Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
File: tFBkwayGkOLHepWaUCVG6YvNNyc.mft (raw, json)
Hash identifier: //Ir07rL8CA2vt05o0W7jEpTRz2eghkLSyI2ITtquG4=
Subject key identifier: 97:8E:A6:56:D1:02:2B:61:72:57:03:A0:01:BE:56:71:C0:0B:46:F5
Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
Certificate issuer: /CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Certificate serial: 019CAC476F749F871404115BAA772BE5D6FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
Manifest number: 0EC7
Signing time: Mon 02 Mar 2026 02:01:28 +0000
Manifest this update: Mon 02 Mar 2026 02:01:28 +0000
Manifest next update: Tue 03 Mar 2026 02:01:28 +0000
Files and hashes: 1: tFBkwayGkOLHepWaUCVG6YvNNyc.crl (hash: RVF926cgTRH/G699BUr4n2YJqS9vrPuNvcBJ5x6ECV8=)
2: wFIxH6rmc0pTO3lHbm1q54JXQUw.roa (hash: LdJ/iIkB/Qkjc76ikiZz0rGCtU2IPzIjdQ2qezYDSK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:6f:74:9f:87:14:04:11:5b:aa:77:2b:e5:d6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Validity
Not Before: Mar 2 02:01:28 2026 GMT
Not After : Mar 3 02:01:28 2026 GMT
Subject: CN=978ea656d1022b61725703a001be5671c00b46f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:d1:eb:38:65:2a:b8:66:d8:91:7d:b8:66:
b8:2c:fc:12:37:d5:02:4d:c7:11:2f:94:fe:b7:26:
58:38:6d:ae:2b:41:34:a9:48:2f:ab:68:e9:1b:32:
91:e4:3d:67:6a:f7:9f:9b:2a:f4:99:78:bf:67:c8:
16:6f:1f:33:49:1b:57:5e:82:9a:08:4b:12:f6:11:
43:f9:20:47:e8:1e:39:51:11:5c:be:7a:a6:9d:27:
b4:84:3c:70:34:47:31:05:d3:2e:21:3e:87:f5:08:
c9:d7:7f:8b:64:97:b7:4f:54:b2:27:43:9b:0d:03:
fd:20:a3:32:47:36:f9:e9:1a:b7:43:bc:c6:c5:9a:
39:e1:cf:82:66:d9:46:93:6b:d8:c8:d0:db:9f:e6:
35:90:c3:46:0e:70:46:cc:fd:9c:9f:16:f4:08:97:
c4:6e:3e:6f:6c:b5:6f:d5:bb:e4:3e:da:cc:b8:c9:
6d:4e:21:e3:0a:e6:3c:87:9a:e5:ac:5f:46:c2:7f:
f5:21:0c:b3:b1:5c:4d:27:6a:77:92:42:74:92:33:
8b:c1:7c:e0:06:51:cb:64:bd:41:38:fa:f0:4d:14:
18:19:77:e3:27:27:50:b5:3f:08:aa:eb:a3:cd:76:
b0:af:98:61:b4:8a:b0:e4:fe:d3:ce:4f:b3:dd:73:
de:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8E:A6:56:D1:02:2B:61:72:57:03:A0:01:BE:56:71:C0:0B:46:F5
X509v3 Authority Key Identifier:
keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:36:a3:5b:a6:09:9e:b7:b7:fb:ae:30:43:aa:64:f4:21:72:
77:6a:b2:c6:54:7e:29:17:95:2e:eb:9c:60:8f:f6:58:5d:98:
6b:2a:f7:e8:4b:aa:11:0c:65:84:53:77:1b:a6:5d:9f:14:90:
33:3a:f8:91:8e:ce:e6:02:9e:2f:1b:c6:e8:d5:8d:7d:98:11:
45:7f:b2:cc:57:a0:62:30:03:2d:85:09:9a:92:84:a3:2e:a8:
6c:c4:eb:0f:65:cd:ea:cd:39:62:b0:34:6e:42:9f:91:84:e7:
bf:96:cb:16:59:e2:69:1a:6a:2c:52:29:17:8d:35:49:c4:bd:
70:18:27:cb:c6:d7:9a:a0:f9:a7:0a:36:46:8e:71:d3:24:58:
e6:44:9f:df:ff:a1:d8:0c:d4:89:5a:23:21:27:89:6c:25:98:
b4:28:83:26:3f:47:bb:d3:56:17:d1:0d:25:dc:6b:5b:a1:95:
1d:8b:2b:6f:e0:d0:7e:09:54:85:16:25:ae:c2:13:a9:bd:b9:
bb:bd:70:b3:76:2c:f6:a6:88:fb:c9:ca:2c:59:b9:40:99:bf:
2c:6e:61:61:21:a2:a3:30:08:19:53:1b:74:c8:ea:13:d4:4c:
3a:80:74:aa:88:fc:ec:06:b7:12:28:fc:61:66:53:dd:dc:b1:
a7:30:e2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:16 2026 by rpki-client