Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
File: tXZXfSAIXEwi_IARyNGpP2MhHA8.mft (raw, json)
Hash identifier: bM7zYZORfH2I9DI8lVdy8wo7s/bn1Nn03v5d584e5AI=
Subject key identifier: 4D:09:C8:15:E8:DE:34:10:0F:71:3E:19:7E:DB:E2:0D:F9:D8:16:86
Authority key identifier: B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
Certificate issuer: /CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Certificate serial: 019D28849DC72AA1BCCB8CF90F1E14549C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
Manifest number: 03AD
Signing time: Thu 26 Mar 2026 05:01:12 +0000
Manifest this update: Thu 26 Mar 2026 05:01:12 +0000
Manifest next update: Fri 27 Mar 2026 05:01:12 +0000
Files and hashes: 1: BrEn8Ll6xu0ChcaE3vSi9IymY14.roa (hash: NNxrHTmgvweqwRH2WYDaRBvMbTQvhCqzhXCgDcQp9hU=)
2: dJzuUQdUvbJK7ApuLpV6Tk_tQMQ.roa (hash: xDU3oB6soulsXEg0wveHXPe21+ZwGXL0i23r4rN7i40=)
3: tXZXfSAIXEwi_IARyNGpP2MhHA8.crl (hash: 1KxIPPaUNwoipLOWxiFhiXMqk6LPHCscp2nFR855rBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:9d:c7:2a:a1:bc:cb:8c:f9:0f:1e:14:54:9c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Validity
Not Before: Mar 26 05:01:12 2026 GMT
Not After : Mar 27 05:01:12 2026 GMT
Subject: CN=4d09c815e8de34100f713e197edbe20df9d81686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:73:c2:fe:a0:a3:18:86:fa:14:34:0d:9b:7b:
2c:e8:a5:6b:ed:b4:5f:6e:c4:ba:e3:42:e8:e7:4b:
4f:3b:12:ef:96:eb:97:6a:23:78:14:bc:5e:02:4f:
44:ec:7f:86:43:f3:cd:68:11:bb:aa:4b:9e:44:b3:
3e:0c:bf:99:77:f5:ca:25:a0:be:fa:46:9e:6f:00:
58:64:56:f8:d9:98:af:ed:c2:75:b2:23:1e:6b:37:
ac:ab:b6:7b:c4:b5:e4:d0:98:65:eb:77:e3:50:76:
07:df:3d:14:b5:a5:5f:c8:88:d7:4a:7c:57:5c:81:
0d:99:30:57:c6:25:9e:88:fa:3e:40:83:4a:74:1c:
6b:ed:ec:a9:6b:50:e8:57:3b:1f:2e:43:71:80:79:
18:d3:f0:97:ca:15:d9:c6:ff:9a:a2:1c:ff:c1:ac:
1d:9a:39:6c:6e:b8:eb:4a:72:82:29:78:b8:1b:6c:
f3:4a:6a:30:5d:5a:06:07:2a:dc:90:6b:e7:f3:5b:
5a:87:d2:e0:4e:ce:7b:75:58:fa:82:6b:89:f6:14:
0e:06:91:97:6f:12:bd:30:cb:6d:51:76:ca:3a:b6:
e2:48:07:50:82:95:5f:dc:b1:63:ad:cc:af:c2:92:
df:db:48:6f:c6:14:19:71:0f:90:e2:bd:28:5f:0b:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:09:C8:15:E8:DE:34:10:0F:71:3E:19:7E:DB:E2:0D:F9:D8:16:86
X509v3 Authority Key Identifier:
keyid:B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:9e:00:f6:6d:8a:0f:2a:c5:d1:c4:aa:5b:28:5e:fe:b6:1e:
00:f6:0a:21:1f:41:f0:83:21:5d:2d:d6:2d:83:1b:6d:76:1a:
9b:b9:2c:84:30:ca:6d:ba:7d:2c:5d:df:e9:4a:d8:88:ed:fd:
15:5e:b1:b6:2e:2c:db:27:0c:39:be:e8:d6:0c:82:17:c0:bd:
2d:c8:e4:88:25:ed:08:e4:68:d5:d4:c8:bc:f2:14:05:f5:7a:
4b:b1:b3:9a:8b:06:de:e7:61:8c:2d:38:8b:cb:70:3e:42:92:
62:32:db:2f:54:b9:dd:6e:6a:51:e5:11:82:32:6b:a9:58:3d:
ae:d7:62:33:e5:cd:83:96:24:dd:6b:2b:18:c3:f9:14:1c:b1:
f8:fb:f3:9f:38:8b:b5:27:18:bd:12:2a:9d:e1:7f:ec:47:2e:
00:cd:94:7d:01:05:eb:d4:0b:f9:cd:17:b4:ca:16:2c:f6:35:
9a:3f:20:f3:b7:80:ee:d6:ce:f8:6d:f9:2a:81:c6:f1:d0:06:
95:66:cf:b6:25:15:af:20:e8:d3:c3:13:6f:02:b2:9b:3e:7c:
b8:57:ca:d7:de:2b:97:fb:d8:4c:b6:5a:36:d4:0e:6b:e4:17:
2e:60:9c:e0:b3:85:af:83:15:09:41:72:b5:c6:2c:53:d6:72:
80:af:ae:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:39:28 2026 by rpki-client