Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
File: i-tlpxrwKVknKswA1cTBlYOF3pQ.mft (raw, json)
Hash identifier: FeFQSlgqMhSPOyd9hWUIuQRhmOEdc3r95JgIwRBGLd4=
Subject key identifier: D4:3F:E4:C5:D8:19:5E:02:84:E3:C9:73:BB:45:D8:CA:56:3C:9D:13
Authority key identifier: 8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94
Certificate issuer: /CN=8beb65a71af02959272acc00d5c4c1958385de94
Certificate serial: 019CAB6B860CDFE2588BB7CD4B9AF219098E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 22:01:16 +0000
Manifest this update: Sun 01 Mar 2026 22:01:16 +0000
Manifest next update: Mon 02 Mar 2026 22:01:16 +0000
Files and hashes: 1: 1-uapFsJGKC_fK5bX4vidKDJn0HE.roa (hash: GOVn0PIk7Y5SfmSrA/v+/c91vfTOsMUpyn3e33Mi8Rk=)
2: i-tlpxrwKVknKswA1cTBlYOF3pQ.crl (hash: t3UptyNjhKlWTrpX7Gt3dW7PUz0IhXkMGQZHnwQ7JW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:86:0c:df:e2:58:8b:b7:cd:4b:9a:f2:19:09:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8beb65a71af02959272acc00d5c4c1958385de94
Validity
Not Before: Mar 1 22:01:16 2026 GMT
Not After : Mar 2 22:01:16 2026 GMT
Subject: CN=d43fe4c5d8195e0284e3c973bb45d8ca563c9d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:a0:6a:32:dd:c8:e7:74:74:09:3b:6c:5f:
a4:26:16:92:4d:07:ac:f4:5b:10:ca:f4:e3:d8:81:
2c:80:0c:9f:7e:4a:1c:e6:63:e5:48:d8:eb:eb:3e:
05:45:9a:1a:84:52:de:5f:1a:c1:61:5f:fd:53:c7:
c8:1c:53:4b:16:c2:82:ea:d0:a2:cb:ae:63:af:10:
10:38:a6:b6:24:b5:e4:11:a2:d3:1d:70:84:b2:d8:
aa:83:29:0b:63:49:16:99:fd:04:de:e7:84:8b:91:
62:82:8c:c0:b9:66:e4:67:9e:7e:76:a1:f9:a7:85:
ab:b0:7e:46:91:b6:73:fb:c2:43:ba:8f:3b:a0:4e:
33:05:db:c2:0a:6e:10:4e:0d:84:67:26:37:54:d8:
11:e1:88:33:06:52:41:e7:42:d7:83:b3:48:a0:30:
ef:d0:1c:79:e4:c7:19:e6:91:5b:ec:a4:4b:13:40:
e7:a3:9d:6f:08:28:e3:af:ac:af:bf:3f:bd:d0:6a:
10:1b:4d:cd:3c:50:e0:19:2a:a7:28:05:48:f0:83:
ad:34:0d:e8:73:e0:7a:52:19:0a:c7:ff:a4:b3:1c:
20:d8:10:e6:01:f1:40:ee:0a:e9:a1:a0:73:c2:75:
df:b5:e2:54:24:e3:89:eb:38:bf:6e:21:64:f6:52:
24:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3F:E4:C5:D8:19:5E:02:84:E3:C9:73:BB:45:D8:CA:56:3C:9D:13
X509v3 Authority Key Identifier:
keyid:8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:43:8a:5b:cd:c2:69:61:1a:73:d3:56:73:d4:e6:15:e9:a4:
60:e9:dd:f9:ac:fa:96:49:92:fa:95:f4:bd:6c:19:c7:22:65:
09:7e:2e:0c:f1:37:79:34:1c:58:93:95:8e:9e:91:72:ee:87:
22:f9:29:18:3a:62:c6:78:47:d8:82:27:91:92:ce:4a:91:ed:
3f:c9:f7:90:4f:63:6a:65:3f:f0:a2:a5:48:c8:3c:c1:33:76:
95:fb:07:3a:5e:a0:89:19:f5:b1:c3:4b:f7:e8:7e:de:44:e1:
f0:bb:c7:64:6e:76:23:e4:7e:30:44:73:be:66:63:9a:cb:0a:
d7:f4:01:79:85:89:75:b2:e4:c6:31:cf:6f:9a:b2:41:36:53:
9c:f2:99:93:06:d6:ac:ec:cb:71:6b:69:85:06:81:98:b6:2f:
af:2f:ca:c4:73:d5:91:60:46:86:fa:8a:4e:86:e9:6b:7e:9a:
c5:0f:53:19:c0:0d:76:80:56:d2:bb:af:04:f2:22:cd:61:75:
41:7f:bd:19:78:fb:80:8a:f0:df:61:0b:50:27:a7:8e:73:7c:
71:7b:a6:7f:9c:89:66:e3:19:6b:3c:a5:93:cf:16:8e:64:32:
86:aa:f4:e6:3e:33:b8:1f:ac:e7:08:17:bd:6f:12:84:90:b8:
78:af:6d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:05:33 2026 by rpki-client