:7a:d6:fb:c6:03:3f:61:b2:48:b3:ca:f1:
05:85:6f:37:37:cc:e3:7a:c3:af:c1:b7:86:21:67:e9:5d:1b:
38:f8:5b:a0:55:c4:ac:d0:9f:13:cd:c3:14:7d:40:e1:42:e8:
56:36:c7:66:b3:5c:1d:e8:a7:43:11:85:e7:1d:ed:f4:0c:fd:
72:86:23:c2:49:43:c5:c5:9c:08:0f:f9:84:7f:25:3b:c2:23:
6e:93:c8:7a:54:7f:a7:62:c9:39:f8:ee:f8:0e:03:2e:8e:92:
6a:bf:12:10:0b:e2:0f:1d:d3:34:46:1b:97:5c:15:09:6a:29:
5e:4c:33:73:f0:d2:a3:f9:07:58:52:6a:82:ab:e7:81:fd:8f:
9e:c2:eb:a2:75:cd:e5:c3:55:19:a9:57:c6:79:2f:4e:c1:b4:
d3:bf:02:d8:e3:c6:39:57:3a:1d:9c:1b:ad:15:f5:ea:9b:fd:
07:b7:b0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:00:48 2026 by rpki-client