Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
File: ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft (raw, json)
Hash identifier: cZwfJ5KJhVJ/4N0sL8hKJk9zU/rcOm+PE5VrHL4IozI=
Subject key identifier: DA:04:34:4F:8D:AC:8A:7A:ED:7B:1D:B1:AA:B2:5E:DB:1A:0A:E2:FF
Authority key identifier: B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78
Certificate issuer: /CN=b62dd60548b67cc41e67b6a616a12ec53bf42978
Certificate serial: 019D265F28D18ADBC55427A13AD3F9B00D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 19:01:03 +0000
Manifest this update: Wed 25 Mar 2026 19:01:03 +0000
Manifest next update: Thu 26 Mar 2026 19:01:03 +0000
Files and hashes: 1: cR-Inx2FPQAFHMTBAFcIV-g96qI.roa (hash: /WX3k+99dSoxI5A3FmHr7z1BH//wZrnLXz4X48FtN/8=)
2: ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl (hash: yxDWsv1sSX+PSy63jqkiBqMTGZO7LO6f142By/Xceoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:28:d1:8a:db:c5:54:27:a1:3a:d3:f9:b0:0d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62dd60548b67cc41e67b6a616a12ec53bf42978
Validity
Not Before: Mar 25 19:01:03 2026 GMT
Not After : Mar 26 19:01:03 2026 GMT
Subject: CN=da04344f8dac8a7aed7b1db1aab25edb1a0ae2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2d:dd:60:dc:13:3b:ef:cd:36:ce:1d:83:c4:
1f:0e:9b:d2:6b:e5:ab:04:4b:25:bc:85:98:ed:13:
9c:be:9c:60:6c:e1:89:e6:09:29:66:eb:b6:f0:07:
42:98:58:c2:2b:db:bf:52:21:19:a5:82:3b:33:24:
1d:0b:13:83:2c:40:c5:d6:05:47:b7:0e:b1:92:43:
58:3a:ca:4c:6f:e5:5f:1d:94:32:ed:43:17:4d:1b:
17:bf:63:04:a3:a9:f3:26:f2:1e:eb:1f:4f:ac:82:
61:40:71:f3:1d:a1:98:38:6c:ae:f2:e2:15:ee:6b:
fc:31:2a:5a:71:87:ea:5f:46:02:0f:a6:d7:d4:d5:
6e:f9:31:61:f8:b5:c1:4c:11:68:ec:61:e0:d1:94:
fe:04:83:d1:9d:9b:f7:9b:f2:1e:70:ba:24:ee:c9:
bb:68:27:9d:1f:73:21:0a:8d:0d:29:77:24:be:50:
2e:c4:13:bf:60:a5:5f:a1:5e:73:95:fc:f3:a8:4f:
90:72:2d:b0:3e:0b:e7:a1:45:c4:68:a8:9f:52:53:
1d:d3:02:62:6f:63:53:54:c9:ec:ac:88:c2:55:15:
53:e7:03:1e:78:b6:dd:e3:74:83:77:9f:a1:71:f9:
01:4a:9d:5b:60:da:5f:62:9f:fa:3e:22:22:05:ad:
44:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:04:34:4F:8D:AC:8A:7A:ED:7B:1D:B1:AA:B2:5E:DB:1A:0A:E2:FF
X509v3 Authority Key Identifier:
keyid:B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0b:aa:22:a1:6e:72:ce:a3:59:b8:9a:35:ab:a3:f7:57:94:
57:ca:67:53:98:fa:c8:9a:cf:4c:a2:df:5f:82:45:70:96:ca:
01:6a:3e:be:98:58:69:eb:24:e1:21:7b:1b:5c:e7:b8:52:dd:
fd:f4:54:ff:ad:4d:3c:6d:5a:f5:22:0b:5c:1c:bd:df:4a:e8:
64:cb:89:1a:56:3a:ed:ac:09:1e:03:49:3a:9b:42:5e:94:9b:
7e:3e:f5:fa:6a:f5:d9:27:40:e0:1f:38:b7:5b:76:2b:f1:34:
4d:74:b5:1e:3b:19:6c:a8:79:19:57:15:a3:de:8f:ba:c2:2c:
c3:a8:7f:ae:f0:ad:5a:6d:74:65:b5:16:1d:4c:ea:d0:ce:c3:
e1:d2:87:07:b0:bb:a0:88:7b:a3:d3:22:7d:63:69:29:34:15:
85:1f:0f:df:e4:3a:f4:e9:48:45:c4:69:47:a3:06:c0:33:e0:
fb:2c:cd:ab:d4:f2:89:5a:e4:07:9b:a0:02:53:87:36:ab:f0:
52:13:20:00:ae:3f:73:5d:1b:a8:55:05:28:22:81:37:e7:aa:
ac:33:e1:6b:03:90:d5:36:52:cc:8a:e0:50:33:f2:b3:df:af:
64:8d:d3:67:bb:d8:5d:47:86:4d:d3:ef:50:9d:5f:81:8d:9f:
63:95:4e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:56 2026 by rpki-client