Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
File: tVG7qYKf51krGwLo1xyP18ziGrE.mft (raw, json)
Hash identifier: wTa77ZE9XyqiLRBpjjQ7coWAh/hYxykBq7EZBHPO/do=
Subject key identifier: F5:05:72:8D:5C:0E:58:23:19:94:5D:97:9F:23:EC:A4:31:ED:E0:70
Authority key identifier: B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1
Certificate issuer: /CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1
Certificate serial: 019D2816C68FE26AC3BF009DFD19C821F17B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
Manifest number: 026C
Signing time: Thu 26 Mar 2026 03:01:14 +0000
Manifest this update: Thu 26 Mar 2026 03:01:14 +0000
Manifest next update: Fri 27 Mar 2026 03:01:14 +0000
Files and hashes: 1: iMHns26Twh_iKXADF620qDAnTy0.roa (hash: GWSmHWITFYygfJHovjbtsHzKxtolOYsM+f2kV7+EZnY=)
2: tVG7qYKf51krGwLo1xyP18ziGrE.crl (hash: 4Dz/4zFd85b+JrxvdMdD3YIfkfirjUDDhulQuIawT2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:c6:8f:e2:6a:c3:bf:00:9d:fd:19:c8:21:f1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1
Validity
Not Before: Mar 26 03:01:14 2026 GMT
Not After : Mar 27 03:01:14 2026 GMT
Subject: CN=f505728d5c0e582319945d979f23eca431ede070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:6e:c1:66:f4:0a:61:0b:c4:1e:c9:05:40:
48:02:50:19:81:be:55:d6:20:e5:1e:09:f5:3c:a4:
8b:ab:3b:1d:a8:29:82:68:8a:55:06:ed:94:9e:c2:
45:43:36:93:41:b5:3d:be:1c:51:3e:af:fd:b3:e4:
20:5c:e2:c9:52:04:9c:e0:7f:2a:5d:a3:19:59:a5:
a6:84:c2:39:e2:98:91:97:b5:74:eb:ef:3f:5a:57:
74:b1:3a:83:5b:48:4f:5e:ef:e2:a5:b2:ed:d4:45:
a6:83:95:45:fa:91:46:15:12:72:17:db:2f:b7:26:
30:c3:18:0b:ce:93:b2:72:9a:71:c1:a7:0d:44:f3:
e0:5b:4f:5e:ae:0c:19:c8:80:c8:d5:9d:02:0b:c6:
a7:41:37:fe:e8:8d:0f:42:34:d9:a6:f1:ef:9d:24:
85:cd:fd:0e:cb:9d:24:fb:97:c3:a0:52:aa:00:cd:
e7:20:05:7f:a2:2a:78:f8:31:43:d9:0c:7f:2d:ad:
3a:74:81:db:34:ea:aa:db:94:0b:dd:4b:cb:a5:f8:
5b:85:db:51:e1:6c:b3:43:85:43:3b:b2:fe:f5:e1:
49:c6:f4:e6:af:e1:af:7d:30:be:c7:19:f8:11:01:
e7:fc:ab:33:33:6a:3b:24:92:f0:bc:35:e7:5d:05:
dc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:05:72:8D:5C:0E:58:23:19:94:5D:97:9F:23:EC:A4:31:ED:E0:70
X509v3 Authority Key Identifier:
keyid:B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1c:17:cc:a2:ec:95:9f:af:a8:83:c8:54:dd:f6:c2:c6:78:
57:94:bf:79:78:28:61:cf:aa:f2:ab:5a:b5:99:fb:88:5d:ec:
54:3b:f1:b0:64:bd:9a:ef:47:32:81:0b:4c:d8:f2:80:d2:49:
b1:11:df:90:ca:33:01:a5:23:bd:28:bc:84:02:4f:03:d6:da:
bb:c8:d2:16:21:db:fb:da:cf:77:de:e5:4e:b8:e6:fc:0b:0b:
9b:dd:d8:54:2b:42:22:48:dc:63:9d:d8:8c:40:fd:93:33:d2:
e9:72:5b:cf:6b:e1:89:4e:c1:57:5c:a2:10:3b:79:44:a1:0c:
ec:b9:91:a7:33:2d:e3:ee:2c:52:05:0a:d9:b6:d5:41:78:52:
6c:bd:29:ac:6a:7b:47:32:35:7b:e3:7e:98:cf:30:45:ad:48:
7e:ac:a7:42:e3:f1:4f:aa:30:54:72:29:c7:7e:83:18:94:7f:
6a:ac:6a:4a:d4:9f:09:ac:1b:f1:9a:a2:53:f4:13:75:8d:fc:
99:ea:e6:d2:08:18:bb:1d:f0:85:b0:8a:99:97:fd:84:5e:62:
2f:9b:3b:5d:ba:e6:21:46:99:78:11:b5:76:c6:21:fe:65:a9:
26:c0:27:91:91:9d:d3:f9:07:e4:21:3f:96:cb:63:b9:7b:01:
11:86:bc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:18 2026 by rpki-client