Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
File: txUfGUo-UkyCxne44TIFgUPI6-4.mft (raw, json)
Hash identifier: TxqJyZDHGQkqlcNqYmQWRr/FLVrkAmYxD6eq6PuzzTw=
Subject key identifier: 14:E6:8F:02:DC:9F:5E:12:3F:D0:35:92:81:B8:A6:1D:7C:01:D5:9D
Authority key identifier: B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE
Certificate issuer: /CN=b7151f194a3e524c82c677b8e132058143c8ebee
Certificate serial: 019D2772A057C4DD2DFD4C01927F33F2071C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
Manifest number: 144C
Signing time: Thu 26 Mar 2026 00:01:56 +0000
Manifest this update: Thu 26 Mar 2026 00:01:56 +0000
Manifest next update: Fri 27 Mar 2026 00:01:56 +0000
Files and hashes: 1: FuuoUq0ErJJHtMLQT9iqBdJZVZ4.roa (hash: iQAXcdlMsShf9N3vl6PkzkIzqC0xp7S/U0y7K1RhcEU=)
2: txUfGUo-UkyCxne44TIFgUPI6-4.crl (hash: c/5eclxRo15lTcmz05/JJzZEjz7G/602FLxSq1fUeT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:a0:57:c4:dd:2d:fd:4c:01:92:7f:33:f2:07:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7151f194a3e524c82c677b8e132058143c8ebee
Validity
Not Before: Mar 26 00:01:56 2026 GMT
Not After : Mar 27 00:01:56 2026 GMT
Subject: CN=14e68f02dc9f5e123fd0359281b8a61d7c01d59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:85:77:c5:18:c0:dd:30:90:88:37:3e:b5:92:
bf:26:a2:a1:e6:69:ee:9f:5f:f5:20:6d:7e:f8:3c:
c7:0e:f7:73:65:61:49:c7:cb:79:44:d4:ef:2f:a7:
bf:33:a0:00:91:78:e4:42:d2:df:8a:e3:0c:d6:ee:
6b:6c:05:6b:5a:de:89:5c:a5:52:5a:14:49:b4:8c:
bc:53:45:3f:3d:31:fd:7a:ed:39:f9:de:a0:e1:e3:
a3:42:6b:ef:da:14:f4:c3:3a:b1:53:f4:eb:b5:c3:
97:8f:f4:66:6c:28:ad:17:43:dd:6e:44:aa:fd:de:
f1:a4:b0:8e:a1:67:e7:9f:95:f1:04:88:cb:52:95:
b3:b8:ce:4c:54:98:42:e6:1b:54:12:1e:a0:22:e9:
70:ca:82:05:c2:e2:b6:e4:31:37:a9:55:cd:1f:52:
4e:fb:69:b1:e6:21:15:11:34:2e:0c:b2:d9:da:58:
90:11:d6:d3:09:db:7d:38:7d:a7:11:f7:7d:73:7d:
55:f6:11:fc:83:55:c6:8d:54:32:fe:6f:da:ae:7a:
38:f1:a2:c2:7b:94:fe:bc:3e:94:a7:bc:d5:a4:11:
c3:e5:21:11:a7:f6:9e:4d:89:22:04:b9:9c:95:7d:
8f:5b:ba:44:df:5a:28:fa:38:e5:1a:35:08:65:cb:
79:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E6:8F:02:DC:9F:5E:12:3F:D0:35:92:81:B8:A6:1D:7C:01:D5:9D
X509v3 Authority Key Identifier:
keyid:B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a3:4a:50:13:90:15:63:e8:6a:65:1f:f9:4a:de:20:3d:a0:
40:15:c4:c8:35:ec:c3:d5:fc:8f:d5:26:04:41:c0:2f:83:49:
4b:14:cb:9c:6c:be:35:d6:9d:b5:0d:12:27:45:03:ee:53:7f:
e2:cc:74:e6:ee:61:74:66:a6:99:73:32:5c:f6:17:b4:f4:36:
d7:c4:e2:f1:15:8c:78:0e:fa:8a:1b:bb:e8:60:19:8a:ae:8e:
41:10:ba:e4:1f:27:61:3f:e4:05:55:e6:52:6d:20:8b:e0:8c:
b0:04:3e:d1:13:14:5d:49:bd:72:5b:68:d1:d0:7d:bd:d0:86:
dc:13:04:c3:ca:bf:3e:4e:aa:d9:07:6b:ca:1d:a7:9c:4a:85:
b4:22:de:fc:f1:e1:3b:9b:93:3e:5f:89:f6:29:1d:c3:fa:fb:
c7:73:14:41:20:98:c5:58:21:80:f6:eb:4f:e1:02:5d:52:c2:
fb:94:61:39:c5:8a:2c:d9:a0:e5:94:02:98:95:ea:e8:9e:17:
5e:dc:16:b1:e5:47:95:43:f3:3b:7a:fc:f8:50:f8:f6:63:d5:
f6:59:a0:9f:80:5b:dc:7a:f8:ac:09:3f:f4:2a:59:82:31:ee:
7b:d9:28:04:9d:8f:9e:a6:fb:8b:be:64:80:82:e9:3c:99:e8:
ff:48:5d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:06 2026 by rpki-client