Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
File: tXikYahZ3cmGwIqI6VEtXD0iEOY.mft (raw, json)
Hash identifier: 5Lywi0d99hhCycSoJBtKO+IPuOOZ81cYB5LsmLMw9/Y=
Subject key identifier: 21:B7:B1:0C:70:EA:C4:68:C5:75:93:2D:4B:EC:7D:85:6F:8C:5C:34
Authority key identifier: B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
Certificate issuer: /CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Certificate serial: 019D26CD06D568A49E7AC7F657C87BB11487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
Manifest number: 1568
Signing time: Wed 25 Mar 2026 21:01:03 +0000
Manifest this update: Wed 25 Mar 2026 21:01:03 +0000
Manifest next update: Thu 26 Mar 2026 21:01:03 +0000
Files and hashes: 1: dQ2JSeRkXtpAwYOMmqrJulKnPek.roa (hash: gnIi6rzRodMaHa0HwkkgHYuXAe1/OxH3oVCHWvHcN8Q=)
2: f6m0hqb0BBxiTxktGTcPrNXvB2g.roa (hash: wEO7iV67QNAygsspSwBpIYn+S9XY1EpUPceKq+Gbr8U=)
3: tXikYahZ3cmGwIqI6VEtXD0iEOY.crl (hash: Tdo/No3olIEA3YZW2Amv/GD/lJgsxBeoJzPOj0SxoMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:06:d5:68:a4:9e:7a:c7:f6:57:c8:7b:b1:14:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Validity
Not Before: Mar 25 21:01:03 2026 GMT
Not After : Mar 26 21:01:03 2026 GMT
Subject: CN=21b7b10c70eac468c575932d4bec7d856f8c5c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0e:15:eb:13:2f:7c:dd:1a:73:1f:89:31:59:
5a:a6:a1:27:ce:09:3c:64:64:a7:fe:1f:71:ef:79:
5f:9d:24:45:41:78:df:7f:50:bd:08:59:23:4c:7b:
82:31:27:34:df:ca:a2:ff:93:e2:a5:a1:b1:cb:bb:
c3:88:ce:7a:d2:d3:79:e9:2a:40:76:9b:fb:71:a7:
63:fa:85:65:b7:ce:13:b0:9f:d9:7a:a0:19:66:c3:
62:bb:b3:9c:1a:11:79:5a:29:f0:c5:18:df:40:f2:
15:a2:f4:f1:ac:0c:e0:22:87:a9:59:cc:5f:5d:dd:
5c:77:0d:9e:44:9f:a3:31:a1:ca:4e:0b:7e:e6:40:
df:6f:f9:3e:5c:0e:99:24:ba:b0:8b:63:a2:e6:a3:
06:57:ea:b7:ad:23:c8:c7:9d:43:d4:49:7b:5a:a5:
67:65:d2:01:ad:ac:46:84:3e:00:e8:3a:96:93:6b:
dc:0c:52:d1:3b:ed:59:53:dd:4d:85:ec:f3:0a:37:
ca:29:1c:e9:fb:30:f4:83:ef:71:c3:8d:16:48:78:
cb:54:1b:93:de:0a:fe:ee:95:41:d6:64:9c:24:b8:
0d:21:e8:05:90:5c:78:ee:e6:4d:1a:a2:76:69:f7:
55:35:15:8e:81:aa:ae:1e:bd:c2:db:28:23:11:9d:
0a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B7:B1:0C:70:EA:C4:68:C5:75:93:2D:4B:EC:7D:85:6F:8C:5C:34
X509v3 Authority Key Identifier:
keyid:B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a7:91:d9:6d:d5:c9:8e:a4:b8:1c:c5:cc:07:d6:93:de:e8:
da:13:d8:56:60:99:1b:fc:56:f2:62:a1:22:d1:25:63:c3:9f:
27:9e:8c:76:70:0c:34:d3:26:93:68:b9:5c:50:80:3d:81:8e:
ef:33:a2:f8:bc:b5:3f:e8:f8:a2:df:e6:05:9e:35:0b:c0:e7:
51:fa:cc:d3:d5:ab:57:3a:2a:ad:10:fd:97:dd:d8:ba:c9:a3:
c6:60:7c:e0:36:53:ad:b0:47:c0:15:da:a4:96:3b:9f:c5:10:
a7:22:d3:68:8e:c0:29:da:d1:85:a0:78:8c:84:91:cf:7c:3b:
cc:6a:f7:b3:42:de:fc:b6:36:c5:aa:d3:9f:25:18:7c:59:bf:
4b:a2:04:ac:5c:34:52:93:5a:2b:6b:8e:6a:46:b6:e8:bc:9e:
d7:12:83:52:2d:51:7a:44:11:b0:cf:0d:a8:3f:25:a7:46:bf:
b0:1f:78:3f:e7:f7:96:75:a5:d9:0f:54:34:8d:17:24:da:72:
20:4a:4c:5f:a0:16:db:43:5f:97:39:98:90:c2:9d:2a:ce:c7:
13:c9:cf:1e:6e:f8:be:e2:76:d3:e3:33:88:3b:7d:75:47:ce:
02:2e:7a:8f:40:cf:0a:f0:31:ca:dd:36:ee:4f:64:30:9c:8a:
ab:13:fc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:22 2026 by rpki-client