Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
File: tCQBfG4cj_1jly4CRJCYR33fF98.mft (raw, json)
Hash identifier: XD3zOj+in062HuZOQ9Fy+OBZgrHzn5Rk8eGAa9MPBg4=
Subject key identifier: AC:F7:79:49:E9:D2:EE:76:BC:2E:30:CF:54:EA:2E:1A:2F:0B:F7:A6
Authority key identifier: B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
Certificate issuer: /CN=b424017c6e1c8ffd63972e02449098477ddf17df
Certificate serial: 019E1C7DACF9A132EAD7141A0FF436A1453F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
Manifest number: D0
Signing time: Tue 12 May 2026 14:00:58 +0000
Manifest this update: Tue 12 May 2026 14:00:58 +0000
Manifest next update: Wed 13 May 2026 14:00:58 +0000
Files and hashes: 1: Z9tAGQF9StCthIO0Pjcyl0N2xM4.roa (hash: 6AWanwgFbNvMqkMl3YCOopQDUI07IMGf93/6aV4ujtg=)
2: h2S5SOYfIdtYgW2lzny0MQ8S930.asa (hash: rCu8Reo7yVY7Fv0iiMibroZtuw9DHcD5SnkWO03YCtk=)
3: tCQBfG4cj_1jly4CRJCYR33fF98.crl (hash: TsVjenNL37aMQPqaPYxVwkxDRcR5ZqKYA3z9rmQk5lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:ac:f9:a1:32:ea:d7:14:1a:0f:f4:36:a1:45:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b424017c6e1c8ffd63972e02449098477ddf17df
Validity
Not Before: May 12 14:00:58 2026 GMT
Not After : May 13 14:00:58 2026 GMT
Subject: CN=acf77949e9d2ee76bc2e30cf54ea2e1a2f0bf7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2e:9c:b4:de:a6:2d:e4:39:63:49:5a:e2:43:
9b:93:29:ad:7f:78:c6:0b:5a:76:37:75:1d:e9:8b:
a1:39:b4:08:31:22:47:ae:68:c4:d3:b1:8b:be:08:
0d:22:08:ad:b8:25:10:bd:24:7e:d4:50:dc:f6:ac:
0b:90:51:ee:7e:87:08:7d:e0:53:b5:eb:c0:d7:62:
07:fc:56:55:c9:e3:66:5c:89:d3:74:55:45:fa:f2:
e3:f9:44:35:a9:1e:80:59:e3:14:37:33:5a:f0:23:
b1:46:ac:36:55:0e:6e:bd:82:eb:b8:d2:d5:4b:f4:
a6:b2:ed:35:4f:7b:f6:cc:46:9f:62:f9:c4:b6:39:
7e:8f:37:b0:c6:66:3d:cb:1b:60:57:d0:04:80:ab:
63:ae:d8:59:b0:7b:5f:b5:e4:60:c3:7d:ed:91:0b:
7b:29:bc:1f:af:ec:ea:93:a4:44:68:ec:37:c2:a1:
4b:cd:9d:f8:6e:ce:d6:da:59:fa:d7:a5:8d:31:99:
19:3b:94:c1:16:9b:db:a0:3b:3b:ec:07:0f:83:77:
11:77:e7:75:78:f1:bb:ba:b0:9e:e0:a9:fb:1d:34:
e0:7a:02:e4:32:78:1e:25:53:99:2f:a4:e0:09:2c:
ee:b9:fc:32:a3:17:48:8b:6b:7c:db:c8:58:0b:f8:
7d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F7:79:49:E9:D2:EE:76:BC:2E:30:CF:54:EA:2E:1A:2F:0B:F7:A6
X509v3 Authority Key Identifier:
keyid:B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8f:4a:29:65:c9:3a:22:b9:5d:df:41:0b:98:7f:55:85:b9:
97:db:7c:52:d1:5f:59:ed:a2:cd:b1:62:61:20:7a:c5:32:86:
f7:f7:9e:d5:87:7a:8b:c0:bd:f4:74:ef:22:3e:bb:1e:d5:3a:
3c:ab:6d:d5:23:b0:8a:6e:29:f6:bd:3b:32:7e:df:af:dc:a0:
16:51:5a:61:c6:58:14:56:ef:02:bb:1d:42:c8:56:a6:28:6c:
72:26:f9:b8:54:d6:62:8a:96:bf:1a:b3:e3:e9:a3:47:27:56:
e1:30:9e:c4:39:16:b7:96:f9:e2:2e:8e:1a:42:5d:65:00:52:
b5:47:34:ed:55:0d:a5:f3:f0:ee:07:8c:4f:14:c1:e7:6f:ac:
f3:15:3e:96:8e:65:7c:c2:df:a4:f3:b2:05:46:71:9e:f8:75:
be:69:73:07:b3:32:60:63:98:bd:04:b3:88:8f:cc:3f:15:61:
91:aa:43:0d:06:b5:3a:6a:3b:74:ce:cc:fd:30:78:5f:f6:2d:
a8:69:a5:c6:65:1c:92:89:52:c9:12:1a:46:d8:0e:09:e0:01:
97:5f:d5:d7:c0:c7:1a:a2:b8:b7:d1:05:56:c2:bd:08:da:d8:
5d:96:91:bd:86:62:a7:7a:d0:a6:82:ff:9c:31:bd:75:d7:0c:
dc:76:e4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:50:41 2026 by rpki-client