Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
File: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft (raw, json)
Hash identifier: 92a3L8uXuw70MvVJAOzPe5yiCNUEPdUGgVxD/zzW2oI=
Subject key identifier: 0F:48:C0:A4:19:5B:47:8D:7D:A4:60:C7:02:B4:2D:50:C3:3F:51:8A
Authority key identifier: B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
Certificate issuer: /CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Certificate serial: 019D258334962B5DA1259DB3214486D51B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
Manifest number: 1572
Signing time: Wed 25 Mar 2026 15:00:48 +0000
Manifest this update: Wed 25 Mar 2026 15:00:48 +0000
Manifest next update: Thu 26 Mar 2026 15:00:48 +0000
Files and hashes: 1: PeFK_yeJmAggBubY51FT5ExR7yY.roa (hash: kZM9hfI1X20jdNyqPobjCTSrN0qe4fcSM/JWGaBh8YA=)
2: XiIDJMPchO2MVQJnr2v3LL6-fD0.roa (hash: +0DK4fXLVL2er4TUt0Ah7Mip7BfbX2JKpUWdTlpILkM=)
3: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl (hash: NOdOgkVO9b+jIlmRz8qACluKTBpgZMY+LLACDrRTPHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:34:96:2b:5d:a1:25:9d:b3:21:44:86:d5:1b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Validity
Not Before: Mar 25 15:00:48 2026 GMT
Not After : Mar 26 15:00:48 2026 GMT
Subject: CN=0f48c0a4195b478d7da460c702b42d50c33f518a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f9:d6:48:d5:36:75:e8:ec:97:03:91:eb:9b:
a5:61:f7:7e:3f:0f:f6:e0:19:b1:b5:6d:8c:b6:d3:
22:4c:47:33:6a:db:9b:5c:a2:4f:c9:c5:be:0a:52:
4b:52:5e:83:0d:bb:8a:6c:bd:8e:58:95:ee:3c:9b:
32:47:ec:bd:90:69:5a:54:45:0a:f3:8d:15:fd:a2:
af:d3:da:e1:a3:3d:cb:df:e8:51:e4:84:0e:3d:29:
60:7e:01:e5:5f:80:0d:a1:c9:6a:70:2e:db:ad:28:
a1:8d:7f:46:c0:b1:80:a6:2f:b4:fe:cd:42:92:32:
14:11:ed:5f:a5:f5:c9:d0:19:16:d2:f5:36:48:25:
2a:8d:c5:95:6a:f5:29:6c:d8:6c:92:8b:cb:56:f0:
e6:27:3c:66:5a:e3:3a:fe:44:bf:2f:18:18:1b:f3:
38:bf:5b:d7:45:72:80:0d:9b:99:cb:3f:8b:50:f6:
fa:54:63:9e:8c:71:92:26:ee:71:e0:a8:a9:27:da:
5c:3f:4e:44:77:58:39:c2:1e:6f:8e:29:b0:03:a1:
21:39:67:43:37:90:4d:32:14:e9:8a:76:b5:f8:2f:
9f:2f:ec:01:a6:51:f9:2b:f2:33:fe:fa:0f:5a:14:
15:6c:6e:61:3e:22:36:a4:0b:a5:c3:cb:f4:dc:43:
6f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:48:C0:A4:19:5B:47:8D:7D:A4:60:C7:02:B4:2D:50:C3:3F:51:8A
X509v3 Authority Key Identifier:
keyid:B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6c:9b:7a:d0:0f:e5:93:09:c6:12:0b:9a:ee:fa:e0:20:fb:
40:2f:c8:b7:3b:9c:15:51:ee:a8:21:62:ec:76:bf:a1:d8:46:
f6:78:5d:4d:aa:d9:d3:0e:c8:cb:a3:7e:d3:ea:b7:8d:d1:c3:
54:3b:b4:d2:35:c4:02:a6:cf:8c:a1:19:b6:ad:0d:26:fc:25:
28:33:50:49:53:92:b2:c2:ee:c3:4d:77:94:d3:86:da:5e:28:
ad:bd:a8:1b:c9:e8:fd:64:27:80:e9:ef:51:c2:59:da:7a:07:
e0:30:4f:f3:48:7b:07:95:2c:12:96:23:70:af:77:75:fa:9e:
b4:70:5c:69:d1:43:ce:a2:3f:c8:4a:96:e1:5d:55:a1:7f:f8:
b8:d4:59:4c:8f:fb:a2:a4:47:37:6e:b6:e0:90:6f:22:41:f4:
a9:4c:2e:62:15:c7:76:d5:e5:45:db:e3:ee:62:de:54:dc:7d:
8d:fb:90:40:86:2d:8d:81:a3:6d:c2:a7:b3:3a:3f:59:0c:59:
17:5d:c9:54:fe:c8:96:dd:dc:b5:91:70:37:a6:31:32:48:6f:
3a:6f:d6:47:b5:68:2c:a9:ea:1d:4c:1c:ce:b4:28:dc:56:26:
49:c0:e6:d5:cc:c7:61:95:fd:aa:a6:c7:97:ae:a7:a5:93:4c:
32:bf:6c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:44 2026 by rpki-client