Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier: 1wm+e5Q4RfmOSWhu6sLurNelcA4mpHDQmv2Ps/+G3Lo=
Subject key identifier: 0E:E7:17:B6:58:4F:84:85:3D:48:86:8B:4C:3C:2A:57:48:55:BD:BA
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 019D273AF1DD254AE1470C12ECAEC3C7AC6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 23:01:07 +0000
Manifest this update: Wed 25 Mar 2026 23:01:07 +0000
Manifest next update: Thu 26 Mar 2026 23:01:07 +0000
Files and hashes: 1: b7WIoLNUFyReyBs5srL2P-7kWBY.roa (hash: KaUmjHHJdwqwRidv+DylDRGHxrEDsHhrz5N8o1v6ikI=)
2: qA1FSgo8W2WfbgMfxgehUTGINhY.roa (hash: QlYJVn46F259ZKkX99iXU3ryDNDtJ4SF3Ih4Ss1i1sM=)
3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: keLU2bOa1x4HW4qtuX8RYTSz6RuFW/bQFooFxDlXZPg=)
4: w1rSq9HiUPdlBfnJQU20TUnkDtc.roa (hash: e/N9+4KOJLWpyk5b2EmLTnk1UrTHENrYm4rgBBrmxPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:f1:dd:25:4a:e1:47:0c:12:ec:ae:c3:c7:ac:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Mar 25 23:01:07 2026 GMT
Not After : Mar 26 23:01:07 2026 GMT
Subject: CN=0ee717b6584f84853d48868b4c3c2a574855bdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b8:9a:f1:6b:cc:68:ce:af:9f:07:34:3a:de:
79:0b:fb:28:e7:a9:2d:1a:ac:0a:a4:53:35:21:c4:
58:c2:fe:ca:e6:43:97:44:ac:54:b7:6d:f2:d8:c0:
df:25:f3:19:28:bc:ed:bd:0b:0d:28:8d:18:b4:bd:
1d:e7:d8:87:5e:f4:74:b7:8c:7e:24:f3:d9:e2:96:
f0:96:c2:3e:fd:1f:94:12:c6:bd:4c:22:2e:02:65:
17:e2:a9:16:32:7b:bc:dc:24:a1:7a:b2:e8:fe:0a:
f0:27:c0:70:39:85:77:74:9d:9d:f2:88:f1:54:a6:
75:db:91:d7:f9:2b:02:57:60:e7:2e:2d:20:ce:b7:
eb:a9:80:4d:1d:d7:92:2d:25:94:af:7c:4d:55:f0:
75:3e:3c:a5:bb:a1:64:af:74:c7:98:d4:29:95:4b:
3e:94:11:fe:99:c3:93:a9:28:92:d6:63:1a:e0:07:
c8:28:36:0e:f3:51:84:2c:0e:62:aa:98:6b:62:e5:
0f:e4:8e:34:ab:79:d0:db:30:3d:b6:c9:d9:61:96:
3f:29:fd:e2:a3:9c:46:9d:d5:59:af:2c:10:42:26:
3c:0f:63:a0:72:8d:51:9a:45:dc:20:33:54:b4:80:
3d:ef:6a:b9:0e:a2:1a:ce:21:2c:17:ba:71:86:6f:
9e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E7:17:B6:58:4F:84:85:3D:48:86:8B:4C:3C:2A:57:48:55:BD:BA
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:03:cb:dc:3c:8e:18:e2:76:3e:98:1e:03:4a:6b:69:9f:1f:
c8:4d:f9:72:3c:c9:91:b6:e7:f6:92:5f:fe:ce:60:93:f2:c8:
17:a3:4a:87:4f:c4:d6:69:99:d8:79:4f:30:78:c5:8a:2b:8c:
5c:a9:43:1e:58:ce:db:81:70:98:d8:7b:6a:10:31:e1:79:74:
b4:a0:ea:48:89:c0:a3:9f:a1:10:fc:2e:94:a9:71:f8:80:16:
b7:6c:2e:47:8a:60:b1:6b:f4:70:87:21:e0:01:f3:be:88:b2:
df:9e:f5:25:31:b3:f9:2c:f0:7d:46:26:57:4b:0b:47:a0:aa:
a2:d6:58:6b:ea:f5:a1:3d:e0:a5:e7:7b:79:cc:78:59:74:21:
27:6e:6a:4e:6c:96:f2:9d:04:6b:00:7c:49:45:c6:28:a3:30:
ae:f0:ec:03:1c:d1:42:56:92:37:8c:cb:20:ee:54:39:3f:f2:
d8:19:43:13:ae:c0:c0:8e:9b:50:f8:2e:57:e7:9b:d6:0a:2e:
36:f8:38:55:35:62:e9:be:81:2f:e0:d0:dc:27:d6:7f:09:3a:
59:63:86:d3:57:d8:1e:a8:dc:c7:70:2e:25:15:05:f9:0f:56:
f8:c4:5b:34:e2:b5:a0:2a:4d:04:75:f9:6f:18:8e:e1:f0:13:
b5:22:27:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:37 2026 by rpki-client