Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
File: t6hswzTG4Oq4PyUr2D7ulWklykA.mft (raw, json)
Hash identifier: ebPJh98Q3mdZvM0xFIXbCCiYjLuJGnZpcRBQ1V7VnqM=
Subject key identifier: 1B:90:34:F0:F5:8D:12:78:FA:E6:14:E3:03:4C:0E:F0:86:CB:2D:52
Authority key identifier: B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
Certificate issuer: /CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Certificate serial: 019D27A8E1368971FAD2B42854824AA8DABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 01:01:12 +0000
Manifest this update: Thu 26 Mar 2026 01:01:12 +0000
Manifest next update: Fri 27 Mar 2026 01:01:12 +0000
Files and hashes: 1: X3SG_E7dKLkySN2NXBNircknUi0.roa (hash: H3iDQ4ve/GqzLagGcVLrgcEFBGMPC2p/bJLU2T5Fnqk=)
2: t6hswzTG4Oq4PyUr2D7ulWklykA.crl (hash: VI9Gq+M+sPGi7YsmTC5p8//FB70Win75ILsyNXs/O9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e1:36:89:71:fa:d2:b4:28:54:82:4a:a8:da:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Validity
Not Before: Mar 26 01:01:12 2026 GMT
Not After : Mar 27 01:01:12 2026 GMT
Subject: CN=1b9034f0f58d1278fae614e3034c0ef086cb2d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:15:ac:28:62:19:09:c2:e5:52:f5:f3:15:f6:
e3:b4:b9:c8:af:56:6e:aa:e8:a9:23:33:ec:ac:c7:
2a:fd:e7:91:ba:8f:f9:90:df:23:c7:76:89:dc:83:
f5:61:e8:c7:0d:f5:9c:5c:b4:f4:74:da:1b:6a:58:
b5:fc:af:03:9f:bd:db:b9:b6:e7:d3:1d:5b:d2:74:
87:9a:73:aa:f7:f7:97:50:3d:88:e4:18:4f:1e:88:
ff:1e:69:27:5f:41:ee:2c:25:b1:00:4a:5a:30:65:
8a:9c:ef:9b:84:a1:14:5d:8c:93:25:c5:26:64:d4:
61:5e:ae:04:1b:bb:46:79:45:7d:5e:7f:0c:54:a5:
b1:e0:34:fb:d6:7d:8b:5a:c5:4e:c3:c7:08:bb:d4:
fc:7d:ea:85:9c:8c:ed:3d:09:b9:f7:d5:23:83:90:
44:ef:5d:8e:26:22:e5:6f:da:5d:37:45:eb:b8:14:
97:f2:15:a3:c4:74:9d:0a:a4:8f:ec:08:60:7f:98:
74:dc:b4:5b:a7:06:d8:d4:47:70:cb:35:44:fd:92:
92:aa:39:46:37:6b:26:e5:5d:71:24:da:85:4a:e6:
d7:80:fb:35:c3:a6:2d:f2:3e:fe:8a:0b:2d:5f:c6:
b5:2d:1a:b5:36:be:37:e8:e3:24:1b:06:07:90:0b:
54:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:90:34:F0:F5:8D:12:78:FA:E6:14:E3:03:4C:0E:F0:86:CB:2D:52
X509v3 Authority Key Identifier:
keyid:B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:01:0c:6c:df:37:f5:4d:8d:5d:cc:09:e0:4e:a0:15:0d:aa:
15:a7:78:b2:16:a3:32:37:4e:43:4f:3a:34:41:c2:5c:d1:5e:
12:b2:20:cd:bd:3b:8e:48:15:97:4c:2e:bd:4a:b4:67:b3:70:
c8:0a:48:28:75:32:16:2c:46:21:12:96:97:b6:ba:5d:b3:49:
3d:53:e2:64:a0:7f:ca:2a:e3:c4:0d:f1:8c:d0:49:45:a7:f1:
95:62:cb:af:2a:4d:ba:ce:35:19:91:5a:51:14:bb:cd:0a:17:
7c:c0:eb:2c:e3:c4:79:3e:cc:77:ba:dd:a1:cd:28:ad:f6:a1:
f7:56:50:d2:f8:2d:d1:a6:ed:6d:ff:1f:f3:2b:ec:c4:ad:25:
7a:b1:71:d4:25:e0:07:9a:fb:ce:52:3c:03:37:4d:d0:a9:87:
cc:bc:2f:27:f3:f5:41:82:b2:75:9c:be:13:b4:3c:7a:ff:db:
2d:09:55:3c:47:c3:50:3d:52:2e:de:ce:97:58:c0:c8:86:0d:
72:0b:c0:4a:88:c8:d4:16:6a:48:87:12:90:31:0d:de:87:e5:
a8:e2:cf:5b:9c:81:38:42:14:73:5a:ca:ab:bd:3f:29:b2:5c:
08:e1:c3:6d:85:db:fe:28:34:8a:84:90:55:9d:b1:cd:22:5c:
f0:b1:1c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:17 2026 by rpki-client