Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
File: tGTgryi3VcTsiAENlCmGl9GIOTM.mft (raw, json)
Hash identifier: SzpuqfEvYv1uU4eprhEKpgSVJwwUaikzXHWUgJ6rM/o=
Subject key identifier: 2F:41:55:B3:5B:0F:6D:7A:C6:72:72:93:05:20:D6:02:12:84:7D:32
Authority key identifier: B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
Certificate issuer: /CN=b464e0af28b755c4ec88010d94298697d1883933
Certificate serial: 019D2816C6847B0DF6B565C2CEE3560F2A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
Manifest number: 0A4B
Signing time: Thu 26 Mar 2026 03:01:14 +0000
Manifest this update: Thu 26 Mar 2026 03:01:14 +0000
Manifest next update: Fri 27 Mar 2026 03:01:14 +0000
Files and hashes: 1: dT7xB_AVDGhZ5iHb3OqIlsrmGmQ.roa (hash: 9I6NB6tgwzenrbz6TZapLlG56NaY3o8KJFSGZlT7HFk=)
2: s1suhFRxtQqXFfjNjSFyRNz1-dY.roa (hash: B73+BcivVDYXNoW7reCUol9H0cBeuwXyj3jXoDEGt/E=)
3: tGTgryi3VcTsiAENlCmGl9GIOTM.crl (hash: T30eREip74RRTkmD9YavidffQAY/74mEvJu7YlNPJJY=)
4: urEWBZOnm7WKMhvQTm1izzcCYag.roa (hash: FEAeulBV1KrK3TH9JavCA4eeT7PWhs/mcBsPYnO8hB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:c6:84:7b:0d:f6:b5:65:c2:ce:e3:56:0f:2a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464e0af28b755c4ec88010d94298697d1883933
Validity
Not Before: Mar 26 03:01:14 2026 GMT
Not After : Mar 27 03:01:14 2026 GMT
Subject: CN=2f4155b35b0f6d7ac67272930520d60212847d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:1c:a2:20:89:88:fb:55:0c:9d:f5:6f:49:
97:5f:cc:38:a4:fc:87:f7:7a:83:b2:72:41:e8:3f:
ea:d9:9d:be:f2:45:a2:18:35:72:e0:ce:61:8a:14:
ea:0a:e9:ba:4d:d3:12:be:c0:a6:7f:a3:eb:8d:4f:
3e:33:fc:fb:ed:aa:27:5c:d9:97:6a:4a:a6:29:a3:
26:f8:c1:14:71:34:af:ee:e4:6a:f7:31:c5:e1:ee:
65:a8:27:f9:57:e5:06:c8:c4:8a:12:b6:c8:ed:76:
b4:0e:28:a6:83:42:45:47:d5:9b:b4:c7:14:e6:e7:
b0:8c:e4:95:6f:f3:4d:22:c1:13:13:0c:e0:fb:bb:
35:5b:4f:26:92:84:01:76:42:85:96:85:c5:f6:b2:
c2:48:f2:98:90:94:39:6e:0a:cb:0b:05:8a:2c:df:
41:57:b4:35:79:89:9f:a1:81:1b:5b:3e:46:f3:5b:
64:e9:1d:a2:83:a8:a4:be:8c:15:d1:70:4c:87:92:
9b:63:1a:38:db:0d:bd:c2:3b:37:38:dc:45:53:41:
c8:af:14:57:9b:07:64:e7:d7:6d:4b:99:6c:53:28:
75:8f:47:bc:f5:e2:fc:a4:3a:e2:b7:58:ff:f3:37:
1c:46:30:dc:a0:d7:33:83:37:32:e1:39:ba:f3:ce:
a8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:41:55:B3:5B:0F:6D:7A:C6:72:72:93:05:20:D6:02:12:84:7D:32
X509v3 Authority Key Identifier:
keyid:B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0a:74:3d:48:d2:9e:b9:d8:85:1a:67:e4:dd:55:3d:34:89:
4c:ab:1f:5a:fa:3b:e4:2f:66:f5:06:16:39:13:32:7b:70:08:
90:55:ae:79:d9:41:23:d9:7b:ed:46:e4:df:14:fc:e1:a1:29:
3c:0a:eb:4b:10:7a:58:a1:78:19:3f:39:71:8d:f8:aa:e1:7a:
4f:fd:35:3f:6f:db:c7:a5:c6:0f:a3:31:36:2e:a2:80:a3:00:
e0:f7:d4:ee:e8:1d:3c:2a:6b:a0:12:f5:37:3c:5e:7e:22:37:
48:82:99:22:37:47:0c:ee:ef:7c:ef:88:fe:0a:1c:28:ff:8f:
df:39:22:e0:bc:2c:40:c9:db:51:3d:95:fd:fe:2e:43:87:91:
be:81:2c:86:65:ac:87:a6:b2:63:49:ef:d9:7b:ae:3b:63:ec:
02:77:d1:a9:a1:3c:27:f0:80:82:a0:f3:16:1c:76:d4:28:4d:
57:d1:86:19:27:06:da:31:fa:e5:8a:b7:2e:ef:da:cf:db:83:
66:08:f1:f3:c1:b4:01:d3:6a:af:bc:81:57:d2:2f:3e:4d:a7:
6d:99:7d:8e:bc:18:97:6c:e0:96:7d:c1:2c:33:22:28:8a:44:
a0:b3:27:42:a6:ef:3f:1c:22:6b:12:ae:83:91:7a:13:5c:4c:
ff:ca:d9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:43:33 2026 by rpki-client