Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
File: tpHQC9tiauVzB9XNTord2UdWgLM.mft (raw, json)
Hash identifier: IcZqo37rXJrYmfs7ptIY3jzoc0yVqm2RcH6qCI2+oWI=
Subject key identifier: 0F:E1:29:0E:7C:E4:6D:93:E4:C7:03:E8:1E:F0:65:53:08:51:20:B7
Authority key identifier: B6:91:D0:0B:DB:62:6A:E5:73:07:D5:CD:4E:8A:DD:D9:47:56:80:B3
Certificate issuer: /CN=b691d00bdb626ae57307d5cd4e8addd9475680b3
Certificate serial: 019D29615D409D92DF210A6ABABF8CD4131E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
Manifest number: 115B
Signing time: Thu 26 Mar 2026 09:02:19 +0000
Manifest this update: Thu 26 Mar 2026 09:02:19 +0000
Manifest next update: Fri 27 Mar 2026 09:02:19 +0000
Files and hashes: 1: jWxX2tMKxMJdIFHBL77hb_xE7Lk.roa (hash: ZabLLdJJR9GqGbqwCz27PSZyCvB4TLOCdk9dPP8Hc2Q=)
2: tpHQC9tiauVzB9XNTord2UdWgLM.crl (hash: ldqFmrhc5p1z1LTTlQvY8JEcclU+r9NFkp90t2GbMzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:5d:40:9d:92:df:21:0a:6a:ba:bf:8c:d4:13:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b691d00bdb626ae57307d5cd4e8addd9475680b3
Validity
Not Before: Mar 26 09:02:19 2026 GMT
Not After : Mar 27 09:02:19 2026 GMT
Subject: CN=0fe1290e7ce46d93e4c703e81ef06553085120b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:f7:3e:a5:cf:7b:41:67:9a:8c:b1:74:cd:
37:e6:69:d3:85:5f:77:03:02:47:6e:87:42:14:3f:
3f:10:59:39:bd:1a:0d:84:55:24:18:a7:40:07:69:
96:19:60:58:62:0c:81:3e:f7:a9:a4:9c:28:e0:dd:
09:a7:cf:40:d2:68:41:27:60:dd:b0:8d:a8:70:0b:
1f:43:cd:04:17:7f:fa:02:3c:7b:9a:7d:af:ad:67:
c0:b2:c6:2c:76:14:2f:26:eb:67:7c:49:8d:b5:f4:
35:28:c1:d6:9c:7b:c4:39:21:8c:4f:77:b6:8b:1b:
07:ac:01:88:03:12:0f:63:3d:7b:ba:67:ea:75:56:
2a:7a:3f:ce:64:30:71:ff:40:a2:c3:28:07:d5:1d:
d2:84:e1:4c:55:98:be:b9:6f:aa:43:21:99:ea:31:
3e:1d:64:42:74:6a:6f:ff:fd:40:8b:35:1b:73:6e:
23:0c:3c:2d:16:a4:af:39:83:a9:7f:7a:e9:70:9c:
1b:48:13:c6:66:8f:ce:eb:33:47:91:cc:34:a5:91:
2b:82:77:03:29:dc:2b:54:51:9d:79:40:b9:73:a9:
83:61:88:a7:94:32:05:79:37:db:c0:78:b0:18:11:
32:fd:88:24:d9:b7:a1:3c:10:d0:e8:8b:b4:91:98:
f8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E1:29:0E:7C:E4:6D:93:E4:C7:03:E8:1E:F0:65:53:08:51:20:B7
X509v3 Authority Key Identifier:
keyid:B6:91:D0:0B:DB:62:6A:E5:73:07:D5:CD:4E:8A:DD:D9:47:56:80:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:99:04:1a:a1:a9:38:5c:ad:b4:8c:2f:5a:65:4c:bf:ab:eb:
cf:85:0e:d8:00:7c:71:08:a7:b4:84:f4:51:d2:84:1f:06:2f:
1f:27:23:87:9d:32:82:53:be:ca:c4:b1:9a:0e:1a:ea:8f:1a:
ee:9e:d2:7b:4f:31:43:54:64:af:2a:6a:56:4a:e2:6b:d8:ad:
26:0f:2e:4f:d6:dd:ba:7c:38:3e:21:f3:a8:84:24:76:fa:ae:
4c:1d:e2:e5:da:a8:29:9f:61:d9:11:93:3e:6f:fc:7e:b6:26:
f7:38:31:17:8b:1e:e9:84:46:9d:c0:50:93:3b:12:9e:08:61:
0a:60:5c:b2:3a:61:87:08:72:46:21:cd:a4:01:5d:a4:51:2f:
30:70:c2:fb:47:88:8b:5a:5a:16:5a:4b:77:70:8e:df:6a:a8:
d5:2a:53:f4:8a:8e:8c:17:d6:06:5b:7b:17:c1:f9:79:8b:47:
7b:3d:78:98:82:06:80:7c:e0:81:a6:78:8d:58:4b:6f:c9:de:
5f:c0:55:41:76:06:32:6c:ba:57:d4:31:4e:a9:b9:da:89:08:
43:dd:a4:7b:c7:6f:2c:1f:03:d0:e6:28:f0:6a:1c:95:cf:2c:
1d:0c:6c:b0:62:41:fe:fa:0b:da:1d:9d:f9:7c:8a:6e:3d:65:
7b:a1:e8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:06 2026 by rpki-client