Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
File: Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft (raw, json)
Hash identifier: PVC7s9xkMemJqjuBrtZ4XoVjcIm/qkO1VN8bT+pRQCs=
Subject key identifier: 6D:EF:FC:0A:E9:29:9E:0E:91:09:2C:02:90:5D:FA:98:36:7A:44:21
Authority key identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
Certificate issuer: /CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Certificate serial: 019D27DFDF43565ED1FBF81C75CE62BB6E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
Manifest number: 1880
Signing time: Thu 26 Mar 2026 02:01:16 +0000
Manifest this update: Thu 26 Mar 2026 02:01:16 +0000
Manifest next update: Fri 27 Mar 2026 02:01:16 +0000
Files and hashes: 1: 8yi1LBcjZuFqYFbdgC_s2aSxkWc.roa (hash: iWLx5N8cPN2G1zQ0siO1bQR7tW0bfENSaMdy9lql9Uk=)
2: FKdM40ixAn5Mv7sd-loN1AAlLBg.roa (hash: oxhIXVSaVG2AzY2umVVW0jiHJlu6SrIl96kfe/IkKnU=)
3: Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl (hash: rqVrK3XI96BBljGb3S9toXy9jN3Mk9nWs75lLCDwWxU=)
4: vJlhFKQPyZf5xZGzPiwmwI0LYO8.roa (hash: laywAmoScLZ0Rr4l1pQdmjgh5OVBAWS5dqsDgjehWFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:df:43:56:5e:d1:fb:f8:1c:75:ce:62:bb:6e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Validity
Not Before: Mar 26 02:01:16 2026 GMT
Not After : Mar 27 02:01:16 2026 GMT
Subject: CN=6deffc0ae9299e0e91092c02905dfa98367a4421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:78:3b:74:cb:bf:9f:91:34:19:74:ba:ca:
60:f9:24:2a:05:e2:1a:b2:2a:67:04:d0:8e:1c:52:
d8:19:21:8a:84:94:49:55:e8:0e:57:b7:ff:45:72:
90:65:6a:24:14:da:34:4f:ed:19:b6:5f:67:33:e8:
20:b4:5a:b4:89:df:4e:30:a4:ff:a3:12:7c:6b:77:
1d:ca:1e:4d:25:20:79:21:76:74:5b:40:04:80:c5:
2f:6f:a5:36:36:9e:ee:ac:3d:1d:21:5e:fe:b7:d6:
58:c8:08:cb:9e:8f:09:e6:28:27:71:b0:83:01:19:
99:58:09:b1:37:8b:e0:c5:89:b3:a0:26:97:07:18:
34:6e:67:39:34:a0:3b:ca:4c:08:8c:12:d8:63:7a:
6c:34:ab:b8:26:d8:4a:b4:c2:5d:2e:0a:47:b3:04:
57:23:8f:a2:f9:35:73:6b:4a:48:89:aa:4a:b3:ad:
12:d5:32:e6:8c:ab:7b:53:26:84:0e:8f:04:e4:03:
c1:b4:aa:03:78:8e:4c:98:07:d8:47:6d:d3:b1:3c:
08:a1:4a:cb:3f:ce:3a:7f:ce:ad:d4:84:19:a7:ec:
62:5b:14:17:84:8b:95:f6:40:e4:28:9e:4e:e1:63:
e9:80:85:bc:16:92:b0:2e:e5:53:a7:b8:ac:b2:3d:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EF:FC:0A:E9:29:9E:0E:91:09:2C:02:90:5D:FA:98:36:7A:44:21
X509v3 Authority Key Identifier:
keyid:4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b9:fc:d8:b7:cb:34:6a:2d:e0:6a:2f:ae:b5:52:ec:77:a2:
97:e6:53:d7:ce:c5:1e:a4:e8:3d:6a:a2:d2:4b:1c:17:02:01:
c2:84:d8:7f:8c:36:2d:42:c9:e9:86:e0:cf:32:63:ba:13:12:
cc:21:52:3e:5d:59:fc:89:22:26:b8:89:d1:ac:2b:66:9c:a7:
11:18:8c:ce:61:2f:a2:d9:dd:41:27:cb:be:84:be:44:d8:4c:
1d:c7:f8:77:aa:81:99:7b:c0:2d:78:8e:4a:d7:4b:b7:3e:28:
02:e3:9d:04:d7:1f:9c:dc:16:6f:53:d9:83:c8:33:80:8e:26:
a7:87:1d:b5:50:5a:58:34:c6:d5:cb:31:e6:bd:d3:b1:a0:70:
07:15:9d:65:d3:76:d5:79:b4:4a:32:68:4c:3c:e7:92:df:a9:
c6:ab:cb:38:a9:07:3c:af:59:0b:ae:16:ae:84:31:e9:62:2d:
5a:77:30:3a:aa:1e:83:d8:fc:a3:16:bf:83:e8:cc:86:ae:f7:
bd:82:64:78:d0:aa:70:f9:e3:13:1b:44:47:67:96:34:66:23:
01:ed:ad:0a:10:3e:b7:74:6a:29:e7:85:e8:98:94:88:af:88:
bf:8f:85:c4:8a:4d:39:16:22:7f:7f:58:31:45:42:b9:40:42:
66:b3:19:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:40:14 2026 by rpki-client