Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft
File: tRFbXBJF3DDhIwQHnslKNe1SfGY.mft (raw, json)
Hash identifier: 9rJx6YJAx45voXf91F2sOWkDnePDFgfbLDonxfofdj8=
Subject key identifier: 4D:91:AF:D0:1F:AD:AB:30:06:30:B2:04:F5:50:6D:72:90:75:BE:56
Authority key identifier: B5:11:5B:5C:12:45:DC:30:E1:23:04:07:9E:C9:4A:35:ED:52:7C:66
Certificate issuer: /CN=b5115b5c1245dc30e12304079ec94a35ed527c66
Certificate serial: 019D25841CB63DB7BAB458D244453B630410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRFbXBJF3DDhIwQHnslKNe1SfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft
Manifest number: 0247
Signing time: Wed 25 Mar 2026 15:01:48 +0000
Manifest this update: Wed 25 Mar 2026 15:01:48 +0000
Manifest next update: Thu 26 Mar 2026 15:01:48 +0000
Files and hashes: 1: VwLAIV5D66a6FPS07LFDWIQS-_0.roa (hash: T9H++z3WO1CHzgCbp0BP6ZLUx+OwVcmGlNY7g9M8Uf4=)
2: tRFbXBJF3DDhIwQHnslKNe1SfGY.crl (hash: uCnnT4J113CQFtbsCmZ6d6xCcxHO4q+V8mrlnOyrpio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRFbXBJF3DDhIwQHnslKNe1SfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:1c:b6:3d:b7:ba:b4:58:d2:44:45:3b:63:04:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5115b5c1245dc30e12304079ec94a35ed527c66
Validity
Not Before: Mar 25 15:01:48 2026 GMT
Not After : Mar 26 15:01:48 2026 GMT
Subject: CN=4d91afd01fadab300630b204f5506d729075be56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:2a:c6:e5:3f:cf:e5:11:a3:6b:74:ad:17:
1f:ec:88:bc:78:35:59:e7:ae:7f:09:71:1a:2e:fc:
20:68:09:56:f1:9a:c5:cd:f4:4c:97:44:fe:0e:67:
32:d3:c9:2e:93:b7:7b:3f:a3:a9:0d:4f:03:67:18:
35:21:aa:03:39:74:ef:83:d7:40:86:4c:dd:5c:0d:
27:1c:34:87:1e:d1:76:7a:09:ba:29:fa:a0:08:9f:
34:ea:e7:45:00:3a:0f:29:e4:44:b5:ce:89:26:2b:
e5:f3:bd:60:8a:2a:8b:ef:41:90:44:77:5f:da:d3:
9a:fd:a4:b0:2e:92:32:a1:fc:d3:f6:f1:46:93:7f:
44:74:c6:7b:7a:c3:38:87:9e:ac:32:09:b0:d7:55:
fd:12:7e:f0:0b:27:64:26:1b:61:96:2a:7f:0e:0b:
bd:eb:20:c7:79:15:b5:21:b5:1d:46:03:51:37:23:
ce:30:d7:41:30:e9:ac:8c:03:6d:a7:06:7e:e3:c0:
32:4f:54:cb:7b:cb:b3:37:47:45:38:8d:5f:87:49:
e6:6c:a6:3d:b8:8a:b7:67:c0:5f:31:7a:51:41:c9:
d1:9a:5c:a6:79:66:06:ad:53:bd:a1:44:76:a5:d7:
99:65:cf:61:2b:02:25:96:7b:2c:37:9f:43:b3:0b:
8d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:91:AF:D0:1F:AD:AB:30:06:30:B2:04:F5:50:6D:72:90:75:BE:56
X509v3 Authority Key Identifier:
keyid:B5:11:5B:5C:12:45:DC:30:E1:23:04:07:9E:C9:4A:35:ED:52:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRFbXBJF3DDhIwQHnslKNe1SfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:23:48:cb:bc:76:e1:f9:db:ca:6a:6e:73:bb:77:04:63:ff:
d8:a0:d9:eb:ba:5f:6c:ca:51:3f:db:f7:a4:b9:22:33:43:fd:
7c:eb:43:92:49:e8:9d:54:4f:89:de:14:af:61:db:f3:5b:63:
55:20:c8:5c:b1:2a:b6:5c:cd:3c:e6:53:11:62:e5:da:40:c8:
b8:63:1a:37:a6:1a:d1:9a:6e:40:8d:a2:17:ae:10:f9:bd:5d:
0b:d6:d8:dc:55:2f:07:8d:a2:91:37:f4:bc:46:c4:5b:c8:3b:
9b:5d:61:a9:30:9f:14:e9:27:5e:39:7e:40:b5:91:25:59:73:
7e:6f:be:5b:53:32:ea:c6:b9:34:ea:ca:e3:50:03:a6:5f:5f:
d2:e4:1a:cb:45:c8:42:22:02:b4:9c:3c:02:a4:08:44:53:36:
56:17:0d:51:ea:cf:c1:d2:43:46:9a:85:43:aa:4e:3b:68:29:
ea:60:b0:f8:98:ac:1b:71:78:f7:18:62:3f:10:b8:79:d8:9e:
d2:c4:70:9a:39:df:7e:c6:de:d7:84:bb:65:9f:99:11:dd:d2:
e1:44:cb:28:f4:b7:67:50:dc:0c:6c:5e:c3:42:a6:7b:dc:96:
80:ba:e4:49:c6:3f:0a:da:bf:b4:4b:05:53:7b:ee:34:8a:82:
a5:14:95:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:16 2026 by rpki-client