Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
File: tEORSkjl2uWnVrHjuPvkN-4Niww.mft (raw, json)
Hash identifier: DmevZRpreAHok/mpb0KueMgMLPElNd51p/2YUI+FE1w=
Subject key identifier: FF:0F:3D:84:5C:95:CF:DF:01:35:E8:DD:B2:F9:A8:3B:79:87:15:B4
Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
Certificate issuer: /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Certificate serial: 019D265EDBC07E06C5D1D2207DEB5044C3FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:00:43 +0000
Manifest this update: Wed 25 Mar 2026 19:00:43 +0000
Manifest next update: Thu 26 Mar 2026 19:00:43 +0000
Files and hashes: 1: 49d3lo0t_8Ax5cbwJrY_Tha0ERQ.roa (hash: qoFvjnjBe3Z9lf3XdiqiaeG3oM6pWV6dcIPmH4VpFRw=)
2: 7ufFK9wMYQIlfPF5mBmnlqE81ZE.roa (hash: byv9bKYSFyW281U6XJiGXV1al8HvRRvhSL2jHGqxWtU=)
3: gdZbcfQhj6CVyMJsPQMT1BZmtdM.roa (hash: X/T0yNnwui4YvzGKyxtkJ10/UIQIZbvCIKZsavRhgn8=)
4: hckySekDjcPjJjmCb8xV-0niibA.roa (hash: rABvuPwZ4k/dR/LQvlCJNpnmkfZ6RaaAKF1LFAoY6XM=)
5: tEORSkjl2uWnVrHjuPvkN-4Niww.crl (hash: jUPHWdUSQbpi/MXdOfAyaQM9wD/fD1Rg1YN+AxpUTjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:db:c0:7e:06:c5:d1:d2:20:7d:eb:50:44:c3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Validity
Not Before: Mar 25 19:00:43 2026 GMT
Not After : Mar 26 19:00:43 2026 GMT
Subject: CN=ff0f3d845c95cfdf0135e8ddb2f9a83b798715b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:19:50:ee:db:5e:4c:f4:ae:ea:6e:c7:41:
23:5f:5a:34:25:78:37:8e:26:89:ae:6d:06:cd:8d:
61:a7:33:64:94:73:81:f2:be:55:8e:ca:99:1a:0c:
6e:21:31:23:ed:a4:a5:ed:cf:2c:53:1c:76:9a:14:
db:d0:b9:09:fc:f3:c1:6b:45:de:1b:73:20:f5:87:
2f:b8:60:be:d7:a8:a1:fb:7a:68:fb:57:87:d4:0e:
c1:05:4a:a9:26:64:bf:59:92:28:6d:5d:56:ec:80:
30:fc:15:79:f1:b9:3b:ae:0c:f0:56:06:c1:23:16:
d4:dc:d2:c6:c2:06:a8:23:7c:ba:1d:28:5d:2e:9a:
f2:25:09:1e:90:b2:c6:68:28:66:df:c8:46:aa:cb:
5c:95:50:3f:bd:6b:5a:06:af:9c:96:9a:47:5f:bd:
92:41:9c:61:26:f6:6e:02:b1:b4:bc:16:ea:7c:6a:
dc:bd:da:a6:09:25:a6:c2:8c:4f:b2:f5:6a:48:5c:
48:3f:0b:c8:63:1d:3f:72:02:a1:d9:0a:26:b2:35:
46:e9:23:e7:c9:a2:ca:a2:dc:86:e9:99:91:24:b5:
17:6c:be:eb:c0:ba:50:6c:c7:06:a1:dd:c6:29:9f:
1b:cd:d7:7c:e1:80:d5:59:c4:4e:40:42:c6:d1:82:
07:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0F:3D:84:5C:95:CF:DF:01:35:E8:DD:B2:F9:A8:3B:79:87:15:B4
X509v3 Authority Key Identifier:
keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:08:df:24:e9:f8:35:16:95:59:b4:64:76:86:fe:b0:f5:2b:
11:24:3f:0e:24:c7:0b:a9:49:3d:95:b7:52:c3:48:86:c6:d9:
dc:1e:6c:74:2a:e4:77:a6:0b:17:48:8a:cd:17:08:6f:87:09:
56:d0:2f:a1:6b:f9:6d:28:a5:87:d1:c2:e5:56:13:7e:5a:19:
ca:9d:f7:04:03:ee:26:1b:ab:11:eb:c4:fa:46:25:3f:5f:41:
51:b9:2a:61:d7:a0:04:5f:57:76:99:36:52:56:5b:1b:b9:c0:
5e:6a:e2:62:e6:f7:ba:35:f6:8e:ff:a0:f2:15:0d:83:4f:22:
9d:61:d7:15:11:b7:12:1f:83:a1:e6:cb:9a:13:7a:d3:5f:e5:
77:66:be:68:f7:5d:d6:84:b9:9d:d3:03:b3:00:3d:5d:d0:40:
be:cd:12:39:1e:d3:9c:31:1b:6d:a8:82:37:52:72:61:c0:62:
95:8b:9c:32:e8:d7:55:89:d7:68:38:4b:13:09:e1:31:f3:9b:
d0:3b:78:7d:de:09:65:df:b3:d2:20:4e:76:7f:22:da:23:a5:
a5:57:95:c3:87:63:67:21:c5:32:75:9a:e9:e4:05:09:b6:4e:
80:2b:46:1b:7a:f9:fc:03:d0:e7:32:49:13:49:54:da:df:97:
e3:55:1b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:41:16 2026 by rpki-client