Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
File: tkB0qoRJgw2psgs6-waC08Ay-f4.mft (raw, json)
Hash identifier: XaZ57APL+SQ6+YWcXonK5bN3t2wQsSUqqdetS8OA2j0=
Subject key identifier: 5A:2D:4E:5C:C4:42:63:12:EA:E2:EB:E8:DD:15:0B:2D:3A:10:EC:3E
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial: 019D2A726622764CABD6AA94E55C028D764B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 14:00:32 +0000
Manifest this update: Thu 26 Mar 2026 14:00:32 +0000
Manifest next update: Fri 27 Mar 2026 14:00:32 +0000
Files and hashes: 1: fK9aO2I8AtgF0c0rdh_GX4O4_G4.roa (hash: u0RKyLKqUhdTzKSmpaGBlbuO8M5rtJXGLGs1u6N9C1g=)
2: nUmXXOPkWjccJgN8O22tzPhWVlA.roa (hash: UqKB7riKgf3jbIKMj8rldXeyuF7eaO+XqFxWCXQioCw=)
3: tkB0qoRJgw2psgs6-waC08Ay-f4.crl (hash: BvaKWqN+YDbROhfYVPjCUjgn93DjHzpUhDfgga98q0s=)
4: xYSs50B2xtsvWdJxMD0UuyzwnRE.roa (hash: wUK1v8a3MmWnPSffQ5f8oxAVVqstmvh7KosqvxbaO78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:66:22:76:4c:ab:d6:aa:94:e5:5c:02:8d:76:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Validity
Not Before: Mar 26 14:00:32 2026 GMT
Not After : Mar 27 14:00:32 2026 GMT
Subject: CN=5a2d4e5cc4426312eae2ebe8dd150b2d3a10ec3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e5:df:f3:f6:ee:9e:ab:0d:ec:7c:6a:e1:6e:
a6:9e:8f:03:c0:3a:9d:44:e9:8e:69:c8:b0:b4:03:
b3:cd:e2:19:9c:cb:f5:99:56:59:9a:4c:00:01:eb:
2c:ce:d0:d9:57:6e:8e:e1:69:55:72:c2:e5:dd:64:
c5:ed:f0:01:93:a9:31:21:6c:13:17:b2:4f:35:19:
32:0b:2b:ab:03:cf:13:67:70:ff:ec:2e:99:24:93:
ce:79:6b:9c:0d:56:b2:26:ba:2d:ba:4d:0b:bf:ae:
f5:cf:24:d3:9b:15:09:4c:57:9d:42:c2:2d:98:bb:
fa:af:56:19:4d:38:86:82:8d:46:91:f4:f3:0d:2a:
77:ea:c8:b5:53:3d:53:24:e3:be:ed:97:e7:0d:be:
45:79:da:3c:93:97:f9:42:ae:94:7e:d4:68:3a:13:
0e:6d:4d:83:12:eb:f7:e0:80:a1:c6:e2:1d:8c:3b:
96:45:01:f9:2e:35:d7:e7:ee:6d:35:f7:da:f1:75:
15:26:45:5d:19:d6:20:ec:d4:d3:7e:86:15:b1:8b:
4f:63:c9:ce:95:e6:5a:51:a2:2b:12:52:75:36:bb:
ae:b3:a9:b1:38:51:2e:43:f7:0c:45:bc:56:90:b2:
d0:12:c5:f4:6a:06:28:6e:9a:01:71:36:4d:31:b0:
df:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2D:4E:5C:C4:42:63:12:EA:E2:EB:E8:DD:15:0B:2D:3A:10:EC:3E
X509v3 Authority Key Identifier:
keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:99:74:dc:87:5a:27:1b:21:dd:ab:19:2a:23:31:1c:8f:e0:
40:53:81:89:d8:62:5a:1f:08:5f:da:c1:b5:17:13:b6:22:7e:
46:81:5a:aa:47:72:7c:0e:6c:bd:87:33:3e:7d:f2:4c:85:68:
70:51:3e:d9:80:4c:85:2f:14:a1:ec:37:ab:db:3a:ea:b5:b2:
d2:84:ca:65:a9:8f:dc:13:73:c7:6b:91:5a:4e:ff:89:44:3d:
76:43:aa:fd:a1:b5:10:1d:61:d4:4d:4b:6e:06:8f:64:ed:1f:
0d:78:7b:de:c2:88:e4:dc:2d:4f:dd:01:3c:ba:cd:7c:bb:57:
fd:e9:ea:77:93:bc:3c:53:69:f8:b0:15:2b:14:76:ff:24:ed:
92:45:37:3b:63:5d:d4:7d:31:83:66:59:05:fc:f0:f6:2f:a8:
3f:f3:4c:14:94:9d:c1:a9:90:0d:f2:c2:37:30:82:31:6d:12:
7f:29:bd:01:07:71:f5:15:b0:cf:72:52:34:71:f7:9a:2e:41:
5c:2f:bc:e1:1e:36:78:19:1d:40:7b:1f:72:dd:ee:89:4f:8e:
b7:6e:26:6a:8b:8d:c2:14:b1:28:ab:63:ed:0f:16:0f:4e:5d:
84:9e:c1:09:37:43:7f:1d:5f:e4:09:b5:c5:77:20:f4:f6:c5:
05:e5:49:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:21:24 2026 by rpki-client