Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
File: tsAN1rE41q2498hDjdCy2Fg9xWY.mft (raw, json)
Hash identifier: wOLFKEvBpCdfkrDifryy0cGkOk5cIuZBFXEfu+3FlRI=
Subject key identifier: BC:0A:F6:4B:50:46:D5:41:79:B7:31:4B:BB:3F:13:BD:68:B7:AA:B4
Authority key identifier: B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66
Certificate issuer: /CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
Certificate serial: 019D2A729714E06EE074B234C16E62AF3251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
Manifest number: 012D
Signing time: Thu 26 Mar 2026 14:00:45 +0000
Manifest this update: Thu 26 Mar 2026 14:00:45 +0000
Manifest next update: Fri 27 Mar 2026 14:00:45 +0000
Files and hashes: 1: 9h9e6R0rqbyhkdydEjqTZrkWQxM.asa (hash: L3iLuEzCPk6Gw29gfGqHU9jLoff62sEQn25lEVcMyvM=)
2: tsAN1rE41q2498hDjdCy2Fg9xWY.crl (hash: fTZl2WGEeLfwZDeMFrhfKOfUppMQqtINu6ny/fCmn9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:97:14:e0:6e:e0:74:b2:34:c1:6e:62:af:32:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
Validity
Not Before: Mar 26 14:00:45 2026 GMT
Not After : Mar 27 14:00:45 2026 GMT
Subject: CN=bc0af64b5046d54179b7314bbb3f13bd68b7aab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:82:84:c6:fa:6c:53:85:4c:f1:fc:9a:e7:
ce:1c:9d:2e:5c:47:8e:25:a5:fe:df:8a:97:f4:a5:
21:f1:f3:0e:29:e6:63:b3:50:b6:57:d5:b9:cc:b5:
ee:32:22:44:1c:3d:72:f6:ba:f5:01:a5:4c:ba:bf:
05:fd:b5:05:dc:68:88:63:48:36:5c:55:73:c0:dc:
4e:6a:73:75:b5:95:42:f7:13:3d:22:32:51:2d:14:
0f:d1:cb:d9:78:34:6e:7d:07:21:cb:65:0f:24:94:
56:da:b9:ad:1a:08:bc:24:d0:8c:a9:ef:61:eb:dc:
0b:9e:2f:58:c1:30:af:cf:bf:8e:ce:d0:6e:db:16:
ce:c1:25:91:70:85:0c:1f:80:2b:3f:a7:a0:fc:64:
52:e1:ca:63:f1:4d:a7:b9:19:1e:7d:df:37:f2:a7:
62:b6:1a:a0:79:7f:6a:87:2f:7a:b6:60:8b:ad:7c:
f4:fb:f5:31:47:c9:84:bb:92:9d:0c:43:87:83:06:
ec:83:66:60:1b:7d:04:a8:fe:a5:bc:36:47:5d:9c:
bf:55:55:49:a1:30:9f:f1:f5:bd:13:41:01:28:4e:
7f:4e:dd:30:f1:90:35:5f:56:45:7c:5d:3d:16:2a:
64:54:e4:94:e9:bf:21:dc:d7:a7:56:54:6b:65:10:
3d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0A:F6:4B:50:46:D5:41:79:B7:31:4B:BB:3F:13:BD:68:B7:AA:B4
X509v3 Authority Key Identifier:
keyid:B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a5:80:bf:84:0a:f3:7f:60:01:b2:34:82:cd:fd:9c:97:b9:
ff:7f:03:f9:51:4a:17:8f:07:14:5f:b9:99:4b:2d:6e:19:ee:
72:b5:04:c6:de:43:b2:55:05:ad:4a:8d:c4:22:f2:cf:87:19:
b1:a4:47:31:27:21:58:09:8d:22:b6:f9:cd:58:e6:bf:57:9f:
20:31:8a:c3:00:0d:39:e4:cd:e1:37:2a:d9:95:f0:a7:da:04:
a7:38:74:9e:86:c1:d6:9f:d5:4d:c1:62:0a:e7:35:d1:86:4a:
5d:85:19:66:af:70:85:ad:d7:a0:38:d3:70:27:da:88:be:51:
29:1f:37:89:37:f3:a8:0e:98:f5:17:fe:d8:0c:e5:f3:94:6a:
ef:1c:b9:f1:a0:cd:fe:2f:a7:5e:31:ff:ba:d7:f9:66:0e:4d:
1c:29:76:1a:d2:08:67:f4:88:cf:89:96:80:e6:e4:22:2c:42:
7e:0a:42:61:c0:95:ea:5f:60:e1:9f:7c:d5:1c:ba:a5:32:0c:
a7:68:e4:f0:99:4c:6c:dd:ad:cf:75:79:a3:f8:21:be:ba:f1:
61:f3:37:58:02:0c:de:a1:a3:dc:4d:ce:38:c2:3a:1c:55:e7:
01:7f:6a:6d:db:c3:a6:1a:6d:f9:7c:13:1d:14:b9:65:f7:4b:
bf:f4:6c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:38:56 2026 by rpki-client