Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
File: tAifhEgwV6w2RkfIChsjyXa5MBY.mft (raw, json)
Hash identifier: 9LPjmx6x5BnrM2ptl4cQlP2ToM3h0PcjyGY52KdWWkw=
Subject key identifier: 5F:F6:FD:F0:D6:5E:45:DB:1E:7B:35:C4:C8:35:2A:62:2F:F7:B9:CB
Authority key identifier: B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
Certificate issuer: /CN=b4089f84483057ac364647c80a1b23c976b93016
Certificate serial: 019D2772953F5922681BD20768912CE8207B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:01:53 +0000
Manifest this update: Thu 26 Mar 2026 00:01:53 +0000
Manifest next update: Fri 27 Mar 2026 00:01:53 +0000
Files and hashes: 1: Enpd7RSzC3L6emd7pGDdiVehZtE.roa (hash: WWtbFjYeptz2lkJzGb3OE5GVhYZDAyY+VdSSKK6ahKw=)
2: tAifhEgwV6w2RkfIChsjyXa5MBY.crl (hash: opq/yjIPxkzsHKoOKQYh85gc4DC/vVaEYRgpDl+yy7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:95:3f:59:22:68:1b:d2:07:68:91:2c:e8:20:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4089f84483057ac364647c80a1b23c976b93016
Validity
Not Before: Mar 26 00:01:53 2026 GMT
Not After : Mar 27 00:01:53 2026 GMT
Subject: CN=5ff6fdf0d65e45db1e7b35c4c8352a622ff7b9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:6c:9a:82:29:72:f4:f6:9e:d9:34:9c:b0:
92:50:b0:79:4c:cb:cd:c2:20:7f:85:b4:38:de:4d:
92:4a:0f:ba:0a:ea:e9:59:0a:f7:12:c3:86:c7:ae:
4f:72:5f:d9:ac:5a:59:62:9b:61:b5:6f:b9:dd:93:
7d:77:67:86:b0:20:95:6d:ef:44:4e:55:b7:64:c0:
0d:2c:75:53:a2:7a:b2:3a:84:13:f1:8c:da:01:71:
9f:a1:b7:b8:f9:d0:77:60:64:9c:25:1d:ad:24:f8:
3f:66:4f:07:aa:95:0b:96:99:cb:99:ce:b3:1c:f1:
1e:75:1f:22:a5:a1:3d:43:21:20:24:d9:19:d0:47:
ae:a9:78:75:b8:f3:4b:78:db:98:4c:74:bc:7f:89:
b5:0d:1c:16:6f:5c:78:00:d9:64:48:f6:2b:fe:7d:
ee:a4:86:b0:ff:38:13:ce:a3:9b:2e:5e:9b:c1:58:
d8:42:06:af:fb:01:e7:fe:ae:7b:8b:71:c4:8c:38:
91:fd:43:43:ad:28:96:07:50:84:fe:2b:4b:fa:5a:
61:97:3e:45:81:f7:4f:eb:fc:84:79:a4:b1:b4:6d:
9c:40:e9:fa:81:2e:71:f4:cc:3b:01:8f:44:f7:9e:
2f:49:12:cd:2b:c6:6a:4f:ad:93:fc:ed:8f:23:b8:
26:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F6:FD:F0:D6:5E:45:DB:1E:7B:35:C4:C8:35:2A:62:2F:F7:B9:CB
X509v3 Authority Key Identifier:
keyid:B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b7:0b:fe:66:7e:4e:fd:93:29:d9:d9:0d:24:a8:0f:7f:a6:
cd:3d:c9:6d:65:e2:65:46:57:61:05:9d:a5:96:1b:f6:c9:f9:
1b:7d:18:39:f0:a4:8f:eb:03:0a:70:e6:7c:e3:4d:f5:a3:f9:
d8:d7:d1:1d:2e:cd:22:a1:55:c8:04:82:cc:44:ea:ea:40:68:
f6:c8:a1:7b:89:50:82:ab:9d:f8:20:c0:c9:78:25:a2:d7:0b:
b3:a8:a0:36:09:15:18:58:2f:e4:3d:94:fd:a4:ba:0e:fc:6c:
85:8e:0d:e5:d7:2c:42:b8:7c:be:f7:b8:0c:61:f1:cb:96:74:
59:b6:42:80:a6:1d:ef:08:93:e1:90:cd:1a:47:f3:9c:2d:82:
d5:f7:3e:8c:ef:80:08:0e:33:2b:98:f4:6f:e2:b6:e5:ec:2b:
59:a2:c0:d8:86:32:4f:e2:1c:fb:62:a6:4f:3b:f0:84:e5:97:
c4:93:d4:76:38:fb:35:6f:c6:e1:8c:d0:46:23:c2:a7:44:15:
d2:3b:3d:a3:43:2e:f3:f5:bb:3c:fc:7a:4b:df:36:b9:0d:3e:
85:f5:23:40:71:9e:b3:95:4e:e3:2d:59:9c:04:ea:7a:8e:14:
20:ba:ec:a3:04:e2:d4:2e:ed:b0:dc:c1:96:1b:57:4e:a4:4b:
1e:11:ae:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:42 2026 by rpki-client