Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
File: TxSbhH0xKT9wHhz5ndjKDruwtb0.mft (raw, json)
Hash identifier: Pbs6ww/sJKYAz2aEiq1XeA/wBSWRx5ENiNc6JNRdqjc=
Subject key identifier: 2E:85:1D:A0:87:52:DE:A1:F1:BB:A7:BD:53:F4:3D:1C:77:D7:54:C0
Authority key identifier: 4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
Certificate issuer: /CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Certificate serial: 019D2C60C71835FB1EB1885FE3D6CC7F59D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
Manifest number: 11E8
Signing time: Thu 26 Mar 2026 23:00:32 +0000
Manifest this update: Thu 26 Mar 2026 23:00:32 +0000
Manifest next update: Fri 27 Mar 2026 23:00:32 +0000
Files and hashes: 1: FvKj3Djs8TT6ypv05g8sMqJXOlA.roa (hash: tfDMARTocl58JXc9IeJSQaWJFyjzzrUR3p+6fLmC9V4=)
2: TxSbhH0xKT9wHhz5ndjKDruwtb0.crl (hash: CJlVEHSvUi/V/26ELBWpKohr98JJRQL1phqbladQoyI=)
3: h07ZqTc0uqELKn3DOxOskKYqbI4.roa (hash: FJf5zVyfQ2yme32gVPw1Ih+VvDivHZUWDg5Nah7gYOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:60:c7:18:35:fb:1e:b1:88:5f:e3:d6:cc:7f:59:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Validity
Not Before: Mar 26 23:00:32 2026 GMT
Not After : Mar 27 23:00:32 2026 GMT
Subject: CN=2e851da08752dea1f1bba7bd53f43d1c77d754c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:8d:87:51:88:06:9b:78:01:82:2d:af:10:
d0:44:67:78:f9:44:05:22:fe:b5:2d:1c:cd:23:80:
3a:22:f0:0d:42:05:dc:28:c2:13:bb:d3:3a:f5:c5:
16:39:cb:31:26:25:c3:c5:47:6b:2c:f3:5f:86:6e:
f7:5b:be:dd:00:94:fc:72:94:6a:ec:6d:6c:ac:ea:
3e:29:48:89:92:29:56:57:97:8e:30:5a:a2:c0:bc:
04:15:34:a3:cf:d3:a9:2a:59:26:1f:14:11:f3:f8:
7f:c1:80:5d:c2:1c:b9:85:04:a0:38:0f:79:8f:39:
17:df:2b:6f:3b:6f:15:05:fd:d4:d7:97:6f:9e:89:
f5:21:28:fa:b4:61:27:93:9e:b3:2b:6e:29:b9:9f:
45:d3:3e:9f:77:c2:6e:16:de:aa:93:e0:4a:37:cc:
52:a5:a2:f2:a4:da:d8:d4:54:ab:fe:be:a0:4a:17:
c8:a8:ee:a2:99:5a:5d:28:40:93:c3:8b:50:cc:72:
17:ca:50:18:56:ca:70:ae:c0:12:2a:04:64:c7:d0:
16:1c:3d:92:40:d3:8e:a7:ca:91:28:29:5b:40:54:
33:f9:82:5b:71:8f:b8:73:c9:fa:59:ce:9e:d3:13:
5d:f6:75:73:0b:00:17:cc:30:f1:05:7d:15:24:ef:
76:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:85:1D:A0:87:52:DE:A1:F1:BB:A7:BD:53:F4:3D:1C:77:D7:54:C0
X509v3 Authority Key Identifier:
keyid:4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f0:a4:8e:9c:2e:7a:65:a6:43:bd:be:09:d0:e3:71:9a:f2:
55:4e:2c:9d:13:26:59:7e:d7:0b:25:96:c0:c7:48:63:47:76:
20:5a:dd:7a:35:34:8c:3b:79:88:81:f4:a3:ef:7a:01:01:7e:
fa:61:a3:5c:e6:ce:55:37:b2:4f:b8:09:fb:24:db:a5:c3:68:
2b:7e:f2:68:ad:0c:9c:00:59:67:3a:dd:a4:c1:ff:f2:6f:f7:
57:35:7c:8e:4a:6f:78:40:08:88:9f:5e:c6:29:38:ad:c5:dd:
5e:3c:cf:a1:c8:f0:18:16:92:dc:85:fc:cb:7d:69:a8:93:54:
a2:0c:ad:38:7b:c5:b2:fb:b6:ae:1e:92:ea:b9:c9:c4:57:9e:
14:67:a3:ae:c8:91:05:5e:6d:be:28:ac:e8:33:6f:09:86:9e:
d3:95:97:3d:70:0d:2e:7c:7d:93:5b:50:69:cf:7a:92:92:fb:
69:41:7d:ad:b6:78:5d:e2:ca:eb:4d:ab:f3:e4:b6:f3:dc:e7:
71:b9:fd:df:1c:2d:41:6e:e6:55:79:41:46:7a:ec:94:5d:d2:
40:09:ec:41:c3:eb:29:81:79:5d:19:3c:f6:79:ee:42:79:e4:
af:0b:72:9f:fb:5a:d4:f6:62:6a:f6:b5:c8:7b:fe:76:0e:00:
f4:6c:b1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:51:25 2026 by rpki-client