Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: nCN99pKb7ANMZuGL5z4Qhk6Oa4l8bxALeTq5F1ixWGU=
Subject key identifier: 33:CE:64:DD:B0:4F:46:B1:55:C7:26:C5:A1:8C:01:28:3E:A6:0D:F0
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 019D2C61217D887C0396EE660309E576D8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 07D3
Signing time: Thu 26 Mar 2026 23:00:55 +0000
Manifest this update: Thu 26 Mar 2026 23:00:55 +0000
Manifest next update: Fri 27 Mar 2026 23:00:55 +0000
Files and hashes: 1: F5-0m80tGgQaB6VZO47ty9lw_m0.roa (hash: oQoBwhHoNc0uwJ0ShH4VE+ATyTC8Z15nDhm83FZUfmE=)
2: snDtm5EPq4bt8uwg0uwMS4ldr3M.roa (hash: Re/iBzYv9n7wH6AvwpA38RzBVI5qHPbHIdU0N2m905E=)
3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: VGgtZqZJFRXHmmIPWu/wIp7QxPDK1qY+u4XC4LlU+Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:61:21:7d:88:7c:03:96:ee:66:03:09:e5:76:d8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: Mar 26 23:00:55 2026 GMT
Not After : Mar 27 23:00:55 2026 GMT
Subject: CN=33ce64ddb04f46b155c726c5a18c01283ea60df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fc:60:c2:cb:a1:62:12:b3:4d:4a:78:1c:e7:
48:65:12:62:67:dc:c6:15:45:12:72:a6:43:3d:0a:
d7:67:af:1f:08:89:13:67:19:fb:bb:33:b4:e0:3b:
f9:a5:55:d7:2d:74:3e:db:d4:76:ac:a2:f3:d7:aa:
92:9d:e0:c7:88:a0:83:2e:d1:6f:ed:bd:6a:c7:78:
bd:e1:ca:fe:f6:d2:9f:a0:20:78:c1:95:fc:94:8b:
3d:7e:fe:84:b5:58:7b:d1:6b:73:c5:17:4e:27:2c:
40:dc:a3:17:4e:ef:a5:75:9f:61:70:37:72:46:33:
06:8a:63:66:c9:43:3e:c5:5d:1e:40:35:08:f0:73:
c1:43:b5:28:a0:06:12:8d:6b:a9:2e:e0:b9:7f:29:
56:fe:e6:a9:dd:70:17:5a:9d:ad:d2:01:e5:0d:4d:
54:c0:48:72:12:a4:74:50:67:d4:ae:d4:a9:3c:11:
87:2f:46:c7:fc:c3:04:ce:39:27:60:d9:6b:15:09:
ed:96:93:57:bf:9f:2a:7c:aa:9f:8b:f9:f4:ac:33:
bb:3e:ec:58:3c:27:f9:a4:b5:dd:47:48:5a:78:e0:
24:a9:1f:c6:75:93:96:1b:45:1b:a7:d9:41:d6:e1:
22:be:91:26:77:b0:b1:bb:e4:27:4c:c6:7c:db:a8:
42:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CE:64:DD:B0:4F:46:B1:55:C7:26:C5:A1:8C:01:28:3E:A6:0D:F0
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1b:95:19:a7:2c:a4:70:3b:5a:a2:90:4d:49:5b:2c:b3:a3:
aa:95:5d:d9:0e:22:3c:f8:48:f5:2a:2b:1e:d2:62:86:4a:f2:
4f:86:a0:a6:98:16:38:7c:da:75:dd:27:eb:05:6f:39:9b:12:
1c:a6:a9:76:87:b6:8d:ce:9d:2e:0d:80:d6:18:72:8c:a5:fe:
65:50:67:fd:c5:d5:46:73:1b:39:03:65:76:44:f4:ed:5b:1b:
71:cc:87:22:f0:4f:9e:81:87:83:49:41:79:cb:dd:31:52:10:
75:dc:62:cf:22:c6:23:cb:cc:b5:3b:37:6c:a9:e9:fe:2c:e3:
51:a1:bf:0e:21:8d:c0:1f:12:a6:ab:37:12:f9:ec:3e:a1:77:
d8:0c:f8:a7:fd:7e:07:b9:42:88:62:52:23:48:5c:39:02:84:
3f:22:a9:33:b2:7e:e4:0e:50:53:8a:6e:78:f2:1c:20:e2:d1:
37:9d:48:b5:d8:30:d2:55:d5:0a:96:2b:7b:d8:c8:e5:e5:2b:
e3:1b:9f:a6:4a:65:9a:fa:27:5d:e7:c0:4c:a8:47:60:45:ec:
02:95:b4:ca:10:3a:71:ad:10:96:f1:d3:48:6c:7d:54:3a:5d:
2d:bb:fc:df:a2:cb:df:38:8a:50:ac:29:7e:9e:a9:74:45:36:
74:6f:5f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:43:07 2026 by rpki-client