Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
File: tcOYwHMlxA59dtI5ahvoXEL9wsg.mft (raw, json)
Hash identifier: sat13mdEMDfQPfVJbSVNfz1+SN7kQD19zKQGcthIRCY=
Subject key identifier: 7F:12:9C:93:07:C0:49:F9:6D:1B:4C:CA:D8:F8:BC:72:58:7B:99:A9
Authority key identifier: B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8
Certificate issuer: /CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8
Certificate serial: 019D2BBC3A7318E3AC58F51CF4FCA3997194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
Manifest number: 0807
Signing time: Thu 26 Mar 2026 20:00:49 +0000
Manifest this update: Thu 26 Mar 2026 20:00:49 +0000
Manifest next update: Fri 27 Mar 2026 20:00:49 +0000
Files and hashes: 1: RCVCqspG4nYyJlueKPZjbpopS4k.roa (hash: yHItQNqKEboY2QYyZ9CN1gx2hTERLcmmpIzkhN7V0sQ=)
2: tcOYwHMlxA59dtI5ahvoXEL9wsg.crl (hash: B8woByV3C/SPkh0qk/1ns9A6u9SdD7Y/NFM/3z0ucnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:3a:73:18:e3:ac:58:f5:1c:f4:fc:a3:99:71:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8
Validity
Not Before: Mar 26 20:00:49 2026 GMT
Not After : Mar 27 20:00:49 2026 GMT
Subject: CN=7f129c9307c049f96d1b4ccad8f8bc72587b99a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:35:cb:b9:d7:a0:36:98:27:c1:e8:86:ca:50:
b9:d6:41:d2:20:02:b3:b3:10:73:c5:c7:1f:81:fe:
8e:82:c4:65:dd:a9:5a:ef:13:a7:fb:95:f7:8e:52:
d3:99:29:0c:13:bc:b1:fc:d4:5f:21:26:4e:64:58:
31:be:61:93:a3:ed:bf:68:8b:d4:05:3e:d6:fa:a8:
36:02:a5:79:d5:5d:d4:45:ea:84:cb:04:1f:c0:5e:
94:7a:4a:6c:b7:ba:0a:f0:44:f4:d3:10:8d:48:9c:
cd:85:45:c6:6c:c6:9c:d6:e4:91:7a:6c:2a:48:fd:
5e:80:90:21:52:73:c1:2e:9f:9b:4c:b9:12:26:fa:
dc:b1:7a:cc:c1:79:8e:5a:67:ec:87:fb:f1:86:2f:
4c:0b:1a:69:bb:77:86:61:35:b0:77:18:08:ce:63:
ac:7f:b7:6f:98:38:ae:69:b3:ee:2d:84:c0:8a:83:
08:74:8e:83:8c:87:b7:f3:07:83:fc:07:86:e1:e0:
d6:40:30:e9:26:44:78:74:78:22:4b:de:b8:d5:c0:
3d:1e:c7:81:44:69:d2:90:4b:64:9e:52:d7:d3:12:
28:b4:13:b1:2a:a3:5a:39:13:21:51:60:5f:d7:40:
4f:e0:5b:35:c5:99:10:49:a9:d6:5d:10:bf:66:21:
02:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:12:9C:93:07:C0:49:F9:6D:1B:4C:CA:D8:F8:BC:72:58:7B:99:A9
X509v3 Authority Key Identifier:
keyid:B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c7:40:41:ef:57:6a:df:c9:09:b2:2b:2c:2b:a8:57:db:a6:
64:e4:8c:84:82:7d:58:5e:e1:73:4b:ae:09:3a:51:ca:42:f0:
01:3e:2e:c5:91:94:d9:8d:2a:1f:76:c4:41:cb:e9:3a:49:f9:
e2:8c:b1:6c:0e:6b:f3:52:c0:f2:25:57:53:7a:03:60:2d:fd:
3b:01:c2:8a:00:28:9b:d1:f2:3c:ce:08:17:5c:c5:c1:72:43:
4a:a4:98:43:f7:a1:c0:cc:88:87:ea:a2:f7:88:ec:d8:03:4b:
67:ef:60:be:e2:ee:14:9b:8e:8e:2b:ad:f7:e2:f3:06:f3:65:
38:66:e2:9c:d0:78:9d:f2:a2:52:fe:04:9d:a3:86:ae:88:3f:
1f:1e:9d:a6:d6:43:4e:45:33:64:3b:de:6a:4c:13:c0:a2:00:
93:19:30:31:a8:e8:75:e6:ad:a2:85:84:a6:c0:3f:cc:44:f9:
09:27:79:c2:d0:1c:92:7a:90:cc:4f:0c:70:84:7f:fd:95:13:
2e:cf:ad:3b:da:03:ff:6e:0e:a7:57:b8:66:16:20:32:fe:fe:
46:05:ee:3b:3a:b5:ac:90:bb:e7:31:8c:d5:45:c3:cf:ba:4c:
30:5b:88:ba:cc:30:c4:3a:97:90:8b:0d:20:3e:7a:40:1d:a4:
60:60:67:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:00:44 2026 by rpki-client