Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
File: tiuWfFIUXmeksyBrHKSShTyg34Q.mft (raw, json)
Hash identifier: 8jOXkgaQoNrmcRAdPD695ph647XwRsYt5E2nlIBGzOg=
Subject key identifier: FC:49:46:E2:65:97:41:8A:D4:AF:6B:93:C7:6E:74:2F:B8:6A:53:ED
Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Certificate serial: 019D25BA27FBAC59030D647951CC825EAA08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 16:00:49 +0000
Manifest this update: Wed 25 Mar 2026 16:00:49 +0000
Manifest next update: Thu 26 Mar 2026 16:00:49 +0000
Files and hashes: 1: A6OsoYIYGh2Z_D1_x4aYKOVS478.roa (hash: R4DsSDCiEh+974EKIZS8RQ1BClrbE9cHjb1aIFSzJGw=)
2: _dnntVUjWH4EUr4UpgbEErzH-do.asa (hash: vI/4RAPzURUhd78xQi/Y6eBRsyDpScnrAtCWF0EcTGY=)
3: tiuWfFIUXmeksyBrHKSShTyg34Q.crl (hash: Q/hrI1AFKmJPMnQif14gixatoVjjWumCi91qfVobzh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:27:fb:ac:59:03:0d:64:79:51:cc:82:5e:aa:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Validity
Not Before: Mar 25 16:00:49 2026 GMT
Not After : Mar 26 16:00:49 2026 GMT
Subject: CN=fc4946e26597418ad4af6b93c76e742fb86a53ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e0:02:46:d8:ee:3d:ec:bc:97:9d:15:8c:02:
d4:66:95:c4:33:24:98:50:74:33:91:0b:61:32:5a:
96:df:14:3e:db:1f:b8:cd:31:2b:22:38:0f:71:06:
b7:be:ed:28:d1:d9:00:99:6d:b8:aa:7d:d7:42:a3:
60:80:2d:73:99:3e:8e:fd:7f:df:36:0d:be:ce:43:
6d:bd:87:0e:81:9e:9c:38:52:8c:c0:d5:cd:6c:71:
8d:bf:c7:fa:72:85:2e:0f:bb:1c:00:ec:70:61:de:
e4:d7:f4:94:26:e0:84:1f:73:15:c4:1c:09:7f:f0:
b2:fa:40:9f:dc:cc:f5:22:33:d8:42:a3:6d:1b:93:
e4:0b:1f:bd:3d:d7:ad:c8:fb:cf:fe:d0:e4:50:cb:
1b:71:58:a5:94:c5:e3:62:93:ef:90:e9:e2:83:f4:
5c:f0:b1:59:d6:df:02:4d:36:45:c8:83:a9:c4:48:
71:bc:e9:c3:a7:cf:1b:f5:a2:d2:a5:50:0e:c7:3f:
09:77:88:a8:2a:da:87:ad:62:67:ff:74:7a:bd:58:
bd:5f:eb:0e:84:cd:20:34:03:a5:2f:a2:93:6b:4b:
d2:cd:de:e9:9e:47:d8:db:e6:47:1d:59:73:8a:e8:
b9:27:e3:19:87:6a:28:1c:f2:b0:87:d1:76:22:e4:
04:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:49:46:E2:65:97:41:8A:D4:AF:6B:93:C7:6E:74:2F:B8:6A:53:ED
X509v3 Authority Key Identifier:
keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:43:e4:09:d5:27:4c:61:ad:61:2b:96:92:32:29:37:97:90:
59:09:a5:7a:5a:f2:d7:72:fc:fc:a3:55:bc:3e:c6:83:2b:28:
9f:47:d6:10:61:1d:20:cf:de:88:6e:ea:8c:44:2f:1a:d7:ba:
e2:6c:9e:30:4c:25:6b:47:e6:67:fb:81:92:06:43:73:f7:78:
c3:fa:4f:ff:f2:c7:d7:3f:42:6b:c9:b1:31:6c:04:93:b0:2c:
7e:6b:06:64:96:19:5f:c8:73:35:84:5b:ea:b3:d5:fd:58:47:
4c:ed:35:96:7a:54:80:3d:24:16:af:fc:04:a3:0f:9f:8f:b3:
09:58:d7:3c:3f:e0:d2:48:c0:d0:5e:6c:28:0f:65:b6:5c:00:
ec:48:0c:05:b1:12:34:80:64:aa:a8:33:85:69:8c:dc:32:ab:
d3:71:89:46:6a:e5:f2:1a:a3:ab:51:bd:56:9e:71:34:6b:c3:
fb:9b:06:05:13:73:74:76:8f:1e:c8:ec:69:53:59:40:ae:8b:
94:ff:fd:b9:40:cc:c3:5d:99:6d:f8:96:bf:fd:f6:07:c1:0f:
02:9e:b1:af:63:8e:d1:f8:cb:30:54:73:17:74:b0:bc:0e:89:
98:0d:ce:50:ac:fc:8e:21:9f:e0:bb:c8:2f:ab:cc:b7:ab:50:
23:17:95:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:10 2026 by rpki-client