Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
File: taJj0Y61xUD3R4glu3LvrG8o-Cs.mft (raw, json)
Hash identifier: gLzHOga7c7j9ettU4mXs1OuMMOOWr69ZRjXFGlftCTI=
Subject key identifier: 27:5D:AB:74:DF:9A:1E:0B:D5:18:BC:93:16:0C:29:76:7E:CA:61:9F
Authority key identifier: B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B
Certificate issuer: /CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
Certificate serial: 019CAB6B994DCA656C6A20017C9AB4CFF87E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
Manifest number: 17D7
Signing time: Sun 01 Mar 2026 22:01:21 +0000
Manifest this update: Sun 01 Mar 2026 22:01:21 +0000
Manifest next update: Mon 02 Mar 2026 22:01:21 +0000
Files and hashes: 1: mGuGgApHSUc3pkLejONy6uxFa8I.roa (hash: 72owtSfE8WtU3O8vsf/pSLMkM235o/0ogXWxdafrLec=)
2: taJj0Y61xUD3R4glu3LvrG8o-Cs.crl (hash: dnKg2CakUZcVMilDenItSZEIU5Us1hPbyt2Eu/6ZRBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:99:4d:ca:65:6c:6a:20:01:7c:9a:b4:cf:f8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
Validity
Not Before: Mar 1 22:01:21 2026 GMT
Not After : Mar 2 22:01:21 2026 GMT
Subject: CN=275dab74df9a1e0bd518bc93160c29767eca619f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:cc:35:52:f7:c8:a5:f4:9c:95:20:83:c0:
39:86:ce:96:7c:43:e5:05:c1:8f:0f:34:62:43:69:
2a:bb:be:44:52:0b:f6:26:88:79:31:0b:34:e7:73:
8f:f3:77:ba:4f:7d:e0:48:51:ae:cc:ef:31:c0:be:
d8:3b:09:4c:33:ec:39:f8:71:cb:18:86:81:02:f5:
a6:fc:19:fb:36:7f:bf:02:b5:cb:99:76:2a:f3:0a:
ac:f8:52:cc:46:dd:24:db:0b:d4:07:9e:e9:5d:23:
61:11:d5:de:8f:db:cc:d4:d8:61:a7:ab:3b:c4:eb:
06:e8:dc:cb:50:0e:5d:17:74:5a:4b:57:34:e6:86:
f2:a9:b1:c6:a5:a0:25:e2:3d:25:7b:73:0f:26:bd:
11:7f:bb:75:ac:c6:52:bb:59:01:cf:e6:e8:da:96:
45:be:e5:d4:53:8c:dc:c1:53:67:23:ac:13:4b:74:
15:3a:b2:7c:25:c5:d5:71:b3:06:8d:1f:44:e1:36:
01:75:7f:85:d2:f2:31:50:99:c9:ec:90:4b:53:cd:
1c:52:32:dd:60:ed:d4:8c:ca:b5:b4:be:f3:ce:bc:
6b:59:c4:f3:6b:39:33:03:36:3c:ba:8d:33:0d:7e:
00:9f:c7:bc:0f:f0:04:61:4d:31:7d:5f:56:54:bb:
84:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5D:AB:74:DF:9A:1E:0B:D5:18:BC:93:16:0C:29:76:7E:CA:61:9F
X509v3 Authority Key Identifier:
keyid:B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:63:6f:eb:80:a1:ab:dc:bb:ac:eb:6c:35:6b:3d:3d:06:a2:
c1:8a:94:09:f8:42:3d:9f:47:5c:7f:d6:b1:ba:4c:94:62:51:
75:b4:74:57:66:47:67:20:2f:6b:62:5a:52:ee:2d:8f:8d:bd:
53:d3:b3:e0:24:d4:34:d6:0b:bd:e6:6b:87:34:3b:b8:0a:ff:
c3:4d:cb:45:37:64:01:95:58:cf:1e:b9:79:ef:ee:0b:e8:a8:
90:25:3e:0a:85:df:97:9b:ae:e7:42:5f:c6:f1:81:20:21:cc:
02:16:19:99:98:00:c8:82:43:f7:83:26:79:3d:7e:22:fc:b3:
0d:96:7b:22:77:ba:67:6d:a8:e6:1b:89:5c:9e:a7:5b:19:15:
7b:e6:56:fa:22:10:1c:2c:45:cd:82:e0:17:b1:0e:3b:6a:c4:
58:51:a5:31:a9:da:dd:3c:5d:25:9a:6c:46:7b:92:18:71:b7:
00:f3:d7:f1:1d:5e:eb:b3:8b:fe:b9:cf:cb:93:36:ad:c4:d3:
42:53:74:39:7d:b2:48:41:3f:59:a8:96:0f:59:51:53:89:3d:
ae:17:40:0c:17:1b:19:fd:70:b6:25:29:1e:5d:50:67:6f:d2:
5a:d4:1b:b8:49:1f:a4:12:8b:0e:b4:5d:12:72:38:53:61:f0:
98:1d:2c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:56 2026 by rpki-client