Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
File: tUSbCOpqJn33NmpolcfJJMLxkm0.mft (raw, json)
Hash identifier: 25xc/hgbZKSiHLYYt38VW9OcLgFLYStj2CEOwtFCIzY=
Subject key identifier: DB:FF:19:92:C5:04:94:8B:EE:92:87:A6:26:B6:B1:FD:FF:96:9E:91
Authority key identifier: B5:44:9B:08:EA:6A:26:7D:F7:36:6A:68:95:C7:C9:24:C2:F1:92:6D
Certificate issuer: /CN=b5449b08ea6a267df7366a6895c7c924c2f1926d
Certificate serial: 019D27A94131CBBD0B8FF223762B216083C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
Manifest number: 0427
Signing time: Thu 26 Mar 2026 01:01:36 +0000
Manifest this update: Thu 26 Mar 2026 01:01:36 +0000
Manifest next update: Fri 27 Mar 2026 01:01:36 +0000
Files and hashes: 1: 5a8JGJ3id4PxFvxqeLBMFMn4dRw.roa (hash: CUVPemRn0SVvUqbZxOWY0VPVfqwjNH4J3L61ApQCXYM=)
2: tUSbCOpqJn33NmpolcfJJMLxkm0.crl (hash: TZLHzr640CHo0haZkw+0q9Ee88KEuETvTmWBK7N+CHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:41:31:cb:bd:0b:8f:f2:23:76:2b:21:60:83:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5449b08ea6a267df7366a6895c7c924c2f1926d
Validity
Not Before: Mar 26 01:01:36 2026 GMT
Not After : Mar 27 01:01:36 2026 GMT
Subject: CN=dbff1992c504948bee9287a626b6b1fdff969e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8c:61:24:60:ab:de:5e:02:60:7b:47:47:7b:
21:ae:fc:ef:ea:b9:bb:49:80:08:b7:de:07:e4:c2:
50:63:7a:ae:58:45:b9:6c:71:29:dc:21:eb:c2:d9:
0b:92:f9:3b:ff:e4:13:91:14:3d:ad:d2:e3:6a:ae:
48:93:87:02:8b:b5:52:73:18:35:4c:71:1a:41:9d:
e6:b5:12:d4:fa:de:ab:4c:cd:4c:51:78:6e:9d:d6:
d9:35:36:4b:4b:f2:0c:c9:dd:33:25:87:65:e3:88:
f3:3a:40:1f:a7:19:88:2c:d0:23:f4:fb:2c:f6:a4:
e4:ac:58:48:53:e1:fa:61:5e:2e:4b:db:d2:08:20:
73:b7:e4:01:8b:1f:57:29:14:e9:ed:1b:99:e2:22:
e6:ff:8f:3e:15:26:0a:56:61:b0:41:74:bc:31:1e:
5b:6c:2e:03:16:c3:2c:6a:e9:16:2b:7e:d7:21:39:
8a:31:b8:2d:57:bf:99:20:ef:69:0d:99:73:d9:32:
5a:c7:40:ce:62:58:f0:4a:b1:43:60:1b:52:7a:f3:
b4:72:eb:aa:f1:b0:a6:17:b1:54:c7:0c:09:b1:f0:
81:ce:2c:0f:7d:56:d5:ee:4c:d5:eb:1c:d3:0d:2d:
0e:09:d6:92:26:df:d2:4a:64:35:a4:a7:63:56:fe:
22:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FF:19:92:C5:04:94:8B:EE:92:87:A6:26:B6:B1:FD:FF:96:9E:91
X509v3 Authority Key Identifier:
keyid:B5:44:9B:08:EA:6A:26:7D:F7:36:6A:68:95:C7:C9:24:C2:F1:92:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:56:16:d1:26:d7:6f:6e:39:37:bb:e1:f1:ec:2b:4e:a7:f6:
c0:bc:48:90:d8:c0:6b:a5:75:60:72:43:5f:13:9e:96:d8:11:
ba:b9:f0:f5:01:7d:64:48:95:69:07:83:d9:be:e4:02:72:e2:
9b:23:36:ea:98:0d:09:1c:e6:5d:bd:ab:94:fd:38:07:38:86:
09:db:c3:09:f2:c6:40:1f:3c:02:e1:b2:00:7d:bf:7c:1e:9f:
0a:de:e1:f1:1d:49:6b:a4:a8:d3:77:bb:fe:c7:ce:85:39:f7:
71:17:a2:39:07:16:20:01:79:0e:8b:36:dc:51:af:cc:ac:82:
14:c4:c4:3d:62:7d:10:7d:e4:ce:41:50:3e:49:f9:14:f8:85:
cb:e3:17:e9:6b:9c:53:b3:e6:ff:ae:a5:63:17:ec:a8:f4:ce:
1b:63:50:ae:87:53:4a:91:48:75:72:33:e5:fd:0e:e9:34:98:
46:de:a7:85:b2:cc:cf:de:54:46:a2:44:c0:82:9f:39:be:6a:
19:5e:31:1f:66:84:9f:d2:0e:a5:e5:c4:bd:6d:d4:36:5e:f2:
d6:c7:93:9b:4a:1f:f2:d8:e8:e9:68:c4:fe:1d:2e:6d:7f:50:
f3:96:53:3a:f8:9d:f1:61:92:29:04:2c:cf:13:ec:ca:3c:52:
d5:03:12:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:03:26 2026 by rpki-client