Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
File: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft (raw, json)
Hash identifier: vnjBubr5+c+6CArxgKPPLFYQdmF9MRleXaE7UYpFrU8=
Subject key identifier: E2:79:0B:B6:46:82:56:D4:48:DF:69:C0:7A:29:9A:8B:9D:48:3B:22
Authority key identifier: B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
Certificate issuer: /CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Certificate serial: 019D25BA56CDD855B02E89DE98AE5E1C05A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 16:01:02 +0000
Manifest this update: Wed 25 Mar 2026 16:01:02 +0000
Manifest next update: Thu 26 Mar 2026 16:01:02 +0000
Files and hashes: 1: VIjK-dF1RkU8oL9JO5ackgQvQqk.roa (hash: EuZj5CNsImrt381xNpJVt+ICs2RyaQvBUySYpPa5Un8=)
2: tBz0by2NzKIkh_m261Gzm8WL1fA.roa (hash: HsCmK+FnFFM5EN4UPd625pAFTouSWoOu/R7Evk3aoN0=)
3: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl (hash: pTJW9a+4L+owYwm5JLJ5B3e4vT7WlvD/6zZkiGYu6Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:56:cd:d8:55:b0:2e:89:de:98:ae:5e:1c:05:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Validity
Not Before: Mar 25 16:01:02 2026 GMT
Not After : Mar 26 16:01:02 2026 GMT
Subject: CN=e2790bb6468256d448df69c07a299a8b9d483b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:6d:9e:4a:7f:86:80:5b:44:ca:57:ba:14:
f8:0b:96:b8:17:a7:8d:5c:47:cd:37:38:6c:50:60:
f8:f1:ab:38:62:5d:48:a8:36:be:e2:d8:6f:f1:37:
04:26:40:9d:9d:09:1a:4b:7e:0b:35:d6:a3:cc:11:
7f:80:3b:55:6f:fa:9a:b9:34:ce:7a:bc:8b:b0:f3:
3d:f0:48:ff:00:5c:ae:5d:c0:84:27:f1:44:d4:73:
ca:8a:51:ba:11:9d:0c:6f:19:35:7a:7f:d4:54:01:
ed:20:86:ee:9b:ac:1d:e7:66:b5:ef:c3:5e:f9:ff:
58:d4:87:78:9e:d4:a3:4d:24:08:c1:ff:b4:88:d4:
00:dd:bd:78:d4:05:a8:11:46:95:18:71:7f:fd:4b:
17:41:2c:50:7c:7b:79:d8:24:ea:0c:fb:36:7f:e9:
b9:05:a2:a4:a0:6c:88:ce:72:90:30:e2:28:01:1e:
4a:5d:ec:a3:a2:d8:bc:17:08:26:08:c9:49:9c:31:
8c:f4:53:41:43:25:ec:57:a0:a1:bd:5d:0a:bc:42:
a3:3f:5a:1d:23:53:fa:5a:bb:3b:44:91:6d:6a:5a:
67:14:4f:68:f2:8a:1f:e4:e7:6c:ae:bb:1b:4f:bd:
cc:93:1e:dd:9a:2f:06:b4:83:07:d5:3e:8b:b8:57:
8d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:79:0B:B6:46:82:56:D4:48:DF:69:C0:7A:29:9A:8B:9D:48:3B:22
X509v3 Authority Key Identifier:
keyid:B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:be:98:24:19:36:a9:17:76:ac:57:cb:47:57:fd:5f:d5:b4:
8f:dd:d8:79:53:36:0e:e7:a6:01:9e:eb:85:eb:28:0b:2a:74:
19:6b:00:52:e7:b7:8f:8a:7b:a9:03:38:27:d0:8f:cf:ca:7d:
97:e3:9a:ee:d0:98:a6:32:48:ce:85:01:09:28:f6:e5:53:2c:
02:af:bc:f7:05:29:78:b0:ba:f4:78:86:38:6c:d0:0b:9f:91:
b1:fe:be:86:b1:67:75:22:d7:40:2e:3e:98:37:c7:48:85:f0:
32:55:f7:ef:6e:9e:67:b5:c8:39:48:1c:91:4b:a4:7f:e8:ad:
d8:54:d3:a9:9a:e3:fe:7a:bd:44:d7:b9:e5:a1:48:bc:99:29:
d2:c7:d8:b2:2f:d4:e7:8a:e3:9e:f8:a2:19:2b:d3:96:2e:40:
b5:0a:6b:62:27:7a:a7:c9:7d:72:c4:6d:fc:e2:8f:cc:ea:a6:
57:e5:82:8a:ec:f5:85:06:4e:36:57:c9:f2:ea:73:be:46:34:
e2:72:bd:1e:7b:89:92:b8:dd:90:1e:95:e7:a9:c2:46:cc:8a:
cd:f2:fb:9d:d2:fe:5f:19:70:aa:92:35:a9:57:bd:cd:46:b0:
c7:16:0e:a8:12:2e:c5:e8:16:4c:c3:cf:e4:05:5e:62:0f:cb:
d7:2a:20:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:32 2026 by rpki-client