Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
File: tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft (raw, json)
Hash identifier: ZWlWprnuxDTkjG94mlqPcRUtnJ5hOg6hqMfuk/ug/PA=
Subject key identifier: E5:C1:B9:96:1E:FF:1A:EB:1C:01:61:0D:D6:5F:86:77:C9:C2:B3:7B
Authority key identifier: B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
Certificate issuer: /CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Certificate serial: 019CAE353559B3B50250EC1F31B4AFA42864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
Manifest number: 0E0D
Signing time: Mon 02 Mar 2026 11:00:48 +0000
Manifest this update: Mon 02 Mar 2026 11:00:48 +0000
Manifest next update: Tue 03 Mar 2026 11:00:48 +0000
Files and hashes: 1: CCbPnsaraqAntkcEPLIKeh2owBA.roa (hash: lDC1/eX7jtqUQJvtcDT0bJoM6udb8V374OopJffpxoU=)
2: tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl (hash: 6Ds0uxaVzre0Te92SR6c/hHKJBVILINzIg0FRM3bpzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:35:59:b3:b5:02:50:ec:1f:31:b4:af:a4:28:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Validity
Not Before: Mar 2 11:00:48 2026 GMT
Not After : Mar 3 11:00:48 2026 GMT
Subject: CN=e5c1b9961eff1aeb1c01610dd65f8677c9c2b37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:77:d0:c6:4d:6a:50:de:da:06:62:6f:4d:
94:b1:7f:ca:9b:59:57:9b:35:d0:b3:1e:5d:72:f9:
ba:51:85:6c:3c:9b:2b:63:30:68:0c:98:f2:d5:b5:
ad:c0:e8:a3:46:90:0e:c9:6a:ac:68:c5:dd:6f:c9:
78:2c:c3:cf:15:6a:c0:cf:33:f0:67:eb:8c:6d:27:
53:c0:62:22:e2:e6:68:3c:49:1c:0d:1d:91:57:5c:
09:32:8b:bd:25:39:f9:90:7b:93:d4:90:64:a3:9e:
6d:6e:9e:cc:29:98:99:f0:28:96:ae:fb:31:bb:06:
68:20:a0:ce:be:2a:7d:b4:92:66:92:45:24:fa:1e:
12:c7:64:3c:e7:77:e0:bd:0f:c3:8a:fa:13:86:ff:
9e:a0:29:27:c5:58:2c:36:0e:75:2c:35:99:d6:cd:
bd:53:b2:42:3f:1e:ee:73:82:09:0e:89:f7:fc:55:
16:a4:a4:8f:e5:47:ff:bd:d1:a3:e3:6b:84:fe:e5:
cf:81:4a:2a:9b:0b:bb:d0:83:e2:47:db:0f:59:ff:
68:2a:8e:47:94:c5:79:ac:02:ff:fa:59:2c:6a:0e:
2c:92:3b:b7:80:5f:72:40:44:fe:a5:91:e8:1f:48:
57:f6:4e:13:97:fd:9d:ae:7c:c4:24:82:84:28:1c:
cb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C1:B9:96:1E:FF:1A:EB:1C:01:61:0D:D6:5F:86:77:C9:C2:B3:7B
X509v3 Authority Key Identifier:
keyid:B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:46:5c:dc:05:0b:7e:68:eb:a7:79:4c:26:16:93:e9:53:6e:
d6:52:8e:73:21:98:44:c7:e3:bf:8d:d7:76:bb:b4:39:9e:11:
b1:e8:04:ae:06:5e:cf:6b:63:e3:de:07:3a:46:a0:8a:fb:96:
c7:03:64:5a:7e:3b:f2:4f:4d:01:13:3e:80:26:47:c0:00:40:
62:82:a8:79:2f:c5:16:33:c4:30:39:37:84:6e:0d:7a:55:2f:
63:4c:36:93:6c:9a:69:cf:e6:cf:c1:d5:c6:25:16:b5:b3:3d:
ef:59:08:25:1f:47:e7:b4:ab:f5:c0:04:1e:48:da:18:e8:98:
b0:ce:85:37:33:c0:ab:26:9e:c6:16:56:59:76:80:a1:44:83:
ac:b8:78:a3:e2:3b:0f:d4:b1:e0:5d:73:74:76:a8:7c:7a:88:
75:65:0c:7d:73:fd:4f:ff:58:62:a9:96:5b:cc:90:ee:3f:ab:
53:6c:b5:e8:43:6b:65:07:74:72:8d:ab:86:f4:06:94:80:04:
6a:db:3f:3b:f8:4a:e3:16:6f:f6:f8:41:e0:0a:f8:c2:3e:a6:
af:a0:8a:bc:3a:01:56:0e:4c:d6:e5:38:df:d1:18:76:69:d8:
da:8b:eb:a7:4a:08:30:d6:59:4c:9b:36:c2:07:93:cd:b8:ad:
c4:91:56:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:24:50 2026 by rpki-client