Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
File: tcsrXq88wV3Us7I62LlHKlJAwDs.mft (raw, json)
Hash identifier: Or0KqtJDD8hQbR3zC/m9xkbtVtzQF1Dfa/WNFEUm3Ow=
Subject key identifier: 5B:D9:00:8B:10:0B:78:32:78:41:22:94:8D:53:91:D5:27:04:82:EF
Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
Certificate issuer: /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Certificate serial: 019CAF7F21C958E84BBB9022FFD59E0EBE0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
Manifest number: 022B
Signing time: Mon 02 Mar 2026 17:01:10 +0000
Manifest this update: Mon 02 Mar 2026 17:01:10 +0000
Manifest next update: Tue 03 Mar 2026 17:01:10 +0000
Files and hashes: 1: GJGcFx0xGAuamOa3lmo_7TyCIas.roa (hash: qw0UBzd9Mkc6V2U3rQ/Tp5ymNOy4O3f5at2SdO5Hyh4=)
2: JD-_RMbQpF-pKZOnXs4mYFjjidQ.roa (hash: kFiezG9HvRIWsHO1y6hBEeY1FqGlLKVulu5N0PlRmH8=)
3: mOOpQixSR_G0BkBLz_pfNJqCpPc.roa (hash: J7597tV7KTTIerXR1FKozSh7ddWeTNBPbVoOCxMRSXM=)
4: tcsrXq88wV3Us7I62LlHKlJAwDs.crl (hash: mzSUwrkPJpnutJorcSib+Q4wzu8ychzisxjQNk0lOj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7f:21:c9:58:e8:4b:bb:90:22:ff:d5:9e:0e:be:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Validity
Not Before: Mar 2 17:01:10 2026 GMT
Not After : Mar 3 17:01:10 2026 GMT
Subject: CN=5bd9008b100b7832784122948d5391d5270482ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:42:75:55:4d:07:aa:b8:22:fa:cb:b5:77:bb:
66:f4:08:ea:cf:4c:1e:d2:6f:56:1b:53:08:27:ed:
c2:4f:c3:f1:93:29:af:b3:7b:98:48:94:ff:73:c0:
b6:f8:32:73:73:85:26:4b:69:25:2d:79:2f:0d:86:
77:4b:51:ac:02:b2:28:48:5b:03:22:fe:91:50:6c:
52:30:70:46:95:fa:7c:5c:4c:83:24:ce:9e:59:75:
36:6d:5f:95:a8:af:08:23:9b:98:d1:db:c1:ce:43:
4d:b0:29:aa:06:c8:e3:7c:d1:6c:a6:d3:9c:93:8f:
0a:19:8e:25:0a:4a:a4:83:61:8e:4e:06:7a:6d:86:
4f:6f:33:44:76:ab:ad:16:bd:8b:95:bf:9b:04:ff:
62:a9:17:90:f9:e7:d1:59:f9:75:91:41:d2:2e:b9:
82:90:1d:43:0f:42:01:65:4a:24:13:3a:af:7b:b2:
70:c1:33:7e:c5:b2:58:33:1d:4e:ef:bb:f1:4c:e8:
fb:93:47:fe:96:08:33:ce:59:80:c7:8c:d6:e5:a0:
55:ca:c7:81:ab:8d:eb:b5:43:62:25:2b:e9:ac:6d:
b9:44:9c:55:4f:d1:9b:53:08:a9:80:3c:de:42:e6:
72:1c:86:2a:f8:b2:26:da:c2:d5:3c:be:13:79:1f:
9b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D9:00:8B:10:0B:78:32:78:41:22:94:8D:53:91:D5:27:04:82:EF
X509v3 Authority Key Identifier:
keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:47:a7:27:17:98:ac:0c:17:18:95:90:80:d9:37:03:0a:1d:
86:4b:ca:c5:42:aa:af:ab:cc:a9:80:ea:1c:7d:70:5d:7c:36:
14:bf:e7:41:f5:21:c6:e5:dd:1f:17:57:e2:b6:1e:86:ca:a2:
93:07:e0:9b:c9:e7:91:35:a4:ca:3c:01:2b:8f:c0:4b:c8:69:
ac:a9:5f:e2:09:09:c7:38:d8:de:07:1d:c0:06:03:d4:e6:27:
a5:0e:61:b4:22:30:52:38:e9:23:5c:97:cf:21:22:d7:49:81:
d8:12:28:50:d9:e5:fa:fc:d6:1d:6b:d3:d1:65:e3:dc:27:cb:
57:c7:f8:ec:2f:cc:b9:a0:d4:c6:37:b9:fe:c0:fd:44:a7:94:
9b:e9:1d:48:db:e5:e6:78:1b:7b:ea:56:71:f2:e9:1f:08:e0:
2e:83:eb:8d:18:24:f1:91:fe:83:d7:d6:aa:d7:5c:24:6b:78:
83:18:83:c6:76:cd:17:d5:4c:9e:93:cd:95:9a:69:13:13:e2:
dc:7f:fd:a4:24:5d:47:ae:6c:cd:43:b7:14:36:8b:e2:fe:94:
46:30:91:44:9f:ae:78:a3:e1:ba:17:21:05:0f:1d:37:d3:8a:
d3:a6:58:78:0d:1f:9f:0a:7d:bb:3c:4e:05:2d:54:2a:01:b3:
f7:17:54:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:23:39 2026 by rpki-client