Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
File: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft (raw, json)
Hash identifier: ZkdVgAacS2Z5YxH3//J5x46V8fkNAX8QKv7kHKNcFI0=
Subject key identifier: 34:70:BC:8B:87:14:DC:6B:A0:6F:1C:A0:B5:11:06:55:38:C3:4E:84
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Certificate issuer: /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial: 019D27DF7F179731E48D6E42C9ECADC02B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
Manifest number: 095E
Signing time: Thu 26 Mar 2026 02:00:51 +0000
Manifest this update: Thu 26 Mar 2026 02:00:51 +0000
Manifest next update: Fri 27 Mar 2026 02:00:51 +0000
Files and hashes: 1: pf4imHRU2e6GfZe8rQKhzIc5LBg.roa (hash: dsJgVjGxo4nm0IH9s2QS1ktYyvlCS7K764cL/mH8BNg=)
2: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl (hash: A8DZRgrIIltO1J1Xcgx2/33O3crnpMsEZYy4tJ+nntU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:7f:17:97:31:e4:8d:6e:42:c9:ec:ad:c0:2b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Validity
Not Before: Mar 26 02:00:51 2026 GMT
Not After : Mar 27 02:00:51 2026 GMT
Subject: CN=3470bc8b8714dc6ba06f1ca0b511065538c34e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9b:07:66:b9:a5:5c:f2:b8:b6:bd:41:c3:b5:
a8:06:de:80:32:10:78:2d:ea:9d:78:d7:fc:7e:50:
f6:d4:73:10:8d:5d:f0:e2:90:0f:0a:c0:66:9f:2c:
fe:fc:05:36:63:72:11:a9:6a:fe:21:b5:21:3f:bf:
c7:c9:a6:b4:f9:e1:40:7a:47:54:af:23:e5:80:14:
ed:4a:70:af:7f:bb:fa:99:77:c0:c9:53:a0:7d:73:
b1:61:14:18:a1:c0:eb:13:66:7b:57:2c:aa:80:de:
b1:a2:34:68:32:a4:42:23:6d:8a:af:e1:bb:d3:f1:
15:b3:fd:92:75:b0:3b:fd:4e:5d:ab:23:11:a1:94:
a0:11:87:e5:8b:29:f2:42:d2:d1:f3:ad:43:b8:92:
44:d4:a3:7c:5f:d5:a7:08:0d:02:9c:99:dc:64:ff:
83:c8:a9:84:b9:c8:0d:d3:9e:3a:ba:45:8c:9c:87:
2b:22:4d:45:f7:7c:36:61:97:1a:6d:ad:2b:2c:d3:
27:52:09:e0:bc:87:64:fe:f3:3d:bf:89:76:81:29:
79:3b:35:4b:16:4c:c3:9d:b8:1e:72:b7:95:3b:b6:
fb:11:82:fa:8b:0c:59:96:a8:88:04:e3:9e:44:4a:
da:aa:34:e4:df:53:ca:9f:b2:bd:4c:ae:81:5e:08:
be:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:70:BC:8B:87:14:DC:6B:A0:6F:1C:A0:B5:11:06:55:38:C3:4E:84
X509v3 Authority Key Identifier:
keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:06:a8:05:8a:5b:4d:70:d2:5a:0f:36:85:af:eb:15:c7:a5:
37:57:35:79:91:75:2c:9a:de:da:7b:9b:10:3a:d2:3d:f9:07:
b7:0f:71:1c:e0:46:72:f4:29:11:4f:38:6a:12:99:56:6e:2c:
94:c5:55:71:32:5e:5c:99:9a:2f:cc:77:92:3b:83:77:96:57:
61:07:c2:82:78:7a:d3:93:21:35:94:53:9d:b6:d3:ed:05:2e:
48:8f:6b:cb:16:31:2b:f2:b1:d8:3c:b3:db:07:f9:e6:8e:86:
20:8b:2a:2c:f3:d8:29:25:b7:e2:5f:a5:38:66:5d:43:89:40:
a5:7f:a4:00:1f:40:e0:31:d4:95:69:e2:8c:63:15:94:5d:30:
64:62:2d:86:03:2e:93:2e:36:42:41:a2:b7:0c:d7:cb:8d:23:
32:f2:49:b5:1f:b8:31:fa:e6:61:2d:a8:43:4e:d7:c5:d7:a5:
b3:8c:f7:40:21:c7:25:3f:9e:ab:fa:83:0e:49:c0:89:3b:34:
d6:84:54:2a:ec:03:e7:6f:69:02:c6:0c:ba:86:32:ca:72:04:
ff:94:57:7b:f5:f7:3f:6f:e0:83:2f:9d:52:77:7d:b2:f2:15:
fc:35:3c:de:95:e1:4f:f5:3c:d6:91:eb:e8:e9:00:71:7b:8e:
ae:6d:19:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:54 2026 by rpki-client