Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
File: TnKscetFB6wKZSpUWY2uRR_jP0c.mft (raw, json)
Hash identifier: D73HXyn2XnRdhjfyesrkmMZl5aYO3hQ6pP5AJtlSBNI=
Subject key identifier: A8:07:FC:A1:8A:4E:41:28:43:40:45:38:BA:7F:6D:A5:3E:E6:7C:B3
Authority key identifier: 4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
Certificate issuer: /CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Certificate serial: 019CABD966ADB686494D48F74CA3D1E86DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
Manifest number: 1572
Signing time: Mon 02 Mar 2026 00:01:17 +0000
Manifest this update: Mon 02 Mar 2026 00:01:17 +0000
Manifest next update: Tue 03 Mar 2026 00:01:17 +0000
Files and hashes: 1: QE8bcggi0VZyHRPBfYdhoFDqJM8.roa (hash: wboN+pw+KvvkFtiFgOQIE2+tkc1MrMcN64l5TflOk5g=)
2: TnKscetFB6wKZSpUWY2uRR_jP0c.crl (hash: UOiVHZziVhFvYhew82mCjVoILAcQ23OowiTxRpuY9bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:66:ad:b6:86:49:4d:48:f7:4c:a3:d1:e8:6d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Validity
Not Before: Mar 2 00:01:17 2026 GMT
Not After : Mar 3 00:01:17 2026 GMT
Subject: CN=a807fca18a4e412843404538ba7f6da53ee67cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:03:5e:5c:0e:4c:fe:cd:5a:ee:e6:da:8f:
06:dd:42:e1:f1:5d:86:f7:68:4e:fc:9a:05:a7:9d:
6d:64:02:a8:ee:61:45:51:76:1c:89:42:ff:b3:a3:
20:54:6d:48:07:59:f1:d1:bf:91:4c:da:a6:6a:a7:
2b:fe:00:90:dd:d6:59:a3:86:ae:ae:24:ec:57:6d:
8c:a7:35:c9:f7:09:a3:b7:5c:94:80:33:41:bb:67:
b9:83:4e:c8:6d:6a:ef:16:e4:bf:e0:51:29:91:5f:
20:2a:16:1a:bc:7a:b8:64:7e:c0:05:99:c2:19:aa:
00:9e:7a:31:2c:60:72:92:40:c6:e4:3d:0c:23:ff:
9b:41:10:64:5d:74:f2:e4:5c:37:70:ba:ab:0a:17:
ee:25:ca:3f:02:fe:16:23:d2:9e:08:c2:7b:30:13:
4f:f0:7a:a7:ee:87:d5:01:9d:c9:9c:fd:39:f9:ac:
ab:8f:ac:f7:53:30:64:59:fb:a1:1c:f4:90:ce:22:
93:9a:0a:e8:6e:fd:63:1a:32:0b:8c:bc:de:c9:87:
98:c7:e9:b8:b4:0d:09:ad:1d:9d:5b:98:38:fc:53:
f4:87:8f:77:ab:d7:45:63:92:58:d3:8e:45:ca:ec:
cf:ca:ba:01:8e:df:54:72:5c:57:e8:61:26:02:e5:
2c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:07:FC:A1:8A:4E:41:28:43:40:45:38:BA:7F:6D:A5:3E:E6:7C:B3
X509v3 Authority Key Identifier:
keyid:4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:40:20:e2:f0:b2:26:f7:08:e4:e5:8a:db:fa:cf:03:9b:66:
7d:b3:a6:40:db:db:da:2a:d2:83:02:db:1d:c9:ae:5e:ca:59:
b5:d9:19:b9:2d:5b:9f:ee:e6:73:12:ad:6d:d5:40:cb:dd:c5:
be:95:52:94:d1:0f:de:22:a7:dd:44:5a:03:2f:50:55:60:9a:
d4:55:8a:fc:3e:7e:66:3d:7b:b3:c7:c4:ad:72:1b:31:08:64:
73:1a:65:e2:1f:88:41:23:41:b3:48:49:2c:91:d2:6b:26:18:
0b:82:4d:81:1f:04:f4:72:3a:78:f1:60:de:54:dd:27:d5:21:
f2:84:34:fd:f3:47:82:1c:c3:e6:a1:ec:0f:c0:a7:b0:56:d5:
0f:a6:f5:b5:e6:e4:ae:50:1f:b7:66:87:ef:bd:c8:0c:27:9f:
73:b8:ed:a1:c1:6d:5f:13:bb:6d:77:a2:6f:a2:9d:e2:f4:a0:
f3:c6:94:1f:6b:66:30:b1:a0:0c:ab:93:8a:af:79:d1:c5:75:
51:33:a9:ed:54:71:4a:d5:eb:3e:c7:c7:22:cf:6d:9f:4a:7c:
78:80:c7:f1:52:a0:89:c7:fa:8e:67:25:c9:18:6e:f0:7d:90:
eb:f1:5b:64:ca:1e:d8:12:db:b1:29:23:c6:f7:c0:1d:74:58:
12:fa:e4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:10:17 2026 by rpki-client