Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
File: _tf4F9fm3tVu3txESIzUHAUqDcU.mft (raw, json)
Hash identifier: Tfm29tJvrL6WEi2VK/6ox7gfCXDuNBx5yHF0TaoipLs=
Subject key identifier: AC:89:52:79:AF:06:57:0A:07:33:52:61:06:80:19:7E:F7:CF:FA:27
Authority key identifier: FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
Certificate issuer: /CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Certificate serial: 019CAA586D7276014A71B8FBEBE845603684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
Manifest number: 17D6
Signing time: Sun 01 Mar 2026 17:00:47 +0000
Manifest this update: Sun 01 Mar 2026 17:00:47 +0000
Manifest next update: Mon 02 Mar 2026 17:00:47 +0000
Files and hashes: 1: _tf4F9fm3tVu3txESIzUHAUqDcU.crl (hash: 5ibIFMUwAiYeZRJe4IFsoZ3FbJ+FkEzuVF3NeGE4eHY=)
2: ebTSPPyg-VVW95sh4YIFTx9KFNM.roa (hash: fvczqgkgOmhs5e7zYAZCGPaXspjsXrHeEw67/C/U03I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:6d:72:76:01:4a:71:b8:fb:eb:e8:45:60:36:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Validity
Not Before: Mar 1 17:00:47 2026 GMT
Not After : Mar 2 17:00:47 2026 GMT
Subject: CN=ac895279af06570a073352610680197ef7cffa27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:df:28:03:e8:0e:28:1d:6f:2c:35:f1:b4:
61:e5:74:e4:06:68:47:9c:ea:8d:4e:8a:f6:8b:bd:
c5:c1:d1:71:9f:39:7f:ac:de:81:fe:c5:b3:4c:fb:
58:67:50:5a:34:f8:55:7f:c1:6d:28:95:c7:4f:46:
51:91:5e:0c:f7:17:3f:80:19:3e:77:11:44:c4:45:
36:5d:a2:3c:72:74:83:b8:6f:95:32:09:ca:65:5c:
20:ca:d7:18:69:70:5d:45:5c:bf:8f:85:5d:ab:d8:
26:2e:9b:51:d3:86:a8:5e:81:96:1b:3b:aa:18:bf:
7a:4c:e7:e1:ad:c6:27:37:b6:64:ec:9b:ac:65:90:
9a:f5:16:b6:68:e9:db:c7:c6:6d:40:44:86:e7:b3:
18:d9:b1:13:eb:aa:cd:33:5d:76:f8:4a:b2:87:d8:
ec:67:87:c6:75:dc:23:3a:bb:03:22:40:3a:08:94:
ce:36:6c:26:20:92:87:28:cd:2a:23:ae:e1:94:b3:
57:fc:56:04:c6:2c:83:d7:96:71:5c:7e:6f:e9:3f:
e9:99:ac:bf:ea:a4:ee:52:ec:c0:38:fb:6e:4e:b4:
1f:05:04:f8:47:f5:30:45:5e:d3:ca:c1:f9:25:37:
0c:c1:57:6e:a6:0b:fa:f2:15:89:9c:f4:bc:d4:ee:
14:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:89:52:79:AF:06:57:0A:07:33:52:61:06:80:19:7E:F7:CF:FA:27
X509v3 Authority Key Identifier:
keyid:FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:53:62:e5:84:1d:36:fd:4f:f8:00:d9:18:d4:90:96:b6:84:
99:03:89:68:81:f6:f9:b0:94:23:c1:3a:3b:0c:e0:2b:fa:35:
1c:99:26:3a:3a:b4:f2:45:ce:c8:4d:6e:72:43:45:a4:3c:e5:
54:dc:c3:a4:d5:7b:38:c0:8e:10:89:0e:60:b1:f9:50:7a:94:
93:a7:09:0d:7d:b1:45:e7:b0:f6:50:2c:37:d4:34:8f:49:9a:
92:4e:92:68:9d:34:4b:bd:e7:5c:0a:79:6a:cb:08:7f:6f:03:
85:28:f2:bd:41:1f:27:72:e3:14:53:11:b6:76:95:e4:11:6a:
aa:d6:41:36:51:99:a0:93:dc:15:b5:00:e2:7b:42:c5:e0:3b:
19:0f:30:b3:96:d0:4a:9b:92:3e:f7:8f:b4:ce:a0:1a:33:f2:
e1:23:d7:40:59:ee:94:6f:2a:f3:0e:6b:5e:9d:1e:5f:36:7e:
cf:1c:19:6e:72:ef:7c:c9:7c:ed:b6:d0:87:1c:d7:3c:bf:c2:
64:f2:f7:43:69:2f:77:6f:4c:33:5b:ba:95:22:72:ba:55:4a:
aa:7a:28:de:ac:61:d3:ba:9b:08:0f:8a:08:10:23:3b:5d:fb:
ea:1e:7c:2a:21:68:29:c2:af:3b:87:69:8f:22:04:5a:b0:86:
3f:28:89:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:03 2026 by rpki-client