Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
File: tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json)
Hash identifier: +EdwykITNFRyUolCtgKJQhQ2jj5UIW1nyyq1zZMzz9c=
Subject key identifier: 9B:C4:A3:50:F9:1F:36:73:61:E4:A5:8B:F9:29:5F:0C:18:B1:DF:42
Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
Certificate issuer: /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Certificate serial: 019D269636A0B4147E3451E31927B59941F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 20:01:11 +0000
Manifest this update: Wed 25 Mar 2026 20:01:11 +0000
Manifest next update: Thu 26 Mar 2026 20:01:11 +0000
Files and hashes: 1: bXgR8m5zIy_GMOS_a3seOOEoPYQ.roa (hash: dQET79lWM3bPQ1IRR0iZoVaViZjUeP97gYh31kK/K0E=)
2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: dVJ4yh295Befu7r4upbsvm0HRZ8o5qgEsb5e3rTmra0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:36:a0:b4:14:7e:34:51:e3:19:27:b5:99:41:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Validity
Not Before: Mar 25 20:01:11 2026 GMT
Not After : Mar 26 20:01:11 2026 GMT
Subject: CN=9bc4a350f91f367361e4a58bf9295f0c18b1df42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f5:89:70:6b:8c:ea:01:e5:6e:23:e0:ee:a3:
60:4c:58:15:63:5f:66:42:16:0a:e7:2e:af:6d:50:
9b:d2:0e:a1:e0:0f:4b:cd:43:9e:bf:b0:58:48:79:
92:ab:c7:f6:3a:e3:eb:bf:c3:f6:cf:11:4e:ed:12:
31:cd:8d:f6:63:57:94:56:bf:7c:97:98:04:37:79:
4d:dd:21:fb:75:d8:ac:f4:bb:67:21:75:03:cf:5e:
ed:b0:91:af:64:9f:78:5b:45:e8:b7:4f:06:f8:4d:
21:f9:29:ec:2e:29:d0:d0:a6:b7:d6:a2:eb:f0:b5:
23:54:ec:fa:dc:7c:b7:c6:8a:51:e5:91:f6:44:85:
9d:bf:9c:81:ed:a6:74:cd:96:ab:6b:4a:f5:a0:a2:
14:6a:42:ae:0e:41:a0:87:6e:7d:ee:9a:af:81:bd:
fd:c2:90:b1:e6:f9:e5:65:20:9c:e5:b8:81:c4:7e:
33:7a:eb:b5:cc:e3:2d:48:23:28:51:f0:37:6d:49:
b2:0e:a3:be:56:be:e0:bc:0f:93:be:08:71:66:f9:
d6:fa:d8:61:0d:b7:71:4a:b8:c9:f8:a7:36:7f:34:
81:d4:a2:2e:b2:0e:f7:4e:d6:16:cc:a2:de:ca:9b:
e7:57:fd:b3:c1:44:f8:83:38:01:00:1b:06:4a:19:
34:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C4:A3:50:F9:1F:36:73:61:E4:A5:8B:F9:29:5F:0C:18:B1:DF:42
X509v3 Authority Key Identifier:
keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d8:c6:ab:f0:36:fc:93:36:7f:86:a0:84:29:52:dd:ec:fa:
06:b7:ab:e9:de:af:dc:16:b5:36:bc:eb:18:56:0f:0c:38:83:
b2:7c:12:63:45:0f:38:f5:21:43:a2:7b:f0:ab:01:3e:6f:0f:
66:30:06:76:8d:83:b9:a0:49:fc:31:00:f4:53:66:e9:0d:af:
59:d9:ad:2d:fd:33:1c:25:7b:16:bb:b1:6c:ae:e4:78:71:68:
1e:55:73:6f:80:c7:92:d6:fa:7c:3d:d3:28:2a:7c:f1:17:16:
ac:cd:ed:09:a4:e0:fa:15:d7:02:7c:7b:9c:9c:65:b2:8e:2f:
3c:55:14:74:7d:d8:c2:fc:af:ab:3f:9c:3a:10:19:41:25:8b:
a8:72:c2:14:71:fd:f0:1b:68:2c:6a:82:10:7b:92:7f:bf:07:
57:5f:3d:da:af:dd:5c:bc:7a:30:fb:ef:35:96:27:06:9f:22:
2c:67:ba:d2:a2:56:ae:5d:43:96:6a:fe:35:84:f7:4d:7c:3f:
16:f1:0b:4f:79:d7:49:09:11:2a:b1:3d:ff:52:21:72:aa:d5:
e3:da:ce:18:98:2e:e4:8b:e8:48:07:12:52:f1:c6:7d:e1:fb:
dd:02:3b:24:df:5f:3a:52:52:d0:69:96:b0:5a:e5:11:87:05:
4e:9f:ea:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:33:43 2026 by rpki-client