Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
File: tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft (raw, json)
Hash identifier: ZDHnsiK0SYrcSROW/mBklA9pygZrVxIUNMTLBP8qs9U=
Subject key identifier: 88:6A:17:FE:67:86:22:51:D3:A9:61:AB:B8:6F:2C:69:70:D3:68:9E
Authority key identifier: B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
Certificate issuer: /CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Certificate serial: 019D25154E01AA73A856CB48D0E552CF15E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
Manifest number: 0570
Signing time: Wed 25 Mar 2026 13:00:46 +0000
Manifest this update: Wed 25 Mar 2026 13:00:46 +0000
Manifest next update: Thu 26 Mar 2026 13:00:46 +0000
Files and hashes: 1: EgBYTsP4WnLdOgI7v9fWewoBmRQ.roa (hash: SdXuNAo4cL+y4o9C6xVzKmsv8YTzVdsZLx73iiyVrKA=)
2: LfLdRDtUwafS7E6VWyXgK2UQq9g.asa (hash: lI3eaRCZDcPeEC/xgibETDzOKxk64bCjv0zsjJHosh8=)
3: tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl (hash: oSEWOsY7twGKgObtBsZO38SrWvAijW/hDTQGaOjlbao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:15:4e:01:aa:73:a8:56:cb:48:d0:e5:52:cf:15:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Validity
Not Before: Mar 25 13:00:46 2026 GMT
Not After : Mar 26 13:00:46 2026 GMT
Subject: CN=886a17fe67862251d3a961abb86f2c6970d3689e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:22:8a:e2:75:ad:2c:87:9a:ca:ef:e3:af:df:
09:2c:90:5e:71:f9:ba:d9:13:d7:a5:b1:ea:2f:54:
e2:2a:5a:4a:bb:e9:e3:6d:5a:5c:a5:6d:ff:c0:6c:
3a:68:71:87:89:29:d4:3e:70:4d:c7:db:85:29:ed:
64:19:74:15:00:41:a9:af:a9:42:9a:08:82:b4:05:
65:43:70:42:96:66:f3:37:ea:02:a0:85:4e:a2:6c:
48:da:3b:cd:75:fc:d1:6b:3e:a8:44:b9:57:69:ea:
d3:4c:4c:54:a6:e6:18:23:43:b1:ad:41:24:88:c9:
6d:86:8e:30:d8:ba:23:50:a0:91:dc:c2:24:93:42:
e3:9a:26:36:0b:9e:5d:dd:97:81:dd:91:f9:c2:42:
ad:4f:f3:45:06:60:7e:98:e4:5d:ab:e1:47:e7:21:
5f:fe:00:f8:63:f6:3e:25:93:c6:2f:9d:26:8d:6c:
d6:76:b9:0b:b4:26:98:aa:a8:ea:8e:d0:e8:5b:ed:
8f:79:b5:23:b1:37:39:4d:39:c8:20:6a:ae:0c:a1:
22:24:05:f4:73:5b:bb:6a:34:1f:9c:3a:44:92:40:
cb:25:d2:34:03:3d:4c:d2:d6:80:81:e0:e4:07:7a:
10:bf:d5:b2:93:ef:f3:c5:61:91:b4:b3:2f:3f:33:
35:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6A:17:FE:67:86:22:51:D3:A9:61:AB:B8:6F:2C:69:70:D3:68:9E
X509v3 Authority Key Identifier:
keyid:B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cf:68:45:9f:0c:45:ca:11:ee:a7:4b:db:34:8b:cc:4d:0c:
a7:6f:7b:fe:22:a0:1a:0e:33:37:94:4d:f4:f2:91:70:a9:3b:
30:45:a5:d9:00:b2:dd:37:c3:f4:9e:b4:6f:8d:24:84:ff:92:
d8:c5:a0:37:a7:b4:5c:21:f9:8d:e8:da:b4:94:fa:5a:33:e3:
e0:03:98:ad:de:62:39:1e:71:0d:cb:db:ca:47:8a:b9:4a:34:
9c:36:ca:d6:97:b4:8c:f5:f0:42:a5:da:3f:c4:31:da:49:34:
d9:f2:58:32:ea:6f:9d:a8:4c:52:cc:50:53:5a:cb:14:e5:7e:
72:0a:ad:51:54:5e:7c:98:25:64:06:32:a2:38:90:6d:a0:e0:
39:ac:c7:5e:69:07:13:54:ad:20:bd:6f:87:ec:2c:e4:c0:88:
20:34:1b:1f:7b:96:c3:4f:41:e5:4b:6f:26:dd:ca:0b:53:82:
96:c3:7d:a0:87:18:ba:73:5a:1e:f3:1b:4e:5a:5b:a7:d6:e6:
95:f1:bc:6e:df:88:42:af:8f:5e:c1:c1:30:c7:37:2a:a2:99:
a1:f4:01:ed:ec:76:c7:2e:8b:15:90:6f:51:f1:43:8d:63:d2:
56:18:86:d5:79:4e:77:3c:c8:e9:de:06:06:c2:b8:f7:53:7a:
3e:8a:e4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:47:00 2026 by rpki-client