Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
File: tGS0UjqJcrni9GpPShY06XAnrt8.mft (raw, json)
Hash identifier: dIlH1xTPxhoQjcxkdiXGPeys0ufpBjxGQQUCBPJr6Q0=
Subject key identifier: 94:4A:99:A1:70:58:8F:C5:6E:F0:9D:1C:44:06:B0:EA:7F:7C:E9:E5
Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
Certificate issuer: /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Certificate serial: 019CADFE13D6289AAF0A07E46EE650F3B9C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
Manifest number: 0812
Signing time: Mon 02 Mar 2026 10:00:35 +0000
Manifest this update: Mon 02 Mar 2026 10:00:35 +0000
Manifest next update: Tue 03 Mar 2026 10:00:35 +0000
Files and hashes: 1: 9Bk2DNR2uYMUyRc1vkqhEEQ_U7I.roa (hash: stlOV3eHfF1Tw/j9xaX8GJThoN6iWH1T13ESnbBJcL8=)
2: hB5bKIzKCvcbl8ogbaBmur_bdIs.roa (hash: Uyup6v2aW5b2Hld6LVCK6C+h9+vlfo2ENPD8ezX9qzQ=)
3: tGS0UjqJcrni9GpPShY06XAnrt8.crl (hash: 4TS6QfuxdowJhEn6YQtfjT58FM+O8ZaH3MsLJ1WFAd8=)
4: ybJz7bnKGkBBxiMObl5o-Qmd4SE.roa (hash: JhVcV+03zxVD2R4ZSByn4pLYKVYrGi9gl0bLGuBHrWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:13:d6:28:9a:af:0a:07:e4:6e:e6:50:f3:b9:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Validity
Not Before: Mar 2 10:00:35 2026 GMT
Not After : Mar 3 10:00:35 2026 GMT
Subject: CN=944a99a170588fc56ef09d1c4406b0ea7f7ce9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:b7:d2:09:7a:6d:bf:cb:d8:3f:2e:11:02:
e3:57:73:fd:db:b6:bf:20:e0:da:b1:b7:9c:f9:34:
04:d2:88:d6:63:04:cb:e8:8e:b8:ea:71:84:37:3f:
38:25:2e:43:6d:27:56:fe:12:a9:10:d6:5f:17:60:
5f:1a:6f:0d:80:65:ba:15:fb:96:06:98:e8:81:80:
f7:cd:22:74:6c:b1:cc:a3:99:e6:0b:ab:f6:24:97:
4f:5f:71:44:d0:ef:aa:55:68:0f:37:ea:35:bf:74:
d8:9c:8e:55:f8:68:89:00:02:af:10:2e:21:05:b9:
9f:b2:0e:2c:74:3b:3f:44:08:6c:6d:1b:15:8e:a9:
20:59:0a:22:5f:0c:da:48:48:2b:ba:8c:4d:3d:3c:
08:b1:45:c1:3d:15:78:16:86:f4:3a:7e:3b:2a:c7:
70:eb:a6:3c:fa:9e:92:15:ab:f0:f1:1c:ea:db:2c:
f7:15:59:d5:e2:9c:ca:93:8e:6a:ba:7e:50:a1:14:
e1:1c:2f:17:8f:32:54:7d:75:54:d2:56:3c:06:87:
5a:ef:6a:09:86:84:b3:46:14:72:47:3e:7e:80:48:
2a:27:02:00:08:7f:41:9c:4c:ee:6f:23:9d:cf:49:
62:ad:ca:a1:c1:f5:a3:76:2b:39:ef:67:19:7d:8e:
b2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4A:99:A1:70:58:8F:C5:6E:F0:9D:1C:44:06:B0:EA:7F:7C:E9:E5
X509v3 Authority Key Identifier:
keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f8:c7:e7:0f:46:85:ca:05:74:7a:b5:e6:4d:05:56:2a:cb:
84:ee:f4:70:8e:5d:e6:8f:7c:78:55:f1:c3:95:e8:37:f5:ee:
18:6a:70:1b:5f:d5:1f:ef:18:77:a5:f0:53:a5:69:10:7a:f3:
11:fd:0f:1c:bc:70:15:b8:d2:28:bd:34:09:b2:f6:3c:5f:5c:
96:20:27:8c:6b:80:45:bb:72:93:6e:13:e4:4f:97:aa:b1:7c:
1e:05:43:d7:fd:60:57:68:e1:bf:cd:83:c8:57:f8:29:0d:b1:
71:c6:7d:21:08:28:1a:77:c6:89:7d:64:c4:cf:c4:da:cc:d0:
0d:6e:bd:4c:bb:8d:68:34:21:d9:12:46:8d:fb:d8:65:0b:4e:
77:0e:45:c3:70:d2:08:c2:12:31:3c:17:a4:4d:30:4c:b6:26:
ce:94:85:32:cf:7c:93:e9:2e:e5:3d:83:4e:72:82:e0:7b:a6:
75:3f:53:a3:b3:ac:16:87:d8:70:75:d8:af:94:72:e1:9f:a5:
96:e1:6b:28:c6:34:3d:6d:76:01:34:5e:67:3f:47:01:b7:38:
1f:dc:21:8d:1b:d3:3b:f2:8c:21:62:9b:19:1a:a6:13:43:62:
90:74:f1:b9:82:c2:9f:33:af:41:a1:29:1d:55:53:b2:d1:f1:
16:21:7d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:41 2026 by rpki-client