Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
File: tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json)
Hash identifier: sCVf9lNQKr9GXwWQtVbLj7NpBYD4IhVvWg23JWfSwKE=
Subject key identifier: 57:E3:F4:7F:D3:43:DB:0D:D8:6F:76:27:6F:B7:A2:6E:CB:3A:06:EC
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial: 019D2583EC847671A6E85F6B624C3E2E4D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
Manifest number: 1491
Signing time: Wed 25 Mar 2026 15:01:35 +0000
Manifest this update: Wed 25 Mar 2026 15:01:35 +0000
Manifest next update: Thu 26 Mar 2026 15:01:35 +0000
Files and hashes: 1: 07tUw4jtD4mf_hWsatPxJ_MIHL8.roa (hash: QrwrQX4QZucxWYaBIBlKAIfP7PxcTKwh9rMlp5A3Hx0=)
2: 1-QtHxqhDRc8Ad39doS8rj57e8O8.roa (hash: lx29AojPlQO1dFNnHX1vGuPHztiqJFCtnNtbhP7mv1A=)
3: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: AAvbTEpBoGV5sCB5rkJo6f8K8MozQdbiYJYJxLg0eyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:ec:84:76:71:a6:e8:5f:6b:62:4c:3e:2e:4d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
Validity
Not Before: Mar 25 15:01:35 2026 GMT
Not After : Mar 26 15:01:35 2026 GMT
Subject: CN=57e3f47fd343db0dd86f76276fb7a26ecb3a06ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:76:fd:4b:7f:8c:de:66:64:bb:62:f3:6b:53:
1e:f8:d6:02:5d:cf:d7:d7:d2:a0:9c:39:57:65:f7:
f4:72:a6:e2:3e:1d:eb:6c:0c:84:82:b9:0d:f4:09:
81:e6:43:9d:6d:ed:95:7a:52:ca:8b:b0:12:ea:6c:
55:a5:9c:32:ce:13:73:b5:b3:da:79:01:76:ca:a3:
7b:6c:25:9f:91:e7:0e:76:68:a3:9a:9d:9d:8f:da:
4b:6e:e8:58:93:a4:92:8e:5e:02:8f:12:a0:a0:b8:
78:25:ed:18:14:a1:62:12:bf:0f:50:99:98:b3:b2:
92:6a:ae:9e:49:a9:78:57:ad:ad:cd:eb:75:2a:59:
fd:8e:c3:c4:11:8c:14:43:9c:c7:96:fa:09:5d:92:
15:c2:df:f9:50:e2:3d:89:c9:c9:ba:98:c2:17:25:
0c:7a:1a:46:de:46:1f:09:c4:7b:67:40:d0:9d:99:
94:59:d7:a3:1e:1d:4e:7a:43:fd:70:54:31:13:8f:
7f:3b:60:04:bf:60:05:e1:22:a8:a4:c0:10:fc:02:
20:e0:c7:38:7f:45:31:d6:60:db:a1:56:e1:1a:0d:
81:96:2d:30:e3:e0:16:25:13:3c:c0:a0:1f:6b:5f:
6f:9d:ad:73:c5:51:c9:0b:77:c5:24:52:4c:20:05:
13:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E3:F4:7F:D3:43:DB:0D:D8:6F:76:27:6F:B7:A2:6E:CB:3A:06:EC
X509v3 Authority Key Identifier:
keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:af:01:e4:c9:c0:b2:4d:b5:dd:31:33:d9:57:94:7b:e6:a5:
76:19:40:8f:3b:5c:ca:04:34:b2:1d:a6:ce:3f:45:b1:ec:dd:
d7:5f:ec:63:32:d3:20:b0:30:7b:ce:6d:c4:61:84:46:04:0a:
98:cd:80:7f:c8:aa:80:07:47:c0:27:fd:86:3c:67:e4:19:34:
2e:bc:cb:5b:a3:94:8e:83:7f:64:5d:f2:04:43:5e:09:ea:f0:
e8:ec:42:ef:37:98:44:00:03:2b:b7:74:62:32:83:a8:41:57:
f2:89:87:0c:9b:25:65:fe:73:eb:da:b7:78:39:62:58:a0:01:
24:46:bf:da:46:d5:d9:f5:be:98:6e:6b:e0:b7:34:c2:56:63:
8d:47:55:cb:fd:0f:f1:35:0d:60:d9:1b:a8:1e:a6:65:e0:3b:
f8:e1:a5:bd:52:c1:98:78:64:71:53:68:cf:b5:9f:64:97:0b:
28:37:67:fc:0e:5d:e2:43:f4:f0:e1:a4:3c:ab:2a:45:75:c8:
bd:79:72:fc:50:1c:92:0a:cb:73:e2:6e:15:98:05:c0:5f:04:
a8:ab:4a:8b:bf:91:67:e7:18:77:2c:69:64:39:d7:c8:64:06:
9e:fe:0a:6e:32:68:fc:5c:d8:79:53:b5:7c:0e:84:a9:58:74:
23:bc:db:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:17 2026 by rpki-client