Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
File: txKyWiME97pEw40Dld3y7QT1x-8.mft (raw, json)
Hash identifier: OoJj+Bg7wdlo4oA6W/9EBgvSv+iRH/oJmiMcl31RT6s=
Subject key identifier: 8B:00:29:91:B7:B3:BE:39:9F:DE:44:5F:33:0B:44:D8:CF:0B:7D:5E
Authority key identifier: B7:12:B2:5A:23:04:F7:BA:44:C3:8D:03:95:DD:F2:ED:04:F5:C7:EF
Certificate issuer: /CN=b712b25a2304f7ba44c38d0395ddf2ed04f5c7ef
Certificate serial: 019D258451FD9FCD34A7C0CDC1B588A69E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 15:02:01 +0000
Manifest this update: Wed 25 Mar 2026 15:02:01 +0000
Manifest next update: Thu 26 Mar 2026 15:02:01 +0000
Files and hashes: 1: UaDGeJWsIXI8NDyfXgRgg0KcJv4.roa (hash: G/op3Q8p3v4tlB5sWD/LQVTf6+Xz6sN8yv1KW42vf5Q=)
2: txKyWiME97pEw40Dld3y7QT1x-8.crl (hash: Ff850qR1/bCiExhAekhePzdp2we3rGuAnodfnlbobes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:51:fd:9f:cd:34:a7:c0:cd:c1:b5:88:a6:9e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b712b25a2304f7ba44c38d0395ddf2ed04f5c7ef
Validity
Not Before: Mar 25 15:02:01 2026 GMT
Not After : Mar 26 15:02:01 2026 GMT
Subject: CN=8b002991b7b3be399fde445f330b44d8cf0b7d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e5:b9:b2:39:b8:7a:74:d1:da:d0:a5:df:96:
90:95:df:db:bf:8d:6f:e7:50:bd:b2:64:2f:d2:bd:
4c:f5:4a:37:79:84:74:bd:3e:33:7c:7e:55:22:99:
3d:eb:ed:44:11:6b:07:7b:f5:a7:36:ba:4f:4b:71:
e3:91:40:19:f3:e0:6a:db:f3:f1:dc:8a:e6:08:f7:
c8:8e:f6:a1:0f:bc:c0:eb:de:50:2f:eb:f5:67:bc:
66:e1:7f:82:0c:b5:76:37:f3:70:70:8d:7d:4a:c2:
f3:a3:a5:4c:d1:4b:53:3e:71:f1:34:84:4f:b0:93:
be:38:19:fe:82:e7:48:80:da:9f:76:d7:51:7d:74:
4e:d0:26:91:c6:e0:3d:17:b5:79:0b:d5:31:7a:5f:
f9:32:17:2e:cc:be:83:ac:62:c7:ca:4f:ec:bf:78:
73:69:98:f4:d4:2b:ed:20:e0:d3:c4:e5:df:86:7c:
2e:1f:3e:db:c7:ab:f6:ee:9a:dd:33:ff:5c:68:29:
e8:90:1d:58:24:07:d5:ad:b3:d3:57:79:09:17:9a:
55:0b:ed:15:5c:e3:7c:ad:ef:d7:c8:73:f3:7c:67:
d9:58:d2:bf:46:1c:9c:c3:fd:a8:df:1f:0d:8b:a6:
c1:81:df:8c:87:11:a3:ef:37:35:d1:1a:26:81:6c:
60:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:00:29:91:B7:B3:BE:39:9F:DE:44:5F:33:0B:44:D8:CF:0B:7D:5E
X509v3 Authority Key Identifier:
keyid:B7:12:B2:5A:23:04:F7:BA:44:C3:8D:03:95:DD:F2:ED:04:F5:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:bb:5c:58:6e:b2:b0:e0:1f:0f:69:ef:b8:f3:9c:bf:4b:b4:
b2:c2:a7:ae:12:0e:9e:6e:9f:02:57:14:d1:e8:64:73:c0:7f:
9b:eb:8c:5b:cd:89:eb:bd:d1:11:1b:fc:0a:fb:83:ec:af:27:
29:6b:7b:b9:57:e3:27:75:4c:e5:70:32:f7:24:c2:c8:db:5c:
a3:62:ea:a2:14:95:3a:aa:ec:ff:12:f8:63:6c:ff:80:8b:07:
d2:90:01:b7:ba:a2:8b:16:9b:2e:5c:9d:1c:da:c0:71:61:4e:
a3:ad:68:2b:65:14:6b:c6:51:34:6d:e8:6a:18:d9:c7:76:ff:
29:fa:57:7e:c0:f8:3b:3c:6e:0c:c7:92:2e:ce:a1:ca:07:61:
ad:9d:8a:05:85:df:a1:9c:65:01:fd:7f:64:8e:09:b0:bb:ad:
e6:6d:c2:3d:1c:b2:22:f7:ca:d8:9b:b5:a4:9f:13:e3:17:bb:
16:73:9c:14:57:ca:fb:d9:8e:b8:c1:91:c9:57:b4:f9:a0:45:
a8:7a:33:2b:f5:6b:fa:3d:79:99:13:6c:cf:da:98:80:0b:0c:
aa:51:fa:e1:81:3f:4e:8a:5d:71:fa:c8:3f:95:42:7e:ab:56:
34:e2:5b:56:6b:76:56:65:c9:97:e0:0f:5e:96:7b:c2:5b:b5:
ec:3a:19:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:45 2026 by rpki-client