Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
File: tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft (raw, json)
Hash identifier: Au00CO+dnsusMKv1v1pnVFoPaPxKzGiPkYOd+jKa5MA=
Subject key identifier: 2D:2A:0D:AB:18:DC:5E:C9:0D:30:4A:36:FD:38:98:CD:5C:25:ED:E1
Authority key identifier: B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A
Certificate issuer: /CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a
Certificate serial: 019D2A7239F0D062EBFC533B198D9E9F3DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 14:00:22 +0000
Manifest this update: Thu 26 Mar 2026 14:00:22 +0000
Manifest next update: Fri 27 Mar 2026 14:00:22 +0000
Files and hashes: 1: 7S2yeHR4bFiFyxZbbPP_sYHQp2w.roa (hash: VNevD8nKtYDVh3U0iiaGr0TdZvD9DviTbw2gv5/lGDA=)
2: tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl (hash: WN+AORAr+8bMJpXKwIrKSAVtheD0crUCGpLClmWLOF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:39:f0:d0:62:eb:fc:53:3b:19:8d:9e:9f:3d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a
Validity
Not Before: Mar 26 14:00:22 2026 GMT
Not After : Mar 27 14:00:22 2026 GMT
Subject: CN=2d2a0dab18dc5ec90d304a36fd3898cd5c25ede1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7f:b5:ff:3c:a7:ab:26:3e:f3:7d:26:c0:1c:
6f:6c:db:10:ad:6e:b5:4e:d7:b0:ac:fc:de:31:80:
9a:4e:b3:ad:33:77:b5:ab:3e:f2:f9:77:40:96:68:
1e:8f:c2:33:56:61:fd:2b:ca:9a:41:13:2b:05:08:
f9:50:a5:88:b5:55:b1:27:a3:bd:1f:78:1e:c5:99:
eb:02:13:3c:ab:ed:ce:fc:95:01:00:65:f9:b0:d0:
7d:ae:86:ba:b9:8f:44:27:4b:b3:68:c6:25:a2:77:
32:e4:4a:b4:18:60:94:9e:05:e8:f7:0a:6a:e3:ac:
7e:6c:e5:5b:2c:fa:37:5d:53:f0:8d:67:dc:38:69:
d8:76:85:15:7a:c6:4c:1b:6b:7d:d5:f5:db:70:29:
b3:a6:58:8b:7d:c1:3f:a2:25:69:1b:d4:21:66:a3:
83:63:8a:b8:3b:7a:ec:aa:c5:14:b5:b8:47:55:5b:
0e:7e:67:2a:39:c1:34:ff:09:0d:3c:09:c4:30:ed:
18:22:50:92:c5:fa:2f:44:ac:38:ed:92:48:fd:0f:
1a:db:d2:5c:69:37:66:fc:d7:d2:60:cd:18:52:39:
4e:34:fd:20:da:73:29:93:e1:d8:1a:7f:00:d2:68:
f1:a0:4d:8c:56:d5:37:8a:b3:d5:f4:7e:93:a7:15:
9b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2A:0D:AB:18:DC:5E:C9:0D:30:4A:36:FD:38:98:CD:5C:25:ED:E1
X509v3 Authority Key Identifier:
keyid:B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bf:62:92:1a:4d:41:5e:04:59:f7:ac:55:dc:77:b2:c7:19:
2a:71:65:54:52:45:34:f3:b6:df:03:97:a5:45:20:70:96:a2:
58:80:a7:bd:a7:8c:0f:9b:71:e5:8a:1f:dc:8b:19:b8:c7:41:
0c:7b:3b:5a:75:13:05:61:48:e5:7d:ac:da:53:4a:17:7c:39:
83:1d:b7:cd:76:03:ab:86:07:eb:1a:f6:b8:cb:d7:08:a5:22:
64:22:99:ff:48:d8:19:2b:43:31:93:9f:49:fe:12:aa:fd:2b:
bf:2d:65:e4:33:97:c8:a0:0a:b7:80:d0:80:56:bc:b0:97:b9:
15:80:13:63:dc:dd:26:99:ab:61:33:48:41:d0:1d:62:d6:29:
e2:77:52:1b:b4:f7:34:be:94:be:4d:f6:e9:dc:e2:23:eb:a1:
62:30:03:80:24:4e:ee:4d:9f:96:b2:39:86:31:03:30:71:49:
93:b3:03:be:d5:f6:14:ec:6c:ec:e7:79:ab:4a:ee:dc:53:98:
08:cc:89:ed:21:6b:0e:2e:e0:b6:0a:f8:79:a1:46:34:f4:29:
c0:93:86:1a:98:e7:17:47:89:ab:15:a5:77:2c:79:35:0b:59:
79:36:5e:8b:6c:cf:91:52:c5:8c:21:0a:41:17:9d:04:15:04:
74:7a:36:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:29 2026 by rpki-client