Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
File: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft (raw, json)
Hash identifier: ZSjyFnzpiIA7JtxxZlfS5MjGOlIa24JbA1uk8zrhHYI=
Subject key identifier: D4:14:73:D8:0C:C6:60:66:1B:DA:13:7A:A7:95:AD:24:6B:2D:A6:DA
Authority key identifier: B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
Certificate issuer: /CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Certificate serial: 019D25833216B8C7972E2CE437B084185FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 15:00:48 +0000
Manifest this update: Wed 25 Mar 2026 15:00:48 +0000
Manifest next update: Thu 26 Mar 2026 15:00:48 +0000
Files and hashes: 1: UqqJVc2LmDSoG37tyF_Y4rZTJNo.roa (hash: 3t/K9ONoo6YmeusIuo36eGNhkP5aHMKXreL77QnBjxI=)
2: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl (hash: JSpN8qJRfRr3kokH1l/X//N70iZ+Gt/HlrdqwCjh73M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:32:16:b8:c7:97:2e:2c:e4:37:b0:84:18:5f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Validity
Not Before: Mar 25 15:00:48 2026 GMT
Not After : Mar 26 15:00:48 2026 GMT
Subject: CN=d41473d80cc660661bda137aa795ad246b2da6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:3e:48:30:c7:ca:de:4b:bc:10:c2:2b:0e:
00:37:f0:ea:50:ff:32:fc:83:d4:37:8a:94:92:71:
57:dd:65:d3:0b:97:a2:56:98:8d:f9:d7:77:08:cb:
d3:47:50:eb:04:5a:08:ee:d8:45:f7:4c:56:d5:d5:
5e:1f:af:ce:1b:dc:72:50:e8:7c:28:05:ef:75:cd:
79:52:39:e4:05:7d:bd:19:d3:f0:43:59:4a:c5:53:
f4:01:25:33:45:f9:30:d8:4c:ba:d6:c1:e7:3b:82:
5c:58:1c:ef:28:16:d0:0c:6d:37:b3:2f:97:70:6b:
04:6b:08:dd:f0:2e:4a:ca:67:50:a5:6f:a3:92:66:
4d:f1:ea:8a:32:bd:c2:9f:f5:76:3f:5f:81:f4:79:
f2:11:4d:d1:cf:37:78:e9:6f:00:bb:bf:b7:06:98:
eb:7e:17:b6:ea:db:64:f4:7b:82:c1:8e:9b:78:21:
8f:52:25:cf:6d:56:84:27:16:95:21:a4:00:f8:50:
97:1d:97:62:a0:3e:33:98:d5:4f:74:1b:3e:d9:30:
a5:18:02:dd:ff:83:47:f0:20:c7:71:16:d4:16:2a:
0e:5d:97:55:26:32:ef:04:77:5f:ad:37:b7:88:15:
e9:3c:e0:df:ad:00:b9:e0:51:e9:c0:eb:07:ca:c2:
5d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:14:73:D8:0C:C6:60:66:1B:DA:13:7A:A7:95:AD:24:6B:2D:A6:DA
X509v3 Authority Key Identifier:
keyid:B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a7:1e:8f:e4:a3:14:2f:81:07:ac:05:0f:62:14:8c:8f:f3:
60:df:e9:fe:3c:50:d5:50:56:7d:55:7f:6f:d3:b1:3b:85:58:
59:9d:84:3a:a8:50:ac:e2:a0:cf:42:57:25:33:ed:76:42:09:
13:42:43:e9:28:3b:4c:b2:fd:7d:41:c0:56:b4:a0:f3:cc:bd:
34:71:19:cd:32:02:c3:09:e4:4b:e5:78:dd:dc:20:18:f4:90:
e2:3a:0d:59:82:9f:bb:74:dc:bb:8b:86:0c:2c:fc:b2:87:c1:
e3:1e:17:09:63:df:e8:94:e5:02:9f:35:88:d5:17:fd:04:70:
9c:49:b7:8a:18:2e:70:5e:8a:89:7b:77:07:7c:54:3b:54:22:
44:59:1c:8f:e0:16:79:4a:e6:13:e3:d9:1d:f0:3b:f5:b7:77:
dd:11:9b:12:c3:a9:fd:c0:14:ad:eb:a1:9d:12:8b:cd:73:f3:
c4:97:b9:f5:df:92:2b:a1:09:4e:97:14:9d:e5:81:db:cf:0c:
90:21:c1:06:59:00:95:9b:64:a4:33:0b:4e:69:a9:19:ae:f4:
ec:9b:21:6e:e9:cb:ca:9c:b4:a1:fa:7e:49:b8:9b:68:02:6f:
e1:f4:24:67:fa:7e:a9:05:a3:4a:05:38:f4:32:a4:1e:39:af:
00:e4:12:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:48 2026 by rpki-client