Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
File: tXZXfSAIXEwi_IARyNGpP2MhHA8.mft (raw, json)
Hash identifier: AbjyZ3fq/84JhHzoN7dbpfP3stNmuIdfyaNRY+lSyVg=
Subject key identifier: D1:06:48:40:14:98:5B:CD:E3:D2:BA:94:B9:B7:1E:30:4E:8E:69:8C
Authority key identifier: B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
Certificate issuer: /CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Certificate serial: 019D2A72BFDE910CCDCB46D8FB0BD6111DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
Manifest number: 03AE
Signing time: Thu 26 Mar 2026 14:00:56 +0000
Manifest this update: Thu 26 Mar 2026 14:00:56 +0000
Manifest next update: Fri 27 Mar 2026 14:00:56 +0000
Files and hashes: 1: BrEn8Ll6xu0ChcaE3vSi9IymY14.roa (hash: NNxrHTmgvweqwRH2WYDaRBvMbTQvhCqzhXCgDcQp9hU=)
2: dJzuUQdUvbJK7ApuLpV6Tk_tQMQ.roa (hash: xDU3oB6soulsXEg0wveHXPe21+ZwGXL0i23r4rN7i40=)
3: tXZXfSAIXEwi_IARyNGpP2MhHA8.crl (hash: CyaU4AblsPKsFwzph9UYY/YvToGJBFIHVz5FVI3PW3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:bf:de:91:0c:cd:cb:46:d8:fb:0b:d6:11:1d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Validity
Not Before: Mar 26 14:00:56 2026 GMT
Not After : Mar 27 14:00:56 2026 GMT
Subject: CN=d106484014985bcde3d2ba94b9b71e304e8e698c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4f:b7:7a:72:42:98:99:1f:5b:b8:c6:f4:72:
8a:cf:2f:32:8f:3b:cf:ff:a4:f1:8d:e5:6e:5e:0d:
7c:7a:d7:94:8a:45:fc:36:27:59:0d:86:8f:53:79:
04:f7:4c:77:1b:29:d4:22:dc:c5:1f:8d:ce:67:4a:
59:4c:a1:94:f1:f0:85:a1:dd:64:af:e1:c7:e6:ad:
09:bf:98:a5:cf:bd:e2:57:2c:a6:04:e3:5e:56:05:
21:df:0d:4c:0b:cd:21:aa:31:55:12:b2:5d:2f:60:
22:d9:2a:b3:d4:a3:73:cc:55:a4:b5:24:9f:fd:df:
b8:e9:ae:4a:ad:a3:c2:64:03:65:6c:48:1d:d3:dc:
0a:9b:59:0d:9b:fc:5d:94:9b:1d:8e:6a:bc:f3:37:
cc:a5:24:e8:5f:57:a6:ff:24:78:85:82:27:49:7f:
72:30:5d:c3:e7:b5:8d:5a:ec:04:50:eb:fd:55:64:
97:1d:b7:92:91:af:6c:43:6b:7e:17:c9:17:d1:15:
26:b8:9c:b3:cf:d1:a8:06:d8:a7:40:19:1e:72:cc:
4f:b5:69:b5:c6:b2:a6:bf:04:f5:4e:fa:bf:23:84:
08:a4:c4:fe:96:9f:2e:dd:f9:54:8b:ae:54:83:e3:
6d:ec:e1:ef:f2:ef:e6:5b:a1:0f:08:dd:40:93:a3:
0b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:06:48:40:14:98:5B:CD:E3:D2:BA:94:B9:B7:1E:30:4E:8E:69:8C
X509v3 Authority Key Identifier:
keyid:B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7a:63:75:9e:02:a0:43:4d:d3:95:b9:96:21:fe:2c:65:a9:
f7:f2:38:0c:cd:53:5e:e7:db:66:3e:63:ba:23:69:67:14:ea:
b6:92:14:ae:41:25:fc:37:c8:86:22:01:b7:1b:a4:19:3d:6c:
96:18:4b:59:d2:8e:5a:3f:04:3d:1c:a3:80:e0:03:f2:2c:a5:
02:f3:29:99:da:b5:81:08:c0:96:a6:df:1f:c9:ea:35:15:ef:
d7:c3:8e:f4:15:75:46:72:25:30:82:4d:13:a5:0e:36:07:b4:
b5:25:e2:55:e2:00:e5:21:89:de:0d:6e:45:18:34:0e:a0:dd:
3f:63:ba:1e:f2:82:fb:ee:d7:76:c1:65:f5:4f:ab:b8:a5:9c:
32:06:bd:dc:ce:49:f5:a2:07:1e:2f:36:f5:e8:9c:6f:0f:74:
66:13:24:27:8f:34:8a:7d:44:a9:30:0b:07:31:59:07:3e:47:
b4:33:2d:d8:0a:04:4d:9e:28:94:c8:3d:85:59:08:93:ce:f2:
89:b2:41:98:a5:65:08:ef:0c:7d:75:c3:54:04:d0:f8:0c:ed:
cd:c0:18:7a:c9:82:2d:ea:37:b7:86:96:43:06:4d:ed:52:cd:
bc:76:46:63:96:74:8e:33:9c:6b:77:93:5a:ce:10:7b:e2:ca:
4b:3d:cc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:53:43 2026 by rpki-client