Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
File: _Tq5WEdps0xpXg7zvkAN5chwX1g.mft (raw, json)
Hash identifier: n5DYTa18pgwtT/Bl6++kG84yqk5beyBdCxyDvVpZ/Gw=
Subject key identifier: 81:D5:29:9B:F3:1A:8B:89:75:68:DC:7E:5F:7C:02:BF:1E:3F:4E:F3
Authority key identifier: FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
Certificate issuer: /CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Certificate serial: 019D2772D55226DFDA389074623F85840420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
Manifest number: 048E
Signing time: Thu 26 Mar 2026 00:02:10 +0000
Manifest this update: Thu 26 Mar 2026 00:02:10 +0000
Manifest next update: Fri 27 Mar 2026 00:02:10 +0000
Files and hashes: 1: 0BsOVzhVk1MKdipne8qaIMaKsew.roa (hash: GWXgVGFzyZitQdapoQ6ExT2SefdF2ctk1Wka/DqT424=)
2: _Tq5WEdps0xpXg7zvkAN5chwX1g.crl (hash: qVKaiv7higBI28cFMDezWNcS9zu3oLcXSpdCWAxPwl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d5:52:26:df:da:38:90:74:62:3f:85:84:04:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Validity
Not Before: Mar 26 00:02:10 2026 GMT
Not After : Mar 27 00:02:10 2026 GMT
Subject: CN=81d5299bf31a8b897568dc7e5f7c02bf1e3f4ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:18:c0:cd:68:8d:c8:11:10:24:a4:89:80:
2b:41:75:c3:91:58:c2:fe:52:b9:47:e3:bd:2e:40:
50:b6:5a:22:18:3b:70:fd:d8:b3:ac:db:93:23:d4:
24:e4:e7:a6:db:00:77:49:94:b9:30:cd:1c:fd:01:
a0:d0:5c:8d:80:f6:f9:2b:51:d7:c9:87:79:f0:f6:
80:47:94:65:58:80:16:76:2e:02:2a:21:12:74:c3:
98:57:54:a9:da:9e:4a:82:1f:d4:a2:0a:e5:06:92:
1c:53:40:13:d0:90:ed:60:2c:27:4f:ed:3c:6c:3e:
15:50:5a:85:82:63:f1:62:da:70:5e:45:f9:a9:71:
a6:6c:70:62:a9:17:ce:c3:70:ce:bf:36:d2:7b:14:
2f:7b:bf:a4:c3:e7:09:42:0f:44:cd:aa:29:02:2c:
e9:bf:e7:a2:25:0e:be:4e:5b:76:fd:76:2c:87:11:
76:93:dc:2e:50:f6:3f:9d:4e:ef:20:98:a4:17:af:
c0:ac:a9:36:54:9b:43:64:99:0f:13:1b:c7:25:c1:
af:a3:89:13:f8:e5:12:62:c9:26:ff:c0:aa:b7:b3:
03:6f:cb:6b:fa:65:6b:95:96:6e:dc:40:80:1a:fa:
45:2e:c2:c8:37:00:3b:bf:c7:41:77:bf:1f:29:ac:
83:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D5:29:9B:F3:1A:8B:89:75:68:DC:7E:5F:7C:02:BF:1E:3F:4E:F3
X509v3 Authority Key Identifier:
keyid:FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c8:a4:4a:ca:15:cc:21:c0:b4:ae:09:98:0a:15:3d:1b:41:
7a:ad:16:14:16:6f:07:56:fe:49:cd:60:42:07:9c:da:de:2d:
d8:0d:8e:de:58:15:b7:2f:73:a4:8a:db:ca:ea:8c:56:d7:a4:
18:ce:a6:23:1b:22:c5:e1:ee:af:b1:9a:26:38:b7:ef:f9:59:
05:3b:2c:fb:a6:1c:49:1e:b7:7a:48:c1:94:a0:a4:15:0a:1f:
5d:05:9f:ef:61:a4:03:91:75:ae:fc:4b:89:9c:80:ee:29:b1:
13:e0:d1:e5:34:d6:cf:af:3c:27:d0:af:38:aa:28:53:60:ca:
4c:91:e9:a5:ea:2b:30:06:c7:26:0a:ec:ac:5c:6c:fd:a5:9c:
e4:42:34:ad:c0:a1:c0:b2:48:d3:71:f3:d0:9a:cf:fd:95:ea:
9a:1d:e0:86:48:37:5c:d2:3f:d8:29:96:ad:51:e1:2a:ca:a0:
8f:95:5a:92:43:e5:10:32:7e:a3:6e:e2:20:98:7a:ea:93:61:
2d:95:d4:8f:58:b6:51:74:c2:c7:da:08:b5:56:e6:86:7b:91:
d4:31:35:b8:05:c1:30:2d:df:a1:8f:55:15:1c:42:61:73:15:
0a:e9:d2:68:9e:81:b0:fc:f8:44:7c:06:6a:ae:6e:45:19:53:
30:b8:19:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:48 2026 by rpki-client