Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
File: tcR4e4CrSAGrYrG9v7KOBtMM32o.mft (raw, json)
Hash identifier: iqvK2qgsSKcz4NzuJLqqj588qujlJrw3U5DTHVwU1N8=
Subject key identifier: E6:30:0D:28:63:D8:8B:07:B5:68:1D:6E:C5:A1:28:D6:B9:26:A2:78
Authority key identifier: B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
Certificate issuer: /CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Certificate serial: 019D29295B54C29CC4082CBDB58EC8713095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
Manifest number: 06E3
Signing time: Thu 26 Mar 2026 08:01:09 +0000
Manifest this update: Thu 26 Mar 2026 08:01:09 +0000
Manifest next update: Fri 27 Mar 2026 08:01:09 +0000
Files and hashes: 1: q-r2zDjO2sGmoc9QswQFQyhASW8.roa (hash: RdehwxnZtuAfNN5Ll+yv9MNFac3Y26/8VjA+iUeTNWw=)
2: tcR4e4CrSAGrYrG9v7KOBtMM32o.crl (hash: H0cGWPet7XdXMu6+QP5FUwnfpPWNT5gBaCcWjng6L1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:5b:54:c2:9c:c4:08:2c:bd:b5:8e:c8:71:30:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Validity
Not Before: Mar 26 08:01:09 2026 GMT
Not After : Mar 27 08:01:09 2026 GMT
Subject: CN=e6300d2863d88b07b5681d6ec5a128d6b926a278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cc:78:78:bf:2b:66:a4:af:f0:61:de:3d:fd:
6f:1f:2e:f5:4c:0d:00:56:8c:96:f4:61:00:b5:54:
55:bb:94:64:32:50:c7:f7:c9:f0:92:45:f6:e7:2c:
73:66:08:34:a2:8d:52:7c:37:78:6d:aa:21:b4:c0:
98:c3:e5:32:9d:13:0e:e5:e5:92:fe:33:d1:34:5a:
77:1c:a8:2f:6a:c8:b2:05:06:2e:be:cd:b8:3d:07:
49:f6:bd:43:42:65:ee:10:38:64:af:49:78:57:51:
65:59:6e:4e:53:fc:5d:f3:b7:a4:d0:5e:82:f0:cf:
c1:8a:f7:83:be:49:60:4a:15:45:58:04:5e:1d:59:
02:9e:96:87:91:3d:ac:ca:fa:1a:00:d0:46:cc:7c:
45:0e:22:0a:69:64:5d:0e:ef:2c:cf:0f:d8:89:c0:
07:2b:c8:f8:04:fc:73:a0:f5:2f:81:5d:08:d9:11:
db:6b:71:42:07:7e:60:ab:55:f4:36:c2:a1:a7:13:
b1:5a:14:37:f4:d0:3d:64:8d:c6:d7:47:9f:f2:f9:
3e:16:9c:54:76:07:e3:09:35:6a:07:a3:ea:00:05:
d0:3c:01:21:26:e5:28:38:87:72:5a:c9:73:df:e4:
b3:f7:0e:0e:81:a5:5a:52:81:9e:95:ff:02:f0:34:
2d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:30:0D:28:63:D8:8B:07:B5:68:1D:6E:C5:A1:28:D6:B9:26:A2:78
X509v3 Authority Key Identifier:
keyid:B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ae:a1:f6:30:bb:c0:02:5f:71:6a:cd:ca:bc:28:62:e1:4a:
8b:ea:e1:9e:6d:44:54:12:ea:4d:59:52:51:09:18:b9:ab:7c:
27:1a:6d:2e:76:76:93:0e:47:6c:f3:87:46:a4:15:d0:99:13:
8f:8c:22:8b:16:85:59:c6:0e:d5:d6:ef:36:25:fa:a0:7e:ed:
f8:d6:a8:38:46:69:73:c8:a5:56:d1:5b:f5:4f:1b:c8:a6:db:
b2:e4:29:5f:1a:23:54:c0:9b:9f:17:4b:17:dd:06:5a:7b:b0:
88:f8:65:37:5a:ba:42:41:53:c8:7d:c6:17:66:a5:03:ae:a3:
a2:a2:5a:a7:50:56:8d:18:c1:ba:d9:21:9c:11:0f:a0:28:c3:
0f:f8:ef:60:f7:af:55:73:0e:6c:7e:2f:0f:70:b6:9a:ec:68:
94:bd:38:c6:35:a8:4d:63:0b:fa:4e:dc:e2:dc:dc:50:9b:36:
71:2d:65:db:57:b6:37:58:5b:c7:d6:5f:3b:d8:e0:6d:f9:43:
7f:01:ab:a1:a3:d8:7c:84:f5:f0:53:3c:ff:39:b5:ce:c2:7d:
79:40:dd:53:f0:45:88:cf:a4:c8:11:be:38:9f:ca:ba:75:35:
ff:64:1a:a1:26:a9:ea:a6:69:3f:ad:e3:2d:d9:9e:74:31:ec:
3e:94:9a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:44 2026 by rpki-client