Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json)
Hash identifier: lgEqL3wDGaLwOozJZGP5Sk+IA1/C6IragZXVYBdThe8=
Subject key identifier: A7:99:53:8F:FF:6F:8C:1B:9C:35:75:28:6F:6A:5D:BF:D5:6C:91:7F
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial: 019E1E6C847768B529A1B055A4106FAA86C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
Manifest number: 1377
Signing time: Tue 12 May 2026 23:01:28 +0000
Manifest this update: Tue 12 May 2026 23:01:28 +0000
Manifest next update: Wed 13 May 2026 23:01:28 +0000
Files and hashes: 1: 58ydFFoOvrTPYA8iOIAgZMf_cpo.roa (hash: F/vDL/5heMjU5cUbUY7RNuovDGPBXC3rXD0ZADSlfk8=)
2: roH8dSJ1cyQiwOhgeOOscUYpa4E.roa (hash: 3JORgmdPZaQ8xXUzauNxbxZQHf1X4hPOhgbsIE182Bg=)
3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: RLbef3WDOJFG1wJH6VdOGISVF8Yuff7xEXTHblZfux8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:84:77:68:b5:29:a1:b0:55:a4:10:6f:aa:86:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Validity
Not Before: May 12 23:01:28 2026 GMT
Not After : May 13 23:01:28 2026 GMT
Subject: CN=a799538fff6f8c1b9c3575286f6a5dbfd56c917f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ca:33:0c:d6:94:08:c7:d6:f7:1b:66:91:cf:
9e:c3:3a:a8:52:5c:4b:83:76:18:e5:08:0c:b4:a5:
a1:45:ec:a7:29:e7:4c:cf:63:8d:f2:20:b8:98:50:
a2:f5:d5:99:41:d2:b5:f6:e2:bc:48:3a:8c:b6:a2:
cd:c8:12:e7:53:67:af:b6:1e:9b:ca:fd:3e:30:99:
3f:ca:cf:5e:36:ef:64:6a:06:d9:f7:18:68:ca:e9:
04:0c:7a:55:68:21:f0:f7:a2:a7:17:b5:8f:ec:60:
9b:7b:80:b1:e9:bd:aa:25:65:4c:18:40:a0:91:e2:
3c:9f:7c:6a:62:4d:cd:58:eb:c2:6b:c9:34:28:0c:
bb:5f:80:07:58:83:e5:8b:b3:b6:e5:52:ad:62:96:
9a:d8:64:4f:00:71:18:a9:6d:63:61:cc:65:3c:e9:
c7:28:91:b7:5f:d6:69:58:9b:f2:66:d3:21:b7:1b:
93:f9:e0:a6:2a:d4:24:b8:15:aa:13:9e:3a:b1:22:
ba:85:53:e5:63:d8:48:26:7d:78:16:70:90:58:8c:
d5:e6:e7:38:7d:bb:6c:fd:f4:19:cd:d7:92:86:d0:
ba:4a:8b:0c:8c:20:77:58:be:f3:8e:9f:78:10:b5:
0e:72:ec:27:c9:cf:05:c1:27:e9:cf:88:ac:41:d3:
66:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:99:53:8F:FF:6F:8C:1B:9C:35:75:28:6F:6A:5D:BF:D5:6C:91:7F
X509v3 Authority Key Identifier:
keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:72:35:fc:d8:2c:55:11:f7:72:af:27:2b:43:8f:57:a7:d3:
63:1d:97:4d:02:18:e6:c0:2f:81:3b:a1:0c:8f:da:eb:de:a9:
aa:79:2f:5a:80:70:66:42:58:33:d0:53:79:b8:b5:51:c1:f0:
07:7d:24:4b:42:05:eb:11:a8:af:09:a6:f5:b2:ad:08:23:87:
03:71:5e:85:8e:b6:71:66:dc:98:b0:61:bc:97:4a:1f:61:5b:
b5:8a:e1:03:e3:4f:de:b3:ef:e7:7b:d2:0e:a4:06:ec:53:b5:
7a:f3:c3:38:c9:ff:32:5d:bd:03:b8:a9:2e:21:cd:20:7b:11:
11:a1:02:fc:76:eb:96:a9:1c:96:5e:d5:1b:5d:6b:22:c1:4c:
28:9a:41:92:2c:9b:35:c6:6d:b9:c4:f4:53:5e:36:4d:1c:ac:
dd:82:cb:53:f1:9c:eb:d9:a4:fe:f5:9c:e2:2b:93:ba:62:bb:
5a:ee:73:67:e0:b6:a6:05:a6:7c:6f:1f:a2:08:46:c1:8b:4b:
59:6d:3f:3a:75:75:a0:0c:f7:11:35:5f:00:fb:37:0a:04:aa:
51:5b:e5:85:a8:d3:1d:b6:c0:0d:8f:95:12:43:c4:58:fe:2d:
59:ef:65:77:60:40:ef:83:ac:c7:a5:0f:be:f7:98:da:df:a0:
17:13:67:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:24:55 2026 by rpki-client