Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
File: tfrsS42ZLda5zYmoSJ08OmUq7NI.mft (raw, json)
Hash identifier: oyFqjLBVzn0/N5xbfrOdNlGbGAkhNe3viyzYXc/2ey0=
Subject key identifier: B1:E4:3E:31:2B:68:CF:FE:18:97:87:82:AC:66:EB:95:07:68:3F:D7
Authority key identifier: B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
Certificate issuer: /CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Certificate serial: 019D299761B36A5C9FBCE8819AC867EADA2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 10:01:19 +0000
Manifest this update: Thu 26 Mar 2026 10:01:19 +0000
Manifest next update: Fri 27 Mar 2026 10:01:19 +0000
Files and hashes: 1: V1HErl2JVbjT136XwGDVBe5B8q0.roa (hash: 0IOhqRYRA3j3IZg7O69Z3jrw0I2aO88PvmtQESn76TE=)
2: sRhSOvBT50pEAGhy38eEzssMMhA.roa (hash: QbFSrZ3TjWQdjeS28WmLKPudQlt94pkB4tDP467+qjg=)
3: tfrsS42ZLda5zYmoSJ08OmUq7NI.crl (hash: AJ0yKZEYxQopfk7a3h+7O1I6ydgZSuUfNLy6UwsoJt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:61:b3:6a:5c:9f:bc:e8:81:9a:c8:67:ea:da:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Validity
Not Before: Mar 26 10:01:19 2026 GMT
Not After : Mar 27 10:01:19 2026 GMT
Subject: CN=b1e43e312b68cffe18978782ac66eb9507683fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:dc:c1:d5:78:82:9a:b6:03:45:72:54:34:d2:
8a:10:30:47:9c:b0:4d:89:c3:e0:6e:70:9b:d4:5c:
36:5c:17:47:9d:d6:d7:fd:fe:68:11:cd:66:11:c7:
2a:64:8f:e9:4c:fd:30:81:8f:c7:fe:40:4a:d1:66:
6c:61:ce:16:86:da:4d:d4:f4:65:bc:32:63:08:e0:
10:e6:47:35:7c:20:c2:34:d4:94:ba:4f:57:a8:b4:
e3:41:0a:76:19:bd:7d:cb:b6:0e:e5:42:f0:0a:8c:
9b:86:d2:b9:72:79:60:c5:b3:25:11:62:f9:f7:8b:
be:35:a4:58:95:51:69:e3:98:cd:94:de:bf:7c:fb:
54:fb:35:4a:be:4b:01:6a:59:b8:da:4f:b5:7d:fa:
c1:f8:ec:6e:d0:38:7a:a0:a8:b2:95:34:3f:50:a4:
b4:10:2d:90:32:81:cf:fa:f4:68:c3:bb:1a:63:9f:
79:2c:18:08:65:67:a7:40:7a:b0:44:d7:ec:b4:e4:
68:51:ba:4a:f6:4b:cb:46:fe:8c:f8:3e:b6:60:92:
4b:1d:f3:fc:fe:05:ab:45:dd:94:e1:c2:ec:38:96:
23:00:d5:93:a2:13:28:93:2d:88:74:6d:fb:69:3d:
e3:36:a7:f8:cb:5d:24:01:28:01:e9:4b:31:e6:f3:
f0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E4:3E:31:2B:68:CF:FE:18:97:87:82:AC:66:EB:95:07:68:3F:D7
X509v3 Authority Key Identifier:
keyid:B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c3:e1:bc:3d:b3:a7:89:a0:16:e1:8c:1a:c7:7e:af:07:26:
d5:2c:5d:b8:b5:66:7f:a9:da:d8:15:14:dd:b0:17:eb:35:dc:
ce:f9:fc:ad:93:b6:5a:d8:22:c0:8c:31:98:c7:a0:3f:5f:ad:
d5:ca:19:10:0a:ea:f9:f4:56:fd:3f:b2:77:6f:21:a0:d2:85:
5c:79:cd:c2:75:ff:76:f7:a2:55:90:96:ba:bc:57:38:a8:15:
d8:d9:85:b1:19:32:7f:48:28:e2:74:54:35:a2:6c:ec:52:ef:
55:84:39:2f:c0:3b:87:a0:a3:a8:47:84:3a:d3:10:89:8f:29:
89:e4:c2:8b:c1:4d:24:71:13:86:ea:33:74:92:2c:fb:43:41:
e6:50:df:2e:2a:c6:ec:a3:a7:c9:54:90:33:59:21:b0:f6:a3:
c7:62:7f:ec:39:d7:06:f6:48:af:7d:7f:2a:21:79:3b:46:48:
47:b6:bf:f0:93:9b:65:b3:55:89:7e:ae:40:0c:77:8e:bb:9e:
2d:8b:95:28:07:9a:90:c3:2c:c6:0e:9f:76:1c:fc:22:54:f0:
17:61:cd:24:fb:82:83:26:29:1e:44:97:9e:b5:22:d0:f3:4f:
84:b1:b0:58:d0:92:d9:e5:f6:ac:6d:82:d4:ef:fe:1a:6d:de:
c2:1e:d6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:29:20 2026 by rpki-client