Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
File: tMQeWYNNphLYPKJBlPAsptdgJEg.mft (raw, json)
Hash identifier: NwjLqc3Ultr5fboLGLo0qVPxQK3qAOOMCe15OXISWwo=
Subject key identifier: A0:EC:60:6D:D8:E5:BA:6A:C9:5E:BC:56:BD:09:5D:89:5C:F1:2D:4D
Authority key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
Certificate issuer: /CN=b4c41e59834da612d83ca24194f02ca6d7602448
Certificate serial: 019D27DF88557F0D8288BF384E1C1463FE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
Manifest number: 06AC
Signing time: Thu 26 Mar 2026 02:00:53 +0000
Manifest this update: Thu 26 Mar 2026 02:00:53 +0000
Manifest next update: Fri 27 Mar 2026 02:00:53 +0000
Files and hashes: 1: JNBeyrY-s5eopsp59vWk83HFU5c.roa (hash: gsrDZu7NeQ1/vZ7JzsrWfUrloQVAyva35jOSVpK+lhg=)
2: tMQeWYNNphLYPKJBlPAsptdgJEg.crl (hash: vldXlFQMAXTkyJveyHVwiajbhRpm777aRSKQydBCd8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:88:55:7f:0d:82:88:bf:38:4e:1c:14:63:fe:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c41e59834da612d83ca24194f02ca6d7602448
Validity
Not Before: Mar 26 02:00:53 2026 GMT
Not After : Mar 27 02:00:53 2026 GMT
Subject: CN=a0ec606dd8e5ba6ac95ebc56bd095d895cf12d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:87:5a:a8:4f:3c:6c:2b:37:98:8e:ad:a2:
d9:a7:14:38:18:26:12:c7:e6:c3:3a:52:1e:b0:29:
1a:c0:4f:2e:56:c6:c4:ae:04:e6:57:b8:8e:e3:47:
cc:cf:97:cf:01:43:aa:91:59:65:c0:89:a6:d0:14:
1e:c6:76:97:ee:3a:f2:17:91:ee:ee:60:02:5f:35:
a6:fe:6c:0c:7e:63:55:8e:75:86:43:02:b9:97:37:
d7:15:1d:eb:7c:a4:5a:00:c6:42:a6:2b:27:67:a0:
8c:86:54:a3:b0:eb:63:83:66:14:88:a1:ec:fa:8b:
c0:59:08:d9:99:30:2e:cb:7b:f2:b6:d9:a2:da:20:
aa:4d:98:8a:2c:ea:80:9d:e7:72:32:7f:b1:ae:ad:
1c:c8:cf:aa:cd:fd:7a:59:66:a8:45:54:85:97:ac:
7d:4e:cd:7e:6f:07:11:a5:18:8d:e4:1f:86:bd:7c:
ba:c7:11:f9:3f:b9:07:7b:c8:4c:0d:fe:95:26:a0:
64:ac:eb:d1:87:2f:dc:6b:52:c4:98:25:b3:59:4c:
76:c1:6e:43:c7:b0:fd:8c:f4:0f:3b:a4:1c:93:78:
ee:a2:46:33:28:4f:63:cf:10:a6:bf:51:ac:1c:c1:
4f:e3:f8:a8:65:9a:bb:79:38:c5:fa:7c:6d:7a:48:
93:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EC:60:6D:D8:E5:BA:6A:C9:5E:BC:56:BD:09:5D:89:5C:F1:2D:4D
X509v3 Authority Key Identifier:
keyid:B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:30:6b:93:e0:50:5a:73:a4:d8:64:61:17:9f:87:6a:5d:3c:
3a:ff:f9:e9:5d:d4:42:3f:a0:81:75:22:21:2b:a3:7e:31:6a:
e2:97:4d:6d:a4:62:b6:76:68:9b:0a:95:a1:f5:1b:b1:ce:05:
35:ba:82:a1:79:ae:c5:ae:45:49:cc:3d:68:89:b2:6f:af:99:
ed:72:23:47:c2:df:e9:a7:73:ea:ea:38:e2:97:25:76:17:de:
0c:e9:f3:79:23:b9:d0:48:aa:d4:a0:c8:8c:52:17:a0:b5:74:
48:f4:14:ff:97:ef:95:d0:85:d2:be:ff:fa:da:eb:6a:59:6f:
f4:97:7a:c0:20:a5:14:2e:f1:77:1f:0f:a3:65:d0:76:b8:7d:
3c:1e:07:e3:97:88:b4:03:51:f4:e1:35:1a:2f:f0:f5:62:90:
31:7f:19:67:44:22:32:b3:6e:5c:2d:12:cf:2f:97:1c:2b:90:
d2:61:4b:c1:38:93:fa:23:85:e1:70:60:81:a3:b4:f6:50:c8:
bd:bc:b9:e7:4a:11:14:4a:f3:90:a6:a4:3e:3b:67:a2:1d:6c:
4b:2b:2d:07:ce:e8:16:96:0c:c3:9c:53:3f:25:8c:d9:26:1e:
fe:79:e5:53:43:f0:f9:a7:1e:79:e0:ec:b3:be:05:44:aa:26:
09:e6:71:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:07 2026 by rpki-client