Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json)
Hash identifier: AZyD35GYCPIruvQvkf8esUZ0hXGJTMmgT2rZEj3vCTw=
Subject key identifier: B3:6B:95:75:61:87:E9:1C:80:49:C7:21:60:67:8F:90:DD:4B:D2:F8
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial: 019D273AC1D8FE7D1026F007E65A2EBE799D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
Manifest number: 12F7
Signing time: Wed 25 Mar 2026 23:00:55 +0000
Manifest this update: Wed 25 Mar 2026 23:00:55 +0000
Manifest next update: Thu 26 Mar 2026 23:00:55 +0000
Files and hashes: 1: 58ydFFoOvrTPYA8iOIAgZMf_cpo.roa (hash: F/vDL/5heMjU5cUbUY7RNuovDGPBXC3rXD0ZADSlfk8=)
2: roH8dSJ1cyQiwOhgeOOscUYpa4E.roa (hash: 3JORgmdPZaQ8xXUzauNxbxZQHf1X4hPOhgbsIE182Bg=)
3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: Ju1EmQNROQtYBk9gmrkuFIRrPEbFONpaRqz5Q6oEsMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:c1:d8:fe:7d:10:26:f0:07:e6:5a:2e:be:79:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Validity
Not Before: Mar 25 23:00:55 2026 GMT
Not After : Mar 26 23:00:55 2026 GMT
Subject: CN=b36b95756187e91c8049c72160678f90dd4bd2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:32:41:7b:74:1f:0d:e6:04:d5:31:f9:82:0a:
0e:3a:be:d1:71:54:ef:89:e2:1e:40:96:0f:62:ed:
f7:df:a4:8f:09:01:2f:b9:29:15:cb:d8:fd:57:d6:
7a:14:2f:04:2a:c9:c9:8b:c1:35:44:8f:4d:c6:95:
12:9a:a1:93:96:cc:d3:06:c5:a6:ed:ad:df:aa:bb:
34:8b:44:8e:30:94:02:2b:f8:8d:39:ea:30:07:89:
6e:69:30:fe:8e:d0:c8:6d:9d:26:ad:9c:a9:0a:a4:
18:b2:07:6d:2d:3b:c0:54:33:c5:37:f5:ee:2b:6c:
f0:cc:c1:12:c9:9f:11:cf:5c:8f:90:95:36:f3:c2:
c8:07:3d:a3:94:73:53:42:b7:9b:a1:87:66:88:fd:
97:5c:69:1c:aa:c0:8c:0c:82:00:d9:c2:e8:e3:41:
e9:af:01:21:af:f6:0e:06:d2:9e:e5:2f:e7:d3:9b:
cb:1d:d1:62:42:71:c0:b9:c2:68:b6:56:07:e9:f6:
d3:ec:22:8c:de:67:96:1a:c3:08:1c:14:8b:8d:4e:
9b:8d:36:37:72:3c:3a:14:87:f4:d4:27:40:90:95:
a9:5b:91:4d:8f:5b:e5:e4:1b:eb:50:b4:c3:1b:7c:
ce:d5:56:94:0b:a3:f6:cc:68:1d:17:14:b4:38:66:
a2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6B:95:75:61:87:E9:1C:80:49:C7:21:60:67:8F:90:DD:4B:D2:F8
X509v3 Authority Key Identifier:
keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ef:21:57:25:fd:54:14:3c:57:42:da:bd:dd:8b:c7:d7:91:
4e:56:11:c3:c1:f8:b9:1b:ac:e0:9e:17:c8:68:63:26:66:f5:
7c:3f:33:f7:d7:ae:db:0b:b1:45:1b:c5:dd:03:67:88:d4:7e:
8a:b3:02:ca:f3:a0:5e:fd:9c:5a:fe:c2:3b:24:57:5f:e9:59:
fa:dd:2c:9e:51:5a:71:54:93:16:a7:31:52:7e:12:59:08:a5:
8a:47:2d:b1:3e:24:65:af:d6:cd:9d:58:d4:1c:56:21:2d:4c:
14:05:e8:04:42:44:72:e8:13:6b:8c:93:f5:14:54:41:25:91:
39:e2:27:96:09:43:ba:b7:7a:82:9d:5c:a4:04:d8:b7:e5:60:
a1:ae:15:cd:38:39:a3:b9:72:45:85:1e:b4:b2:dd:fe:cc:0c:
4b:1e:13:55:e9:61:4a:44:e0:63:a8:a6:03:07:bd:91:c2:ad:
bc:44:c5:cd:35:b6:ae:6a:ba:0a:8f:a8:89:b0:a4:2e:cb:81:
93:e4:e0:fa:53:c0:af:d5:f0:7d:82:f7:77:08:24:ca:6c:09:
87:b1:32:53:a2:2b:84:e3:41:93:c0:10:b1:75:21:e5:a9:24:
58:3d:f2:15:20:af:79:10:b3:51:ee:0d:ae:fa:a0:32:0f:00:
a7:dc:dd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:32 2026 by rpki-client