Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
File: tLB5uhPORqvsf1vD893Ni7hnWQU.mft (raw, json)
Hash identifier: /+xhxlfazFbgnFaTod6/rVSrMmDcXHbjaFUeSpjkYDQ=
Subject key identifier: 75:AC:03:4A:CD:88:A3:BC:03:25:76:BD:68:72:D5:63:E5:AE:21:0A
Authority key identifier: B4:B0:79:BA:13:CE:46:AB:EC:7F:5B:C3:F3:DD:CD:8B:B8:67:59:05
Certificate issuer: /CN=b4b079ba13ce46abec7f5bc3f3ddcd8bb8675905
Certificate serial: 019CAF10CDDDF2FCF81C9E008C6258F6C048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 15:00:39 +0000
Manifest this update: Mon 02 Mar 2026 15:00:39 +0000
Manifest next update: Tue 03 Mar 2026 15:00:39 +0000
Files and hashes: 1: FAhxwnmDeAJMVVhI5YlXylnLsiM.roa (hash: FA8nAzwRcBfl5+/Pllgr5NzeDPdob+YcG9oEGJZ3NXk=)
2: tLB5uhPORqvsf1vD893Ni7hnWQU.crl (hash: llnMZNsh2T9erTHeoVb6LIq0MAtXTjjyDbS6RDX0pBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:cd:dd:f2:fc:f8:1c:9e:00:8c:62:58:f6:c0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b079ba13ce46abec7f5bc3f3ddcd8bb8675905
Validity
Not Before: Mar 2 15:00:39 2026 GMT
Not After : Mar 3 15:00:39 2026 GMT
Subject: CN=75ac034acd88a3bc032576bd6872d563e5ae210a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:bc:ce:9f:a0:8a:5d:78:87:5e:97:7e:af:
40:43:f6:1b:09:38:8b:38:bf:ba:63:65:db:d2:19:
35:0d:36:57:93:d7:ea:2c:4e:fa:b3:1b:a4:fd:68:
f7:90:10:91:f2:6f:e2:1c:41:1d:60:79:24:5e:86:
85:95:13:8e:74:39:ce:8e:a2:9a:96:94:7b:6a:05:
6c:79:75:f2:d7:5f:a3:78:c5:4f:b8:e0:64:a7:96:
60:8f:a7:ae:ab:ad:e1:03:b8:93:b5:96:e1:b6:58:
9a:e4:6f:e8:8f:ec:49:c9:74:59:ab:0e:4f:f7:bb:
99:49:ad:7b:8b:01:a7:88:b5:3c:19:b4:b1:c9:6c:
5a:ee:83:7a:81:06:46:a5:34:84:c7:42:19:40:41:
2b:4a:84:91:b3:22:d0:e7:43:90:6f:0b:f2:2a:5e:
45:ce:f8:04:05:f5:1a:8e:8b:2a:c9:dc:59:1b:91:
bf:e8:a0:d3:cf:5d:fe:6a:cd:0e:aa:ab:a6:60:ad:
cb:f1:d5:c7:1c:a5:ea:a4:75:f3:b5:8b:7d:38:71:
51:7f:2b:cc:d2:2e:dc:7d:53:a8:c4:a1:7e:8a:93:
59:f6:d6:9a:3b:b1:98:8d:d3:43:9c:ae:e4:13:dd:
da:f5:16:78:71:c0:56:16:ab:e5:b5:48:99:9f:78:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AC:03:4A:CD:88:A3:BC:03:25:76:BD:68:72:D5:63:E5:AE:21:0A
X509v3 Authority Key Identifier:
keyid:B4:B0:79:BA:13:CE:46:AB:EC:7F:5B:C3:F3:DD:CD:8B:B8:67:59:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:13:41:a6:13:77:54:9c:da:33:40:ee:96:a5:4c:97:88:33:
4c:0f:cf:72:52:63:e7:71:7a:0c:eb:ea:43:5f:c9:af:76:dd:
77:b6:8b:77:be:fd:f8:50:4c:34:96:46:fe:4f:f5:7f:23:0b:
e5:52:6b:35:39:9b:9f:33:44:87:61:56:eb:ca:42:97:c5:3b:
83:60:a7:67:62:26:b0:f1:8e:31:7d:96:19:2d:f8:6f:15:a8:
7e:60:b7:eb:77:99:8c:df:f9:09:80:5b:23:dc:2a:41:1b:a7:
8a:69:0e:69:a2:37:b6:16:b8:ed:db:7e:50:b6:52:0c:2f:26:
20:95:ec:df:6b:74:3f:56:f3:58:4f:c1:8b:28:79:15:00:2d:
17:54:39:3d:b6:79:04:fa:e8:31:db:5a:ea:9a:57:2e:99:21:
89:e7:31:63:33:11:21:b1:fc:19:93:e0:10:d4:0d:69:b1:bb:
72:33:77:77:a8:0f:70:1c:a0:86:d8:f5:8c:1e:9f:17:d2:5f:
a4:c5:76:ed:9e:fb:c7:5e:eb:a7:9d:2e:ca:a3:42:f5:26:90:
b7:11:b6:8a:dc:72:1a:96:ca:25:80:26:07:bb:ef:b3:f1:d4:
b3:1f:df:29:f0:90:8e:c1:6b:48:f8:42:05:e4:b0:51:95:54:
d0:8b:2c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:37 2026 by rpki-client