Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
File: Ts9hevNfNyTn2oYOv75OwTiuGAA.mft (raw, json)
Hash identifier: EU3DF8OrEFLYfYJpMNxDBhy368idNXsLrohzLa+3TKc=
Subject key identifier: CA:83:70:F4:79:0B:5B:24:07:8A:13:BC:15:90:65:6C:91:AA:45:F5
Authority key identifier: 4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
Certificate issuer: /CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Certificate serial: 019D2A3C4AAE2B26378CE9922CDD410332F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
Manifest number: 15CD
Signing time: Thu 26 Mar 2026 13:01:27 +0000
Manifest this update: Thu 26 Mar 2026 13:01:27 +0000
Manifest next update: Fri 27 Mar 2026 13:01:27 +0000
Files and hashes: 1: Ts9hevNfNyTn2oYOv75OwTiuGAA.crl (hash: PJCZKCBMBamexr70LY6ZvFyS7E+lHDbEzw3QG3jcHZQ=)
2: lRIjNj0BHQE6hiLGxFavKUdyoeg.roa (hash: PocADE6/FL6eoSgXxu0JdSE+M73YHwsz3KQP93yGopU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:4a:ae:2b:26:37:8c:e9:92:2c:dd:41:03:32:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Validity
Not Before: Mar 26 13:01:27 2026 GMT
Not After : Mar 27 13:01:27 2026 GMT
Subject: CN=ca8370f4790b5b24078a13bc1590656c91aa45f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8e:5e:4d:1e:46:f5:28:8d:d1:4e:61:0e:4f:
8a:df:3b:29:fa:48:94:15:a3:20:f1:47:34:e1:57:
80:a3:4d:fe:fa:eb:4f:28:2c:84:2f:72:b8:ad:6e:
69:2d:af:e8:b4:77:5b:69:db:dd:db:0e:41:5b:2f:
02:a8:61:be:9c:92:44:ba:43:18:69:38:2e:d0:32:
7d:28:82:a8:3f:b8:bd:00:b0:45:29:97:34:de:74:
54:e6:e9:d8:fd:2d:d2:d1:cb:f0:28:55:f6:ea:68:
fe:f1:ce:6a:1d:c8:af:1c:aa:0a:a3:f6:61:55:81:
a7:d7:7a:27:9b:87:f4:03:f7:b3:79:fd:b7:25:2a:
51:e0:6a:73:0c:20:1d:a4:4c:7e:72:c8:1b:a4:75:
17:7b:b9:18:e7:02:07:a7:48:a6:ab:8f:f7:76:21:
c3:1a:c4:52:87:d3:44:ab:36:25:b0:e4:d6:c9:e5:
6c:fe:a5:a9:ed:eb:38:e4:8b:b8:da:c9:b0:05:39:
9d:cf:dc:5f:83:66:fd:d0:56:b5:fe:99:d4:c5:0a:
75:c0:ad:96:29:aa:45:44:e4:63:9f:03:13:2c:40:
12:ef:74:84:b8:82:4c:c4:f7:07:69:80:87:a4:3d:
7d:ee:1b:c3:7f:8e:94:ad:00:69:7a:86:30:67:20:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:83:70:F4:79:0B:5B:24:07:8A:13:BC:15:90:65:6C:91:AA:45:F5
X509v3 Authority Key Identifier:
keyid:4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:af:6e:67:49:8e:3f:f1:99:18:cc:6d:cb:76:35:6b:9c:57:
86:ee:4f:63:63:10:97:7e:e2:96:fe:d9:31:ce:60:af:7a:f9:
0f:ad:54:0e:40:b5:b1:e3:67:20:8c:60:41:2e:33:58:58:11:
8f:e9:06:4e:eb:d9:5d:3e:7c:55:c3:d9:10:54:9c:80:8d:d3:
cb:ab:38:5d:ae:80:ed:8a:83:4c:9a:08:8b:2a:a7:2d:7a:32:
fe:69:59:fd:53:99:31:0a:a5:45:66:79:d1:f5:1b:17:44:c3:
66:01:7d:54:5e:37:3d:b8:43:72:6f:57:6c:b9:98:08:72:c7:
7e:6f:54:8c:05:27:47:8e:5d:ee:4f:66:61:fc:a6:f7:9f:29:
08:29:7e:b9:53:9a:01:9f:6d:0a:c2:63:7a:d8:5e:d8:23:86:
ef:c7:de:07:11:c9:0f:7c:3b:10:ca:83:86:c2:9c:ae:7d:65:
b5:ea:06:a8:72:4e:17:43:76:32:8c:86:bf:bc:83:b0:d3:2f:
ec:f9:22:0b:af:63:d3:ad:ce:e2:f6:b0:6c:47:14:ed:af:ae:
88:73:10:45:a9:67:16:12:fd:0f:e2:c2:ac:d8:ab:ba:a9:75:
ab:45:b3:80:d1:b8:20:f6:ee:89:cb:17:15:87:77:b3:0e:4c:
32:dd:b5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:09:56 2026 by rpki-client