Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
File: tCQBfG4cj_1jly4CRJCYR33fF98.mft (raw, json)
Hash identifier: GaL9BVQdAzCxyzBx9y70xyt1LUq3K3of/VDkiU2UG7Y=
Subject key identifier: 4D:7E:2D:7D:D9:2E:00:3D:23:56:EF:D6:EA:7D:5E:6D:6A:54:D6:DD
Authority key identifier: B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
Certificate issuer: /CN=b424017c6e1c8ffd63972e02449098477ddf17df
Certificate serial: 019D254C400502D981B2F9244F1104E0ACD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
Manifest number: 50
Signing time: Wed 25 Mar 2026 14:00:47 +0000
Manifest this update: Wed 25 Mar 2026 14:00:47 +0000
Manifest next update: Thu 26 Mar 2026 14:00:47 +0000
Files and hashes: 1: Z9tAGQF9StCthIO0Pjcyl0N2xM4.roa (hash: 6AWanwgFbNvMqkMl3YCOopQDUI07IMGf93/6aV4ujtg=)
2: h2S5SOYfIdtYgW2lzny0MQ8S930.asa (hash: rCu8Reo7yVY7Fv0iiMibroZtuw9DHcD5SnkWO03YCtk=)
3: tCQBfG4cj_1jly4CRJCYR33fF98.crl (hash: XOxp/4hsxsm5rWm3NLqPFe1LW3R18RmJEj7lt/cUpVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:40:05:02:d9:81:b2:f9:24:4f:11:04:e0:ac:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b424017c6e1c8ffd63972e02449098477ddf17df
Validity
Not Before: Mar 25 14:00:47 2026 GMT
Not After : Mar 26 14:00:47 2026 GMT
Subject: CN=4d7e2d7dd92e003d2356efd6ea7d5e6d6a54d6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:59:3f:7e:fe:4e:af:0c:38:5d:15:22:5c:
e7:64:5d:9f:a3:c7:cd:43:1b:ac:30:7c:22:50:60:
eb:3d:4d:fb:4f:eb:57:78:b1:30:c5:3d:96:5a:1d:
09:44:bd:a9:4f:09:39:99:53:e1:fd:68:af:d0:42:
2d:fa:b6:87:20:ad:75:ed:4f:f4:58:a6:56:a3:3f:
90:b4:31:55:b9:7b:79:92:11:e4:8e:05:0c:bc:60:
37:e9:69:63:7c:ca:30:69:93:38:2e:4d:1b:bd:2a:
33:ac:0a:5e:b0:58:af:1c:84:60:70:e2:00:bb:70:
e6:8c:8a:cb:62:b4:b3:1a:61:81:b2:46:e9:65:07:
92:33:b0:7a:a8:c1:0e:74:cb:87:66:5d:64:f7:e9:
0c:4c:82:33:80:21:c2:0b:1d:fa:e1:3d:9c:f5:0a:
9b:67:a9:f8:6e:45:07:a4:8c:ca:54:b0:b4:f7:2c:
b4:9c:63:08:40:5b:42:e7:39:cb:4c:c3:66:fd:d5:
e7:e5:69:c5:c7:ac:7f:a2:fb:da:d8:4f:ae:5a:d0:
3d:23:31:e3:24:8a:a2:b7:83:ef:33:85:5d:3e:bf:
5e:66:a4:23:4b:86:3f:d8:a6:92:a1:69:8c:6e:bc:
d7:fe:2b:dd:01:90:88:6b:90:87:c8:48:67:f8:b6:
c2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7E:2D:7D:D9:2E:00:3D:23:56:EF:D6:EA:7D:5E:6D:6A:54:D6:DD
X509v3 Authority Key Identifier:
keyid:B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bb:39:dc:7c:a4:77:ae:d4:fb:1b:dc:7c:c0:ab:80:e4:e9:
73:f2:ef:96:bf:73:52:6d:a4:be:08:96:00:aa:c8:d3:9b:ca:
cf:7d:bf:f2:29:41:49:89:0e:66:cf:98:b0:58:44:ce:c1:67:
7a:bb:8a:f8:82:6e:e7:86:0e:5e:cf:f7:32:9e:b5:53:69:d7:
a9:e4:f2:60:80:c4:17:fd:b2:d1:37:f9:4f:2e:64:3d:dd:11:
f2:4c:eb:9f:14:98:03:da:40:e3:30:ab:70:ce:48:b0:21:76:
2d:32:a2:88:9d:e1:c5:70:68:41:f0:72:2d:3e:f3:68:87:f2:
49:cc:54:45:90:ea:24:8c:75:2c:9f:6d:ff:bb:c4:a8:bb:94:
92:26:9e:69:5d:c5:79:11:04:f2:de:26:a5:3c:41:2b:9f:46:
d3:d8:ff:82:72:2d:c3:e3:19:c5:1d:9f:a4:9e:7f:e7:fc:c8:
96:63:32:10:84:1a:e1:dc:1a:d1:58:fe:2c:ad:b1:b1:44:46:
dd:f1:61:5b:f5:1f:c6:66:36:01:69:c1:a4:3a:e3:8d:41:ec:
39:14:19:f8:bb:b0:cd:0b:2e:fb:a8:9d:d9:4f:60:01:e3:58:
cc:e8:f8:67:31:d3:c1:6c:a3:46:33:64:b0:6a:57:41:41:16:
39:0d:b7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:53:20 2026 by rpki-client