Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
File: tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft (raw, json)
Hash identifier: yXgwNcAf0yQDoOqdopXks2p2E+eX3i6htjCdksSmpWo=
Subject key identifier: 58:FC:D3:9D:F1:50:AA:C5:E0:21:4A:18:89:85:98:BE:68:79:3B:AA
Authority key identifier: B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54
Certificate issuer: /CN=b5745bb8ef0088cb519a4095d651719ef51ee354
Certificate serial: 019D265F6EBD41C75C83EEC49B3A16C25777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
Manifest number: 119B
Signing time: Wed 25 Mar 2026 19:01:21 +0000
Manifest this update: Wed 25 Mar 2026 19:01:21 +0000
Manifest next update: Thu 26 Mar 2026 19:01:21 +0000
Files and hashes: 1: 767zGTDgc7fgTufWzjR5LaKSze0.roa (hash: n8p0HPsTD9vQuShoZxl/F7SA3Y5pTSHF+ThwGTaBjvI=)
2: tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl (hash: yYWT5N9RXkSBkxp1QyiilzJB4FdtHoHpyBtj1Qivqjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:6e:bd:41:c7:5c:83:ee:c4:9b:3a:16:c2:57:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5745bb8ef0088cb519a4095d651719ef51ee354
Validity
Not Before: Mar 25 19:01:21 2026 GMT
Not After : Mar 26 19:01:21 2026 GMT
Subject: CN=58fcd39df150aac5e0214a18898598be68793baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:34:f6:20:75:7b:94:f5:c2:1f:88:47:9d:
67:e8:79:5b:87:b7:e7:e5:1e:1d:00:19:30:5b:12:
88:1f:4e:cf:b5:4d:a4:39:e0:72:12:f3:45:b5:f8:
cb:51:88:3b:11:c1:a4:e0:8e:f7:f1:52:50:05:c2:
b8:ab:59:85:56:7b:16:6e:94:7d:f2:ec:08:52:9f:
5e:25:c5:3a:6a:46:a9:97:71:90:33:19:2f:3d:74:
d1:4a:97:c9:aa:6a:1c:7d:f4:21:52:fb:55:02:19:
95:61:2a:b4:f1:23:7f:ff:d8:5b:93:2b:5e:ef:16:
bb:e1:6e:51:fa:f2:b6:de:fb:15:7a:c8:22:71:e6:
bd:e4:2a:2b:88:89:3f:a9:85:c1:0c:4f:7a:f7:39:
18:71:31:d4:6b:0d:8f:4e:4d:81:55:58:8d:dc:55:
e6:3e:94:b9:cc:83:fb:61:f9:c0:94:18:8c:bf:d3:
5f:3e:fe:55:17:22:84:75:2f:07:dc:4c:52:cb:73:
29:3b:f2:6e:8b:30:d5:f3:03:58:46:e5:12:b2:08:
08:da:c8:eb:75:43:55:f7:36:cb:f5:4e:0c:36:6f:
1d:5b:f6:9c:e4:ac:ad:f9:3c:c1:3e:1c:16:b5:fc:
14:02:6c:e9:2b:09:6b:43:5a:57:23:67:c9:dd:ed:
a1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FC:D3:9D:F1:50:AA:C5:E0:21:4A:18:89:85:98:BE:68:79:3B:AA
X509v3 Authority Key Identifier:
keyid:B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a1:40:c4:d0:eb:d1:60:6d:d1:37:3f:20:92:82:ee:7f:b6:
88:4e:99:f3:d6:00:91:41:bb:6f:ef:23:5c:83:18:4a:93:a7:
9d:ab:9c:ca:19:37:86:fc:7a:90:b3:39:ee:d0:6e:e3:a7:e6:
ab:37:33:99:a7:65:1a:de:24:f3:37:77:bc:7f:14:a7:f0:a8:
d0:59:35:5b:53:31:ce:53:3b:e3:ea:2e:17:35:76:ea:cf:bc:
e8:75:2e:4c:ca:aa:9d:5f:e4:c5:bc:04:d1:03:3c:90:c7:fe:
8c:8d:d6:bd:c6:7b:ce:1d:69:1b:de:ff:1c:19:af:76:10:46:
7b:5f:dc:21:45:70:d6:75:71:d4:22:0d:b9:ad:2a:07:3f:15:
23:74:37:4b:5b:dd:a0:f7:d7:5f:74:e1:1e:0b:0f:d6:ee:d1:
4b:63:da:d6:63:33:55:a9:54:26:b4:be:43:8a:48:a0:db:ae:
b8:73:57:ed:5b:da:95:f9:f1:8d:e6:2c:e0:bf:81:b8:b6:75:
54:1d:e9:32:fb:39:6d:b4:c1:cf:df:36:22:0f:e1:69:f8:f2:
32:ef:8a:b6:6c:79:41:1b:11:7b:9f:24:19:ec:17:e3:83:22:
3f:7b:ce:5d:e6:e5:4a:70:51:ef:b2:b6:c1:9e:95:cb:4e:5e:
08:f1:66:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:22:31 2026 by rpki-client