Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
File: tBuxzdW4a-d4BoidLhsgKswnsiU.mft (raw, json)
Hash identifier: Ig3dAptat2SS1ZQ+G1HqTGiErXg/ZIC6TK3p8Y4C5iI=
Subject key identifier: 11:92:1F:F7:CF:E6:F8:83:62:AD:9C:20:36:14:80:25:4B:0E:DC:05
Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
Certificate issuer: /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Certificate serial: 019D26CCC0D37DDF52551A34331F377D738E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
Manifest number: 0554
Signing time: Wed 25 Mar 2026 21:00:45 +0000
Manifest this update: Wed 25 Mar 2026 21:00:45 +0000
Manifest next update: Thu 26 Mar 2026 21:00:45 +0000
Files and hashes: 1: In4EzW4PifpkipDj7qZT5AtFRqI.roa (hash: 7ol6yCYPKNd+spUojNfO6UXZVpdbeZk6ckVx301HrIA=)
2: tBuxzdW4a-d4BoidLhsgKswnsiU.crl (hash: KWDbT2gpoCDm1Zzsu7slezUNzlQg8F/wnpoimxCJEWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c0:d3:7d:df:52:55:1a:34:33:1f:37:7d:73:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Validity
Not Before: Mar 25 21:00:45 2026 GMT
Not After : Mar 26 21:00:45 2026 GMT
Subject: CN=11921ff7cfe6f88362ad9c20361480254b0edc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e3:5f:f0:c1:27:f2:8b:32:46:43:65:23:1e:
59:03:6b:b3:0b:f8:a7:9f:0d:c8:40:b2:1c:c8:03:
85:21:aa:fd:77:4f:88:11:43:52:94:85:00:57:99:
40:52:d7:5d:f1:4e:17:54:db:66:f9:15:26:92:53:
2c:47:b1:95:30:4e:59:60:31:5e:dc:4b:17:ad:d0:
18:a7:00:dc:a5:83:ee:d9:1c:18:b5:58:9e:30:e6:
51:8c:53:0b:0b:fd:4c:76:25:21:a6:e6:c7:b2:8c:
78:fe:25:bd:72:e8:3d:c2:c6:3c:35:5b:97:22:d2:
25:96:83:ab:7f:52:ed:ac:31:be:d3:10:cf:0a:8a:
56:88:60:c7:b5:80:28:b6:41:1f:33:89:2e:77:19:
77:68:57:68:6f:54:ed:6b:f8:75:1b:c0:33:3d:f2:
03:3a:f6:0e:3c:1f:61:1e:06:df:90:bb:e4:06:48:
97:7b:fe:a3:54:8b:fe:09:f5:42:9f:9a:4d:e5:78:
e1:26:73:d8:c2:bd:38:d9:e8:ca:22:57:5d:73:32:
4d:46:2f:cb:6a:09:4e:57:d9:b1:8f:ca:3f:a3:7a:
c0:17:1a:66:97:05:5c:94:73:9f:c6:12:60:cd:7e:
ab:e8:97:40:2a:59:56:18:d8:15:74:64:32:2a:9c:
28:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:92:1F:F7:CF:E6:F8:83:62:AD:9C:20:36:14:80:25:4B:0E:DC:05
X509v3 Authority Key Identifier:
keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d9:e5:b7:86:d8:eb:f0:71:1a:68:6d:6b:17:c4:f9:7f:5e:
49:5b:16:33:f3:d0:81:3d:53:e3:d2:3e:6f:b5:4c:b7:55:3d:
44:f2:f5:67:bb:78:3c:6b:df:62:3f:7c:3d:cf:fe:37:47:b1:
ba:2a:6e:ff:50:42:5a:e1:5d:50:e8:2e:81:14:51:0a:3e:a0:
dd:a6:d7:a8:1a:47:b8:7b:a3:f7:62:db:c4:ff:5f:b8:79:5c:
8b:23:25:82:82:21:48:0f:e8:4e:96:6f:75:74:0d:4f:0a:d0:
7f:0f:14:ad:28:38:27:b1:af:8a:31:69:0b:d6:5d:16:f1:c5:
f7:e4:13:a4:fa:4a:5e:65:dd:16:95:9e:ae:22:ab:17:88:2a:
dd:9d:db:8a:f9:d3:a3:d1:b0:66:36:4a:c5:57:89:c8:3d:8f:
93:22:aa:3a:84:ba:29:86:c6:d8:14:cf:8f:31:ff:0c:8f:a1:
c3:a3:1b:9f:34:1f:c4:dd:3d:ae:cf:cd:41:00:62:c2:3a:67:
b8:ff:6d:67:d8:2f:06:ce:71:80:f5:78:72:1d:98:48:30:71:
32:5e:4b:c8:ec:59:b2:fa:67:22:ad:b7:92:ed:4a:d6:a0:cf:
bc:db:1f:da:26:c1:be:d3:6c:1e:f6:d7:5c:e9:cf:ae:ac:b2:
fb:f4:4d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:36 2026 by rpki-client