Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json)
Hash identifier: JVNqQLyXrZuV9hEwC+EbleGXNjJO5dMOX+yML/Ontr8=
Subject key identifier: 39:3A:CB:61:FC:2D:7E:16:A1:EC:80:24:08:CE:FB:FE:66:68:05:C4
Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Certificate serial: 019D28169D0714D55FD33A636E54DA0617B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 03:01:03 +0000
Manifest this update: Thu 26 Mar 2026 03:01:03 +0000
Manifest next update: Fri 27 Mar 2026 03:01:03 +0000
Files and hashes: 1: 8Ae2bQe1uFjZZo0F1tnzO2BTYdM.roa (hash: 5M5PrQ6jblQ4c8/6XrFcJktYLAM5nwbgehPaHFmA10E=)
2: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: 4JeO6RYePpcR603TdLDlu7Jer2CIgBPq7bBOVCOdyzk=)
3: wHRMABRpMiyEtjejskYT70NitKw.roa (hash: uaVh9YOmPZr43rpaKkgfhS6YH1UUI05Pvf24DvQSZqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:9d:07:14:d5:5f:d3:3a:63:6e:54:da:06:17:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Validity
Not Before: Mar 26 03:01:03 2026 GMT
Not After : Mar 27 03:01:03 2026 GMT
Subject: CN=393acb61fc2d7e16a1ec802408cefbfe666805c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:31:73:4e:da:00:82:0d:de:3f:ca:e1:59:
a8:94:e6:a8:a3:7b:86:dd:37:e2:6f:f9:68:db:93:
de:c4:95:62:e6:67:be:b6:02:5b:37:3c:fa:c9:65:
84:10:5d:13:da:37:eb:34:fc:c9:f9:c8:00:e4:f5:
08:e8:d6:63:d7:47:99:36:a5:5f:1a:20:4c:0c:fb:
04:8a:dc:f3:cd:1c:2c:4c:6b:91:7a:16:6a:6e:c2:
a6:e5:82:1b:88:bc:8a:96:aa:d4:2a:bd:97:51:6d:
bc:de:de:98:c7:78:b7:58:2c:54:5d:46:e3:49:99:
91:ae:67:f8:2c:2f:9c:d0:20:53:42:a0:22:7c:6c:
7b:cc:c8:c6:78:08:ff:ef:be:0a:3f:d0:a4:fe:6e:
64:75:09:b6:d2:69:1d:dc:fe:fb:03:ad:75:81:7c:
a6:00:13:c0:09:2e:c5:e6:a8:51:b0:87:f7:ae:8c:
c4:a1:b8:cb:ac:e5:16:67:56:95:c9:fe:8a:18:cf:
af:d8:7c:7f:7f:e4:71:f1:68:eb:be:39:ac:2b:dd:
d3:0a:22:da:b5:fe:87:61:c3:07:c7:69:d7:9a:6a:
e3:64:9e:f5:bd:0a:04:ca:3e:b4:c7:ed:12:cf:86:
36:f6:da:b5:31:e3:fc:40:fc:93:17:44:1b:8c:56:
e8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3A:CB:61:FC:2D:7E:16:A1:EC:80:24:08:CE:FB:FE:66:68:05:C4
X509v3 Authority Key Identifier:
keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2f:70:b2:c1:60:19:3f:78:33:1b:98:49:6a:ed:5e:90:db:
99:bf:e9:b0:10:96:8d:46:07:6b:f5:89:6a:8c:07:c1:5c:43:
a9:95:f3:7d:a0:27:26:49:d2:13:3b:94:50:cb:6c:cb:ea:e4:
f2:73:b6:f1:50:cf:85:99:1d:10:f4:36:bb:a1:60:49:a7:40:
07:d1:68:89:4a:11:a3:de:2d:30:5e:67:c1:95:63:8d:9e:3e:
77:e0:2a:1c:15:b8:6e:4f:30:fb:93:3f:04:01:de:f1:25:19:
ff:62:66:19:79:8c:df:4c:b1:6b:0f:0a:aa:8a:67:d8:06:a0:
1f:50:93:6c:10:64:e4:62:8f:24:07:47:f1:d8:53:56:45:71:
44:06:27:b7:2f:db:6d:ab:0d:85:42:92:f0:43:f3:56:f3:fd:
5d:9b:0e:91:c8:32:4f:da:9e:23:71:1b:33:44:aa:74:45:26:
66:ca:64:0b:0c:a0:c3:d6:61:64:45:60:92:7f:90:09:50:c1:
bb:05:21:54:af:ad:93:2f:21:65:ed:fe:10:01:95:78:5a:a9:
fe:87:e6:d2:0f:5b:a7:47:e8:bd:ea:cb:d9:5d:2e:a8:cb:5e:
8c:7c:e9:48:e5:86:3e:cb:fe:bf:67:d7:78:ec:85:90:c0:fb:
db:90:2d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:42:48 2026 by rpki-client