Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
File: tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft (raw, json)
Hash identifier: jcbbObhc+H0GRJtipBYNnCxV3JZy2MiHQeoekVxe1ic=
Subject key identifier: F6:7E:4C:9D:D0:9B:AE:19:44:6C:4B:DD:F8:86:76:6E:A4:28:C4:2E
Authority key identifier: B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77
Certificate issuer: /CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
Certificate serial: 019CACEB49B371C8484005841311DA3838A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
Manifest number: 0E78
Signing time: Mon 02 Mar 2026 05:00:26 +0000
Manifest this update: Mon 02 Mar 2026 05:00:26 +0000
Manifest next update: Tue 03 Mar 2026 05:00:26 +0000
Files and hashes: 1: dIqmIrGGl8FI-sOwGOw90e9FkJY.roa (hash: ux/S4urJBgHoaCGluZkTkGPr6Fq78RqIkr3zENS3Pqk=)
2: tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl (hash: ujNrV4McTSixLEtxcxcvWLGPaXCF4zjUw0FKcSt1Nlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:49:b3:71:c8:48:40:05:84:13:11:da:38:38:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
Validity
Not Before: Mar 2 05:00:26 2026 GMT
Not After : Mar 3 05:00:26 2026 GMT
Subject: CN=f67e4c9dd09bae19446c4bddf886766ea428c42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:82:fd:4f:2e:ce:f9:cc:b7:20:6c:45:77:
81:79:a5:2e:31:4f:be:93:df:da:0c:50:a7:3b:e2:
59:5a:62:31:59:30:19:e0:0c:f8:8d:cc:e0:e2:55:
6a:f9:31:a7:73:30:e0:38:f6:c3:78:6a:20:a0:a5:
0b:35:fe:5d:47:1f:de:18:12:29:29:19:03:ae:49:
e6:77:c1:58:14:de:09:f9:69:5e:6d:20:2f:26:fa:
f6:b8:16:ba:7f:5b:75:d9:d4:60:6d:a2:2e:ee:63:
00:ae:c7:a0:22:0e:81:de:1d:0e:05:2e:7b:c9:02:
58:0b:ea:f6:e4:e6:5f:06:9f:6d:42:ae:06:32:65:
2e:cb:e3:ed:88:04:96:7c:8d:c4:81:44:6b:71:d4:
39:f2:b8:ce:8e:3b:8c:ff:2c:78:a6:c9:b6:a9:33:
0f:d3:c5:43:d8:06:92:01:70:05:f3:d6:02:4c:04:
c1:0f:d7:98:bc:7c:3c:b4:84:02:8c:28:35:59:2e:
4c:72:ba:71:59:95:e5:fb:0c:8e:33:34:fb:24:e0:
53:f7:c3:7b:0a:62:9a:27:b4:b6:0f:0f:3a:c9:02:
7c:bb:27:9a:1a:e9:13:87:56:12:55:4a:ae:7f:0c:
2b:a3:50:83:39:b3:07:fc:77:42:b4:47:26:91:43:
a5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7E:4C:9D:D0:9B:AE:19:44:6C:4B:DD:F8:86:76:6E:A4:28:C4:2E
X509v3 Authority Key Identifier:
keyid:B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f1:86:00:aa:c4:5d:82:f3:bd:83:2b:88:76:52:f0:bc:9f:
80:3b:86:67:a1:ce:32:ab:c3:43:97:a6:fd:e8:e6:32:96:68:
a6:5b:b7:67:b0:84:2b:d7:3d:e6:bb:cd:68:a8:64:4b:3c:fd:
27:ac:23:61:66:d1:b2:4a:e1:4b:99:10:b4:b5:16:fa:7c:18:
62:71:76:ac:76:7c:5c:63:a0:fd:d6:41:5f:3f:8c:24:11:b2:
d0:92:cb:8a:21:eb:69:6e:45:ce:4d:a0:fc:2a:2d:89:b1:2b:
f3:fa:7d:49:4e:21:70:36:98:3d:38:62:8e:c3:4f:a1:7f:41:
d8:88:64:1c:73:a7:5e:7c:31:5a:9a:53:e0:bd:b0:b2:3c:b7:
ab:e0:03:d5:dc:bc:c1:d6:c0:57:64:ec:8a:2c:d6:e2:e9:11:
13:93:e6:7a:9d:2d:00:96:7f:8d:42:90:c1:ce:ba:9a:e0:de:
6e:19:c2:ee:0a:c9:ae:55:13:96:cc:74:06:b0:bf:a1:80:5c:
84:ca:33:74:90:2a:96:51:b0:5a:55:02:49:24:88:f1:f9:3e:
5d:62:b6:19:b0:5f:f4:98:f2:46:7e:97:d7:60:89:84:b2:7c:
1b:eb:5d:69:c1:44:a7:f1:60:f6:f3:d7:0e:8f:70:50:1a:b8:
40:b8:77:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:49 2026 by rpki-client