Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
File: tMBDnHlVURAtbx5M620cUvvF6j8.mft (raw, json)
Hash identifier: K0GqIJdTq8704voDyiRlw8iO5ukGBtYHhtEBB8znbhk=
Subject key identifier: 1B:3D:36:73:37:4C:D4:1F:FE:91:FB:81:CC:BF:19:F3:EE:6F:A7:16
Authority key identifier: B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F
Certificate issuer: /CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f
Certificate serial: 019D29CE8590BEC496F388E4CB2E781E72B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 11:01:33 +0000
Manifest this update: Thu 26 Mar 2026 11:01:33 +0000
Manifest next update: Fri 27 Mar 2026 11:01:33 +0000
Files and hashes: 1: RiSZlLjYu2HkKfgG-ViVEkyKZns.roa (hash: lhY041uMz7TjMMSGYMZC4RSrTiXBMmzOCgXBevRNjRY=)
2: tMBDnHlVURAtbx5M620cUvvF6j8.crl (hash: hEfe+ytIKWz2TwpCh5MADXiEvAEO5j9JY4c+anAwPwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:85:90:be:c4:96:f3:88:e4:cb:2e:78:1e:72:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f
Validity
Not Before: Mar 26 11:01:33 2026 GMT
Not After : Mar 27 11:01:33 2026 GMT
Subject: CN=1b3d3673374cd41ffe91fb81ccbf19f3ee6fa716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:cf:07:99:44:b9:63:35:f2:2e:65:d8:df:
cd:68:69:17:23:5c:66:35:a9:92:79:9e:4d:03:7c:
02:b4:77:31:ce:d3:63:b1:87:2f:30:de:82:66:d0:
e5:a0:51:66:63:85:2b:2b:33:2f:8f:3f:6c:f2:04:
d2:62:a7:ea:68:00:1c:bb:44:dc:37:1d:3f:08:fe:
21:78:f0:8e:4e:97:cc:31:f0:8a:51:f3:a2:54:20:
47:7d:bc:54:4a:8b:10:98:b3:a3:c4:14:79:67:ec:
5b:b3:69:7b:2a:21:c5:c2:55:8f:91:38:33:c5:60:
8b:84:ad:69:20:87:1e:69:2e:b4:5e:c1:26:a2:de:
62:9e:b0:2a:11:92:92:a9:9f:42:64:f7:27:42:f7:
67:7f:ca:d7:3d:ee:54:f6:ea:50:8e:44:97:08:06:
d2:48:7e:a2:dd:cd:e9:5c:d5:90:3c:fc:38:f6:11:
66:ae:c4:6f:84:70:39:9c:6d:02:00:ee:b2:91:9b:
83:68:86:d8:13:63:e0:c7:75:a0:c0:e9:71:64:62:
8f:6d:0e:53:57:c1:a4:18:54:d0:1a:66:9f:79:2a:
fe:d2:0e:d8:56:4b:17:ff:bb:50:34:a3:18:85:b8:
6e:f5:cf:e2:61:ca:42:2b:45:7d:5c:43:ae:23:53:
97:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3D:36:73:37:4C:D4:1F:FE:91:FB:81:CC:BF:19:F3:EE:6F:A7:16
X509v3 Authority Key Identifier:
keyid:B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3a:9a:89:53:98:63:4e:ec:60:f5:5f:9b:57:a2:f3:fe:e1:
8e:52:67:21:65:3e:74:58:e2:e5:40:0d:1a:2d:4a:ef:e4:b3:
46:c0:0b:98:29:ce:05:4d:25:74:06:c3:80:cf:db:98:19:38:
ae:d9:1e:f9:9e:4b:ee:90:44:8b:80:3b:64:e7:fc:01:72:1d:
66:cd:06:6b:f5:58:72:66:7c:aa:8a:68:b8:9c:01:0f:4e:4c:
05:b5:92:18:e8:64:5d:4c:c1:77:54:ac:80:ed:ec:1f:aa:81:
88:80:92:42:ce:c2:95:64:e3:d1:19:8e:79:1a:fa:db:ab:d1:
eb:cb:89:9e:9a:63:f1:00:d5:0f:cf:de:fd:5d:3b:17:99:ba:
4c:79:b7:2a:e3:46:f3:a2:11:3b:94:25:31:68:78:0d:3f:c3:
32:75:7d:4b:47:81:ee:02:60:ac:d3:28:91:74:20:10:fe:bb:
61:2f:45:40:bc:94:fc:ec:a5:c9:7f:13:54:f2:5e:5c:2f:c6:
38:41:f1:03:d6:93:dc:2e:d5:ba:21:ea:90:50:1f:8d:42:81:
0b:d1:c2:1d:b7:9f:8a:05:17:33:1d:cc:67:ef:25:46:60:32:
63:2b:2c:ce:cb:3b:3e:29:1c:1c:6e:88:a1:f4:b7:68:ab:d9:
3f:4a:5d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:17:57 2026 by rpki-client