Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
File: tpQiR24a5eoNWOT4_fkfBfEC_vs.mft (raw, json)
Hash identifier: hfcfj2Gw80H9vNcl3u/PTfZzp61yqO+OLdzwaQ4MFGg=
Subject key identifier: 1D:2D:40:9B:BD:41:F0:B3:E1:B9:39:43:6F:BD:C6:0A:EE:44:5E:1B
Authority key identifier: B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB
Certificate issuer: /CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb
Certificate serial: 019D273A83FF7B44BCDD2DBEFB46BE342E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 23:00:39 +0000
Manifest this update: Wed 25 Mar 2026 23:00:39 +0000
Manifest next update: Thu 26 Mar 2026 23:00:39 +0000
Files and hashes: 1: ISfG2ceyWuWYeRgRuKuH6VXmeXE.roa (hash: dFAyLFozLbvyA3OIY3CyaWsZeKTyXIGDjyZDQv/swnk=)
2: PQzbNhLV7WARqjZ2K9wwzRtvgZU.roa (hash: Jji1aUdojCSmn8rbwnWDExchCVVbDC1F3h2Ol9wg7o8=)
3: tpQiR24a5eoNWOT4_fkfBfEC_vs.crl (hash: gI5YG86HaH/83fH++Mw5Pgz9uspbDwghPsEOkU+zty0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:83:ff:7b:44:bc:dd:2d:be:fb:46:be:34:2e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb
Validity
Not Before: Mar 25 23:00:39 2026 GMT
Not After : Mar 26 23:00:39 2026 GMT
Subject: CN=1d2d409bbd41f0b3e1b939436fbdc60aee445e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:49:af:53:81:21:a9:64:9f:2e:95:38:d8:
53:fa:34:e1:07:0a:c9:8b:64:5b:ae:15:a8:46:5c:
d8:49:6a:d9:25:95:32:68:db:8a:85:e6:a7:88:9a:
ef:4c:ec:ff:58:21:ce:b1:25:b9:1c:58:f8:2a:59:
8a:60:3b:84:b1:40:ff:5e:5c:2b:03:2a:44:f9:5a:
5f:de:1c:c3:84:25:44:ed:30:3a:ce:67:f9:7b:6a:
9a:c0:a9:38:8f:b2:f5:eb:3e:6d:75:2b:7c:bf:c6:
9c:17:1b:c3:c3:d8:52:ee:2a:52:93:f3:f4:58:4a:
a3:56:c1:0a:ab:a1:1b:81:f9:0c:4a:27:37:77:c3:
48:d1:82:c2:68:c7:3e:21:58:c8:e2:42:c9:86:d2:
c2:fe:ba:2b:d9:35:2c:ca:15:24:ab:62:22:11:b4:
18:e7:f1:53:6d:89:3f:61:42:77:35:54:47:8d:4d:
12:7b:7b:d2:d2:24:61:32:c9:aa:72:64:d9:8c:1c:
b6:1f:e4:55:50:39:bb:aa:73:92:ab:7c:9a:3d:4a:
9d:3d:5e:1c:49:e3:10:cc:aa:33:a1:62:a8:c2:81:
a9:ff:07:e3:31:4c:03:85:c5:19:32:0d:d2:a6:c5:
7f:fa:1e:28:49:6f:6a:d1:83:4e:35:96:bd:4c:ac:
c1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2D:40:9B:BD:41:F0:B3:E1:B9:39:43:6F:BD:C6:0A:EE:44:5E:1B
X509v3 Authority Key Identifier:
keyid:B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d8:a8:40:4b:be:22:c8:e3:13:08:ba:c1:23:3c:bb:50:6b:
e8:99:37:74:b4:e0:b2:fd:96:b8:e1:11:d5:46:f1:8e:0d:07:
a5:6e:b9:25:d0:14:ba:17:70:8b:c4:c9:c1:e6:58:5d:3d:2b:
8a:9d:a5:7e:96:8d:b7:bc:6f:13:e1:f7:d1:b9:58:4c:eb:a0:
cb:ba:61:00:f9:a8:ba:bb:27:7a:eb:2f:e9:a7:90:dd:1f:c5:
2b:6a:55:99:27:1f:c0:00:06:19:65:7e:6d:02:75:1b:7c:5b:
31:ec:03:31:d4:3c:a3:00:e2:8d:68:30:07:6e:3d:99:c1:5b:
16:4d:04:3d:56:33:1b:a8:59:2e:21:f8:62:35:66:bf:8d:b4:
eb:50:81:c3:f6:11:e0:1a:59:86:eb:aa:d8:a4:ae:e1:b1:5c:
de:1c:f3:b5:2b:6b:74:a9:73:d5:5e:06:b8:70:82:cb:26:47:
ca:52:86:1b:90:68:fe:6f:25:aa:a2:d9:f1:cf:41:56:a0:df:
8a:98:7a:6c:ec:1b:87:aa:77:ef:dd:0e:97:43:24:eb:05:ab:
5a:65:bf:2c:bc:5c:b4:8b:1e:c8:12:ad:ef:79:93:de:9c:9d:
19:97:9d:c2:17:df:6f:c6:15:75:e8:d3:56:42:7d:9e:30:f8:
e9:89:98:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:06 2026 by rpki-client