Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft
File: tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft (raw, json)
Hash identifier: 5wMa+CY22ad6Yxw+DFXaAmy7L2vQQ7Tf1FKfYfploEM=
Subject key identifier: 02:46:B8:4D:84:74:DC:3B:49:00:BB:FC:3A:8A:F8:0B:B3:EA:B2:64
Authority key identifier: B4:DF:C0:31:71:AD:32:54:38:0A:E5:14:43:A3:14:45:51:E3:4A:FA
Certificate issuer: /CN=b4dfc03171ad3254380ae51443a3144551e34afa
Certificate serial: 019D284D9559396FA1885943432D65242CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft
Manifest number: 29
Signing time: Thu 26 Mar 2026 04:01:06 +0000
Manifest this update: Thu 26 Mar 2026 04:01:06 +0000
Manifest next update: Fri 27 Mar 2026 04:01:06 +0000
Files and hashes: 1: jEu7pwg2-E1mqN2DpjSiLFBgzdU.roa (hash: TORAgDcuiUrJI3uCzvwnsqjEqpo7+K175vdEdYU+bdc=)
2: tN_AMXGtMlQ4CuUUQ6MURVHjSvo.crl (hash: yuFcUNNKyE0GTR1LcdvC2ooDdiTyk17k910Scnb68a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:95:59:39:6f:a1:88:59:43:43:2d:65:24:2c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4dfc03171ad3254380ae51443a3144551e34afa
Validity
Not Before: Mar 26 04:01:06 2026 GMT
Not After : Mar 27 04:01:06 2026 GMT
Subject: CN=0246b84d8474dc3b4900bbfc3a8af80bb3eab264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:73:a0:5d:55:46:14:8d:51:99:2e:c0:40:90:
0b:9d:e8:12:f6:bd:b5:35:75:db:f4:df:8c:db:cf:
93:d6:b6:e1:1d:b4:30:a0:02:f1:3c:be:c8:c4:2e:
f7:89:8e:b3:ab:b6:ef:79:d2:1b:60:e5:41:2b:58:
b6:c5:bc:ac:0e:24:63:d2:d1:fe:47:8c:e3:45:db:
d3:91:2d:e3:d9:98:11:42:7c:18:5b:1a:12:7d:9d:
96:01:65:f9:b9:37:67:f6:21:2d:c7:a3:2e:eb:17:
de:57:8e:bf:eb:65:54:8b:9b:fa:3a:9d:2c:87:62:
d9:0d:24:13:82:7b:36:50:ff:c1:17:30:a6:2e:5d:
b9:1f:0c:05:29:21:26:d1:44:3f:87:d0:fd:17:8a:
ab:0d:9e:85:d7:0f:a2:65:9c:04:e3:37:19:2a:eb:
0d:fd:85:98:bc:99:4a:fc:57:04:9a:6e:d0:36:9b:
2d:33:d8:1f:a5:30:d8:cc:12:d9:79:78:74:16:58:
cb:78:55:84:85:b5:67:a3:7d:19:f4:e8:9f:49:6f:
0d:a9:6a:cd:3e:d5:a2:32:08:7d:ee:05:c6:37:1e:
65:6a:62:5f:e6:2a:92:be:c3:55:94:2b:78:bc:31:
79:c8:69:03:c1:ac:46:11:45:f3:ab:f1:fa:ce:66:
95:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:46:B8:4D:84:74:DC:3B:49:00:BB:FC:3A:8A:F8:0B:B3:EA:B2:64
X509v3 Authority Key Identifier:
keyid:B4:DF:C0:31:71:AD:32:54:38:0A:E5:14:43:A3:14:45:51:E3:4A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:84:3c:17:bf:11:34:bb:89:c4:45:15:7a:cb:b5:b8:80:7d:
07:78:16:43:26:3c:42:94:86:35:c1:3b:3e:09:d3:27:65:40:
5a:3d:40:a7:17:c7:a2:53:f6:79:6b:f1:b6:31:bd:55:37:84:
01:e4:06:71:ae:cd:ea:a6:11:0a:e6:11:b1:83:1c:9e:c3:de:
de:5e:88:bb:31:86:e5:d3:e7:32:b0:69:f7:9e:b2:28:4c:ec:
97:5d:92:f2:0d:68:a2:b7:68:17:37:ef:11:df:a6:59:26:e7:
66:53:9b:ac:0e:26:c7:88:ac:72:f0:f3:58:e4:74:08:4e:25:
0d:f8:17:38:22:27:59:ae:71:c4:83:1f:a0:57:b1:c8:0c:46:
2f:75:44:c3:85:73:e1:fa:04:58:e0:2c:3f:d7:a3:7b:39:1f:
25:f8:11:df:80:42:55:eb:11:07:d5:d8:0e:fe:fa:7a:21:87:
dc:a7:26:04:b5:50:b3:3c:0b:6f:cb:2d:d1:58:49:a4:11:d8:
89:40:84:31:27:d5:02:c1:cf:72:81:38:d4:e1:e4:17:1b:99:
6f:44:e5:f5:c3:ba:17:cd:37:6c:30:8c:51:49:50:32:5a:6b:
1c:75:99:3c:f8:fb:f1:fd:11:59:dc:95:9a:9a:12:f4:35:ae:
55:71:5d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:40:17 2026 by rpki-client