Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
File: tl47dPyTSwkhk63tfsoB2h7xhq0.mft (raw, json)
Hash identifier: /9oTbUeJ5Fwf8B3wQpLCbtV1rUxGwk4bYctmQSieEnE=
Subject key identifier: E4:AA:CF:9C:3A:95:8C:B8:59:8C:77:2D:CC:C9:62:01:D1:5B:DC:55
Authority key identifier: B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD
Certificate issuer: /CN=b65e3b74fc934b092193aded7eca01da1ef186ad
Certificate serial: 019D333E9087FF765FB8F00F7A26C9E3937D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
Manifest number: 188F
Signing time: Sat 28 Mar 2026 07:00:31 +0000
Manifest this update: Sat 28 Mar 2026 07:00:31 +0000
Manifest next update: Sun 29 Mar 2026 07:00:31 +0000
Files and hashes: 1: 2xyGd4qEniBlKou_7ihYJc4dy5Y.roa (hash: lqEk1LL+Y5wccVFTi2AQMzn54se+0I/4Xp16c+5zeQA=)
2: tl47dPyTSwkhk63tfsoB2h7xhq0.crl (hash: U7atxVG/BJEQFWDyqY79bt3IfXUeE3DOXz8LLhjGvp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:90:87:ff:76:5f:b8:f0:0f:7a:26:c9:e3:93:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65e3b74fc934b092193aded7eca01da1ef186ad
Validity
Not Before: Mar 28 07:00:31 2026 GMT
Not After : Mar 29 07:00:31 2026 GMT
Subject: CN=e4aacf9c3a958cb8598c772dccc96201d15bdc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:8f:28:79:e4:5b:d5:67:5c:5b:ae:de:2e:
47:ca:d3:dc:92:ba:b4:1a:66:f5:da:46:fe:3f:f1:
0d:2b:c2:80:97:4a:0a:27:cf:f4:2f:cf:1a:54:a2:
a0:69:77:ef:0f:3c:ff:42:3a:0c:57:fd:41:56:c6:
0a:d0:b7:b4:d4:5d:f5:2d:74:c1:94:84:5e:e7:1e:
ac:2c:8d:03:35:2e:8f:f4:64:3f:7a:76:a1:bf:ef:
9b:fa:7c:72:e2:1d:ea:f5:01:82:80:88:3a:8b:2f:
45:e4:d9:36:70:5e:4d:d9:7c:c0:64:ad:d0:dc:22:
55:b2:18:a0:5b:af:58:eb:00:2e:db:e9:b6:26:4b:
1e:cc:f9:cc:eb:0e:de:bb:04:a2:ad:30:2a:d8:98:
61:84:59:53:c5:02:ff:d5:90:0f:58:a1:d9:1b:a4:
d5:f6:b8:48:04:6c:18:59:f8:7a:17:f4:e9:e9:30:
8c:f0:b3:ba:0a:fe:db:dd:de:41:04:15:8e:57:1b:
49:2e:39:19:4c:8a:b9:e9:09:c7:8f:60:d0:9b:33:
d6:fe:9c:58:65:80:41:83:73:43:a3:da:7c:4e:e1:
99:75:33:e4:b5:42:cc:dc:7c:f0:8f:2d:19:64:a1:
33:aa:c7:bd:53:b1:1e:59:a7:29:62:97:e6:2d:1e:
4b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AA:CF:9C:3A:95:8C:B8:59:8C:77:2D:CC:C9:62:01:D1:5B:DC:55
X509v3 Authority Key Identifier:
keyid:B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1b:6a:59:ef:2c:3d:85:be:69:1e:85:bb:3a:e4:22:8a:cd:
b5:60:8d:db:25:e9:ba:be:5d:d8:53:68:56:97:19:2f:a2:16:
a2:30:b8:b2:e0:ee:1d:13:cb:64:ab:00:04:b3:81:b2:47:36:
92:63:b9:eb:81:ed:de:c3:e9:52:54:a6:21:f6:3f:ff:4d:b6:
6b:aa:81:4c:d3:52:26:2e:f2:d8:c4:81:99:98:ea:0b:78:08:
c8:c3:6b:8a:07:ea:6e:b3:13:b7:dd:3c:87:d1:bc:1c:c7:1c:
63:44:53:3c:ba:67:a8:2d:38:7c:24:e4:a2:43:a9:c2:5d:c9:
1b:f8:67:12:32:17:a2:5f:f3:69:a5:f9:f0:a5:d5:87:97:cb:
7a:52:4a:04:4c:e4:5d:1a:ea:bc:ac:e6:ce:eb:df:e1:c2:95:
da:f5:81:7b:3e:11:76:59:fc:fe:e5:bc:bb:29:3b:73:e6:97:
55:28:b5:98:6a:65:ee:2c:dd:cf:0d:0c:0c:52:a8:e3:f1:99:
ec:0a:19:46:68:a0:51:02:ee:59:71:2f:d2:bd:5b:3f:4c:4e:
18:08:6b:93:53:27:92:1f:37:9b:fd:69:28:cd:2a:20:04:d3:
53:96:c4:a9:13:42:73:fd:19:3b:05:f5:7e:40:94:27:17:60:
55:e9:d0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:23:42 2026 by rpki-client