Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
File: t9yTan9rpQeCJPgBc2_esNroqfs.mft (raw, json)
Hash identifier: qE2ENwKWTsEgbTWRZb61ZxpRXu54oVhqlz79vNuyVfw=
Subject key identifier: 4F:C2:6C:B6:E9:59:96:24:4F:DF:13:A9:C4:88:05:72:DA:84:CE:7C
Authority key identifier: B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
Certificate issuer: /CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Certificate serial: 019D26CD2A7759ADC66D8059834640C49598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 21:01:13 +0000
Manifest this update: Wed 25 Mar 2026 21:01:13 +0000
Manifest next update: Thu 26 Mar 2026 21:01:13 +0000
Files and hashes: 1: E5S268Ffch1NsUXm5XeEp1Xy-Jw.roa (hash: uZyNbiAwY6QAC7VVWqEYh3JF/qKdTnkMJgQyPmYloS4=)
2: H_uDKBlLLYWjSkRrdAcK39eeDV0.roa (hash: sLa+J14Ys0E4r0lAG5B4hthFqhO6LkphRctxzt1Vj/U=)
3: t9yTan9rpQeCJPgBc2_esNroqfs.crl (hash: ayczNIcF6jgwA3JWA4JXPncFmdDV7qK+ZKLUYVRNMVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:2a:77:59:ad:c6:6d:80:59:83:46:40:c4:95:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Validity
Not Before: Mar 25 21:01:13 2026 GMT
Not After : Mar 26 21:01:13 2026 GMT
Subject: CN=4fc26cb6e95996244fdf13a9c4880572da84ce7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fa:ef:12:0a:d0:8a:63:2e:6a:d6:fb:d0:c4:
9c:3d:28:ef:01:ea:39:68:c6:50:8b:d6:d7:f9:c6:
f4:24:5c:e7:92:11:9b:7a:3f:2c:30:0b:b8:8d:ce:
52:cb:df:d2:7f:4a:5a:8e:d9:22:c8:40:7f:ed:5e:
57:b3:da:b8:ca:aa:ba:2f:66:ab:2c:b6:13:cf:90:
0e:20:e7:83:d3:03:fe:fd:2d:d6:44:c6:89:a2:ee:
de:d8:75:55:ed:d2:0d:06:fc:1e:a6:59:50:97:61:
74:62:84:ec:78:a4:04:e0:1b:8c:58:68:79:77:9b:
e3:70:14:a8:0d:fe:16:94:6e:dd:d3:1c:37:f4:85:
7b:75:2c:0c:e4:1f:4c:a9:2a:e3:66:21:7a:ca:83:
c4:e0:e7:de:61:da:ae:53:b8:bb:d0:b7:40:24:09:
d7:57:53:95:10:6c:7f:b8:f5:7e:06:93:30:1a:5b:
1d:2b:05:71:ba:cd:e1:99:79:19:27:04:3a:5d:da:
9c:09:c7:d1:be:fb:63:33:f3:d6:18:e9:76:61:34:
f5:ea:c1:21:54:26:6b:d1:8e:3e:02:79:ef:61:71:
59:88:85:19:ad:17:91:7d:89:eb:fc:34:0b:37:50:
62:32:51:7b:05:93:af:5d:f9:17:42:71:ba:48:32:
d1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C2:6C:B6:E9:59:96:24:4F:DF:13:A9:C4:88:05:72:DA:84:CE:7C
X509v3 Authority Key Identifier:
keyid:B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:21:81:20:4a:62:e4:7a:9e:91:0a:00:0d:75:8b:34:4b:8e:
7e:0e:58:69:0d:f5:31:cb:ad:99:d7:28:2b:19:15:27:2a:f5:
b0:38:fe:c3:dc:a4:01:e2:4f:48:be:af:31:cf:2c:33:c7:03:
47:db:32:be:29:25:9e:60:42:2c:de:a1:0c:8c:d7:09:13:67:
12:87:39:75:1c:66:e8:d1:af:7f:1c:31:cb:6d:95:9c:c4:d6:
75:f0:c9:22:7f:bd:1b:da:8f:29:06:c3:71:7b:79:fb:20:25:
be:43:ca:1b:4e:a3:64:8e:e4:70:3c:dc:6d:0f:7d:c5:e3:83:
0f:e8:de:b2:6a:6d:da:92:1a:65:97:7a:d0:7d:47:d9:82:ec:
1e:42:24:ac:f3:1a:bc:b6:6e:f6:6f:a4:8c:99:6b:fb:96:5c:
7a:7d:ba:ba:e0:31:0c:47:0b:9f:fd:b1:8d:ab:79:35:ff:a7:
d5:04:6a:94:64:03:ef:b1:7e:5b:b8:ea:c0:9a:86:6f:5c:31:
3d:4c:e7:46:d4:72:13:16:29:1d:43:16:a9:51:61:0e:1e:02:
69:54:a5:b3:26:89:31:98:79:16:03:28:56:57:eb:a7:74:af:
fc:4c:b3:54:95:48:b8:c5:fc:f7:70:f9:9a:6b:e3:5d:eb:90:
9b:2e:5a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:12 2026 by rpki-client