Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
File: t0zj88XlovnYuKTHeoNh-KIW860.mft (raw, json)
Hash identifier: Qn+gAvjnYFfyq7YI2FLSNKJ3DG4jDUzzKCyyjTCWOZ8=
Subject key identifier: 89:51:53:2D:03:95:6D:CB:44:62:BB:64:93:A5:CA:CB:DC:19:C8:63
Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
Certificate issuer: /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Certificate serial: 019D27724B6B4E37D2D90EAB1B237B04F62B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
Manifest number: 13A2
Signing time: Thu 26 Mar 2026 00:01:34 +0000
Manifest this update: Thu 26 Mar 2026 00:01:34 +0000
Manifest next update: Fri 27 Mar 2026 00:01:34 +0000
Files and hashes: 1: 7yXVbkDIped5AlVJWBLhNwB93qU.roa (hash: U+X2A4hl4OztYccmnndX5mgP9l1pKYkV+aIE4TVtE9o=)
2: Lac9mI8_0GODDuYUWUFmqBSt9mc.roa (hash: CCm67OvIIp58ZZddyH8lbNoIHH7qksW59/3/CScmsJ8=)
3: g4mflD0Y4dFeWIYXrHeIdFF1Tzk.roa (hash: LWoE8PLWl9I6/87QZF5e3VTAa9OFMyf8LK0mAIwQhYU=)
4: t0zj88XlovnYuKTHeoNh-KIW860.crl (hash: jLOJqnrCsRk79Ed/Fc208vwRayC4/Em4Vi6hY0x94rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:4b:6b:4e:37:d2:d9:0e:ab:1b:23:7b:04:f6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Validity
Not Before: Mar 26 00:01:34 2026 GMT
Not After : Mar 27 00:01:34 2026 GMT
Subject: CN=8951532d03956dcb4462bb6493a5cacbdc19c863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:da:8f:8d:da:5e:ec:04:6d:45:d2:2b:10:05:
3e:24:44:a5:ea:49:fa:55:d3:11:51:a4:c0:48:70:
7d:d5:f1:46:03:c4:74:8c:50:13:a9:0a:50:be:95:
92:2a:89:d7:42:a0:10:74:53:da:78:d7:ed:08:d3:
c7:27:9d:2a:a2:52:f3:25:7f:76:df:30:72:c8:63:
a0:72:a3:6e:de:23:41:56:04:60:8d:23:5e:d0:33:
84:ca:0f:5e:76:ea:57:ae:0d:5a:b3:a2:42:1a:4f:
ea:ad:34:d7:2a:a7:85:43:9c:c3:6a:ca:07:eb:e8:
7a:e0:8a:df:4c:46:51:b2:1f:f9:17:4a:f0:77:b8:
c1:83:e5:60:ec:c5:f8:a3:2b:29:18:c6:72:d2:2a:
ee:68:6e:7c:22:be:d7:7b:cd:53:8c:b2:35:ba:4b:
26:db:d1:10:8f:df:b6:b9:69:e8:52:41:fe:0e:a8:
0c:7d:7f:a3:54:00:f8:6a:40:0b:f9:98:9e:dd:ec:
78:37:c5:46:1f:ae:a3:0c:f9:9e:29:88:bd:14:19:
62:01:6d:0d:0f:3c:fb:86:4a:8e:c4:ca:40:e8:01:
8d:07:31:45:f7:96:fd:fb:e1:6e:60:b4:20:10:da:
a4:ad:bf:2e:52:41:0b:e6:dd:24:fa:38:a1:f6:84:
4c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:51:53:2D:03:95:6D:CB:44:62:BB:64:93:A5:CA:CB:DC:19:C8:63
X509v3 Authority Key Identifier:
keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b6:f2:a6:b8:38:43:8e:c3:93:5c:18:e9:c2:49:c0:74:55:
0b:ce:51:58:6b:d8:bc:5c:49:d3:fe:9b:c9:a1:ff:92:71:b6:
58:6e:af:c6:88:cb:08:0d:64:95:d9:f7:1b:f5:09:a2:ef:06:
54:a4:1c:d7:dd:18:8a:95:37:0e:53:da:b0:c3:71:0c:a2:35:
e1:36:6c:54:e4:07:83:03:4e:f6:42:96:43:d1:55:62:84:dc:
dd:56:38:6c:de:30:6f:52:40:ff:3f:04:de:22:ca:4e:75:8f:
be:43:4e:17:b1:56:d1:00:f7:bf:f0:b6:75:e9:20:4e:00:57:
98:ad:f9:71:1c:14:aa:7c:b4:d0:55:0e:d7:3a:60:90:e7:30:
b2:8f:ca:cf:70:2a:e9:0a:4d:8b:2a:29:95:33:6e:48:8a:53:
e6:67:75:99:14:f1:a2:33:b2:9f:ee:8b:5c:8b:13:43:9d:4d:
b3:48:68:b2:61:4b:d5:56:31:8b:8d:7c:13:89:c1:66:48:75:
06:47:6f:75:6a:da:31:e6:75:27:3b:dc:e4:7a:49:62:0b:e8:
01:36:b8:27:58:36:a9:e8:b9:fa:f9:02:3c:03:c9:37:ad:0a:
76:1a:c6:63:8f:21:b5:a3:6c:96:20:78:47:91:f9:48:bd:55:
a6:1f:92:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:21 2026 by rpki-client