Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
File: temngBMLfFKwEP1xOL8LcjviB8M.mft (raw, json)
Hash identifier: g+VC8N2cstpkHNBNvsm5zhGKvxRwZPJiqGJQBQvTtBI=
Subject key identifier: 57:BA:1A:2F:2D:4E:3E:6E:3B:02:A3:CD:28:7D:F0:72:68:18:0E:DC
Authority key identifier: B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3
Certificate issuer: /CN=b5e9a780130b7c52b010fd7138bf0b723be207c3
Certificate serial: 019D26CD2502B722246596601D70E2178253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
Manifest number: 0789
Signing time: Wed 25 Mar 2026 21:01:11 +0000
Manifest this update: Wed 25 Mar 2026 21:01:11 +0000
Manifest next update: Thu 26 Mar 2026 21:01:11 +0000
Files and hashes: 1: XK4jmQahuth1ksHKvfSKZHw4O4k.roa (hash: HOS4Mo0lMShnRJy+eymXqqXP6xNK5jIv2ocZGo8DAM8=)
2: temngBMLfFKwEP1xOL8LcjviB8M.crl (hash: CTDWxT5N1b5pOeM5X4NJNLHMxbSmNO7pOBjYMsqX4fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:25:02:b7:22:24:65:96:60:1d:70:e2:17:82:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5e9a780130b7c52b010fd7138bf0b723be207c3
Validity
Not Before: Mar 25 21:01:11 2026 GMT
Not After : Mar 26 21:01:11 2026 GMT
Subject: CN=57ba1a2f2d4e3e6e3b02a3cd287df07268180edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:73:45:28:5b:3b:30:c5:a5:48:79:fe:9a:d1:
c2:ca:a0:09:d9:08:03:3f:fa:c0:8e:f5:13:71:4b:
55:ca:9e:40:09:0b:34:86:d9:7b:6d:f3:35:b2:87:
ad:72:e9:10:5b:3c:ff:87:75:50:11:8e:67:19:94:
db:0d:82:0f:05:45:6a:81:05:e3:a7:47:09:60:a1:
ce:fe:2f:3b:c0:42:9d:06:55:ff:58:c4:a5:fc:72:
3f:e8:42:3e:9d:80:24:8a:90:3d:97:3a:11:6e:9e:
91:8f:94:4e:a1:de:c7:7b:c1:33:3b:bc:d0:41:c5:
81:85:2b:f2:4a:59:96:43:3b:a5:5f:2b:7a:2d:34:
31:88:8c:6e:c5:b9:12:aa:16:00:22:0e:97:75:0f:
71:c9:74:08:b7:2f:02:ff:ae:77:2b:ad:59:c0:c6:
8d:37:ec:6a:8c:a0:06:21:4b:d0:6c:bb:1c:81:50:
bc:89:a3:e3:5c:39:3a:9b:43:cf:d8:ec:e8:16:c9:
51:3d:96:12:4b:65:14:74:fe:d6:61:70:c4:8c:ca:
00:71:99:fb:74:6b:7c:bb:0f:35:bf:9b:a0:10:02:
46:21:31:2a:e9:f0:72:c4:36:3a:90:be:58:39:d3:
e0:24:28:1d:94:8f:2f:14:6c:1e:32:58:41:0b:7f:
49:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BA:1A:2F:2D:4E:3E:6E:3B:02:A3:CD:28:7D:F0:72:68:18:0E:DC
X509v3 Authority Key Identifier:
keyid:B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:18:5f:fc:0b:66:ad:a8:eb:29:74:c6:b9:35:5f:3c:e0:ae:
e9:17:3f:8c:24:52:9f:ba:4d:dc:d0:22:49:a7:a0:a8:16:7a:
c5:23:19:74:d7:e6:26:8b:d2:1e:f4:77:39:15:6c:54:e9:79:
40:ef:25:37:f8:c5:ff:7d:cb:82:90:0d:a3:8e:b4:f1:5e:08:
12:8a:ae:8f:04:ce:0e:c7:79:c5:f1:87:81:d6:65:20:23:f8:
63:ac:de:b3:c9:c0:62:e6:25:38:15:d9:24:b6:88:bd:61:28:
3c:c8:f3:7a:e7:15:2f:2f:75:72:5a:1a:e6:61:96:8c:9d:10:
1d:d8:46:39:0b:20:b0:45:a5:91:de:d7:26:48:b9:68:5b:38:
5c:2b:20:79:e8:a5:04:eb:0f:36:0c:a6:31:0e:fb:ec:64:32:
0c:16:32:78:81:c8:0b:6a:db:79:0a:62:fc:cc:76:40:4d:31:
2e:0f:fb:3e:d2:ff:c0:2a:37:66:17:16:be:c6:43:a0:3f:4c:
84:aa:9b:4f:bc:7f:3f:30:3d:e4:40:79:a7:e2:48:e4:f7:01:
df:d0:05:6d:be:ef:61:ec:e4:49:02:1f:7d:69:34:87:f5:5c:
dc:0e:25:d7:a7:36:2c:3e:01:63:77:be:16:77:18:02:1c:ed:
1f:c8:0f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:02 2026 by rpki-client