Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
File: tKkPaJZnhEKvruG6qqayot7KzTs.mft (raw, json)
Hash identifier: n+y4OgJPg/7pVnNfq2Spxt678b83cW8kjycBzWsWKcU=
Subject key identifier: 0C:C3:D0:83:AC:9A:E5:1B:3C:73:89:C8:98:22:4C:D8:D3:3F:05:57
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial: 019CADFE8D91302AFFC4579D82CE360789AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
Manifest number: 184D
Signing time: Mon 02 Mar 2026 10:01:06 +0000
Manifest this update: Mon 02 Mar 2026 10:01:06 +0000
Manifest next update: Tue 03 Mar 2026 10:01:06 +0000
Files and hashes: 1: DjRcKjGf481KpSn3dS8opbsCTRQ.roa (hash: q4qSCDk+u7QWlYigOct6W9NgvEFiQbOazsiPpD4B9fE=)
2: KMdcbWWp5MyTzP2tDi5ljSFkPgs.roa (hash: rr/RZr6IyiOAVd9654gWzYqEL3pIM32RlUlY8qv46PE=)
3: eNHn6hiUVOxJ-_Y5SJktOte6hXk.roa (hash: jPd38RvXr6qVEzTNTT/Ft+c1V1MvmsnZDnEJANdwKuo=)
4: tKkPaJZnhEKvruG6qqayot7KzTs.crl (hash: l5H/yt5BG+dbVe46fwzC2yLycvQ6A2n04YwfVRksJSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:8d:91:30:2a:ff:c4:57:9d:82:ce:36:07:89:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Validity
Not Before: Mar 2 10:01:06 2026 GMT
Not After : Mar 3 10:01:06 2026 GMT
Subject: CN=0cc3d083ac9ae51b3c7389c898224cd8d33f0557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:89:99:17:58:d2:be:0c:40:b3:cd:b9:40:9c:
a4:8b:f6:70:97:0f:53:22:06:72:c2:68:9e:18:d1:
6d:f9:f7:b2:c1:72:dd:5e:db:1c:04:72:3f:e3:fd:
43:43:3f:35:4e:1f:25:e6:15:17:6b:21:a7:84:79:
05:81:11:0b:6e:19:6c:1a:a7:95:14:d9:15:4a:86:
76:8e:af:c8:22:aa:61:c8:34:20:fb:59:20:c8:f4:
08:0b:26:bb:db:05:40:b3:6e:92:4c:96:a1:b8:37:
ff:ea:32:0d:31:c7:df:b8:79:1a:25:b6:af:c1:d5:
7a:9c:a4:ec:9d:d5:1e:2f:ab:e2:ef:5a:7a:41:e2:
90:00:c0:79:88:5d:25:32:93:d9:aa:37:bd:01:67:
d6:68:65:ea:4e:3c:60:b6:7a:ea:0a:4a:06:03:9b:
30:78:8d:56:d7:9c:e0:d3:4b:ab:db:60:80:f8:0a:
94:01:30:8b:31:31:a3:31:11:d9:fc:f7:4c:6a:e0:
58:4f:5e:dd:81:5b:cf:14:9d:cd:80:3f:cb:55:4c:
e7:38:92:b3:99:b2:e8:a2:90:18:c4:44:04:d7:86:
d2:67:89:1f:05:d4:35:06:35:d0:45:f7:31:4c:3d:
f8:01:d4:d8:b2:73:5d:4f:f4:5a:92:ea:62:d8:32:
fa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C3:D0:83:AC:9A:E5:1B:3C:73:89:C8:98:22:4C:D8:D3:3F:05:57
X509v3 Authority Key Identifier:
keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:dc:c0:99:42:b9:2b:6a:54:60:12:d2:d1:f8:52:57:76:a1:
62:d7:f7:c7:f8:ad:04:55:0b:15:72:ec:91:9d:61:68:d1:a8:
11:27:16:ee:db:25:66:9c:5c:3b:3e:9d:ea:44:db:95:9a:76:
43:5a:2e:3c:cc:3b:81:d5:60:ce:23:6e:2c:f2:e9:ab:54:0b:
05:de:3a:0d:23:4c:30:90:f3:04:38:96:c9:a8:e9:73:35:72:
8b:2e:28:7a:65:7b:11:0b:97:f0:56:0e:ee:cd:4c:97:01:71:
ad:82:bd:aa:1a:7a:db:86:3f:21:3d:5c:8a:0c:28:c2:8a:97:
a0:59:f4:0a:ee:1a:2b:02:16:54:09:ae:e1:e4:47:b1:16:2a:
0e:dd:0f:cc:08:b6:9d:d7:c4:ac:3d:00:8d:de:53:2d:74:9d:
d3:3c:83:cf:85:e3:39:0d:12:e7:c1:3c:8c:44:3d:90:c3:f8:
25:0c:68:82:34:ea:f3:e5:b5:9d:f8:e3:4b:e6:3d:1c:90:41:
5b:69:04:63:5a:7b:b3:0a:06:db:6a:0b:80:70:fd:4d:d8:a5:
60:60:77:57:74:66:a7:cb:62:5d:d1:b4:7f:49:7c:b1:ba:1d:
0a:ac:8c:f4:ba:24:ed:75:99:be:8c:b0:32:eb:2e:9a:71:d4:
b7:86:a5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:43:12 2026 by rpki-client