Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
File: ts9OV8vBXOTs70T1DluFkvvu7qA.mft (raw, json)
Hash identifier: yFzOIiphR4mOPFzI4hU3frL9zZl5pA5sCUwCHJ153HY=
Subject key identifier: A3:1B:BD:57:99:00:5D:0F:86:48:F4:FD:D6:21:56:D3:9A:A8:8C:20
Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
Certificate issuer: /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Certificate serial: 019D2816F4ED9AD26A4E4AD292B37BA99534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
Manifest number: 1040
Signing time: Thu 26 Mar 2026 03:01:26 +0000
Manifest this update: Thu 26 Mar 2026 03:01:26 +0000
Manifest next update: Fri 27 Mar 2026 03:01:26 +0000
Files and hashes: 1: C-iIHFCFPPAyH44XN2FUfWFmMuQ.roa (hash: 4EBK9TE3DKNE91PsZ8jPUioXBBKUno4c9ILnL/KNCRs=)
2: m0XHnqLimHCaVdrwyhH4qvYB5k4.roa (hash: AyXTFUEVIX6Aa2cN5D+zF56YX+NxzZvMWIw5F0uYaGI=)
3: ts9OV8vBXOTs70T1DluFkvvu7qA.crl (hash: bUH+PysyjLdlm+mhTCYbNKOQCMfgzuD1LIvcCaIJrfw=)
4: uFaZ7j6WOK_rFoGA3dV4DOr3Azw.roa (hash: 7Q1qXKsYai/yvbGaDBAb/Nup5NNAKS6f69A2HPPsnRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:f4:ed:9a:d2:6a:4e:4a:d2:92:b3:7b:a9:95:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Validity
Not Before: Mar 26 03:01:26 2026 GMT
Not After : Mar 27 03:01:26 2026 GMT
Subject: CN=a31bbd5799005d0f8648f4fdd62156d39aa88c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:a4:39:e7:7c:75:d4:e0:90:37:8a:3b:31:
d6:d2:e4:2d:aa:b6:04:90:84:d7:c5:ac:9c:e7:48:
c1:fc:34:46:fa:62:a5:b1:a1:b1:95:d1:b7:fb:ba:
2f:1c:8a:07:a8:14:79:0a:81:a8:52:77:23:74:6e:
bc:52:a0:96:4a:41:31:9f:aa:3a:18:3c:49:c4:7d:
f8:ab:1c:83:d5:44:e2:99:c8:9e:a7:3b:e8:15:9f:
dd:b1:9e:f7:e3:7e:4b:37:44:5e:ca:56:9d:32:17:
30:7a:f4:95:ae:09:73:e7:cf:b3:ad:d1:f5:2f:8b:
76:70:c2:33:db:15:df:3e:dd:24:88:b3:cb:59:94:
35:12:b1:38:e3:73:23:a3:e2:4c:fa:e1:63:1e:c4:
e8:08:ba:d0:eb:b0:18:d1:6d:f1:2f:db:bd:4c:00:
da:88:77:74:e1:fc:d2:70:25:34:db:7b:8a:7c:73:
cd:e5:7e:50:6b:41:fb:84:a8:8a:34:2e:1d:93:ed:
7f:57:fe:6e:4c:21:21:6d:29:e5:7c:1a:21:06:64:
84:21:29:f4:28:e5:83:cf:5f:08:4f:eb:3f:5f:f1:
0a:83:8f:f5:f0:5d:f5:29:42:c1:57:16:84:da:c4:
3c:75:85:6d:fb:09:94:10:1d:ea:65:15:8e:e3:4c:
bc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1B:BD:57:99:00:5D:0F:86:48:F4:FD:D6:21:56:D3:9A:A8:8C:20
X509v3 Authority Key Identifier:
keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:04:96:36:03:f6:15:be:c9:18:ad:a9:77:71:c9:c7:9c:19:
e0:f6:a7:a8:47:29:23:18:44:2c:5e:88:2c:58:24:e0:fa:73:
db:ad:ff:da:92:53:1e:97:25:78:9b:b2:28:3c:1e:41:42:0b:
b9:0c:db:b1:a0:3c:92:07:2b:13:1a:cd:94:b8:96:9e:97:8d:
a4:09:23:b5:08:9c:b5:41:6c:03:6f:12:60:d7:fe:6b:2c:a5:
57:d1:21:80:cc:87:65:0e:6a:7a:56:d6:c9:96:a5:80:9c:7b:
32:b9:85:89:2e:33:e6:5a:20:4b:96:02:2f:45:99:59:82:fd:
19:93:fc:45:6c:fb:04:14:03:07:74:38:d4:33:63:de:d1:e2:
7e:16:70:49:ca:ee:f7:17:7d:ae:c9:2f:ee:a9:a6:f7:97:54:
81:a7:d9:bc:8c:48:4d:06:8b:b9:6f:4b:84:de:bd:8a:39:f0:
46:f9:82:a8:a3:f9:ec:96:ad:22:2a:6c:2e:f3:01:15:21:df:
2d:ee:dc:4a:66:0f:72:80:eb:ec:b5:65:10:03:1f:9a:fc:64:
da:78:7c:65:d9:93:86:5e:dd:42:3b:59:61:c8:b4:1b:21:5b:
74:da:b4:d3:85:89:7a:3a:8e:90:a0:b7:08:28:30:67:85:50:
f1:99:a3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:36:45 2026 by rpki-client