Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
File: tUFVgYH3hjEZv0oVVMddqx9sUpI.mft (raw, json)
Hash identifier: 0xE+5teNEIFVPPgSsKfTdYQ7TKC4B2KuJLycO8qVvms=
Subject key identifier: 91:65:7A:FA:1D:70:A1:5F:8C:2D:C5:B2:60:18:70:C1:84:B9:3F:BE
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Certificate issuer: /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial: 019D265FD88F69AFA75D566EE7EA0B14BE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
Manifest number: 06AC
Signing time: Wed 25 Mar 2026 19:01:48 +0000
Manifest this update: Wed 25 Mar 2026 19:01:48 +0000
Manifest next update: Thu 26 Mar 2026 19:01:48 +0000
Files and hashes: 1: D1q3YLzj8lZ_AqtFs6QHKSAISFg.roa (hash: 4mLTnHJ65SEHMBkEh6tPiLrvo21+0C3dC/USJa8YdTw=)
2: FAR1JGDRfBlwTrXiCrjWu-9KPYY.roa (hash: ubnjQ9mTdiJtNsVEHvSHl8U6qYQGX98XEG0kwEFpsdo=)
3: OteesfxlXNW_6oy-uZPA0RjwQqs.roa (hash: BVMKBS9it+saptlczy0sxrdp/hGNaoRQGuAEe0tEzJQ=)
4: jJqmq7ctfCRljbEe-rA7H6MPeAI.roa (hash: O+1YuOF5X9Aph1d+IEQe3EcREqu8Qs7VAkwaJPtR+U0=)
5: tUFVgYH3hjEZv0oVVMddqx9sUpI.crl (hash: x4km2kqcGwHlBKKDfe+bn10whKptFl6eUsTlOJ0zUzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:d8:8f:69:af:a7:5d:56:6e:e7:ea:0b:14:be:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
Validity
Not Before: Mar 25 19:01:48 2026 GMT
Not After : Mar 26 19:01:48 2026 GMT
Subject: CN=91657afa1d70a15f8c2dc5b2601870c184b93fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3d:e8:d2:41:42:62:93:66:00:31:b8:42:c2:
bb:8e:92:71:d6:2c:ea:e2:ef:4c:9c:9c:8c:4b:c7:
24:7c:72:c9:a8:07:e4:d3:83:6b:1f:01:a6:1a:67:
a0:4a:d4:f7:37:e3:4c:1c:94:5c:e6:62:f3:16:23:
f6:ed:87:db:60:66:e4:da:8d:50:8b:d0:75:a6:aa:
17:f5:40:3b:db:61:b1:0a:49:0b:71:15:fa:6c:51:
c8:1a:4a:76:63:a2:f5:36:9a:05:7d:bf:8e:57:9d:
40:81:22:8e:2f:54:e0:f7:f7:88:e7:dc:d7:8c:c2:
f6:3e:f1:47:13:2d:8d:eb:21:32:e4:af:a5:ca:a5:
7f:5c:69:af:e6:a0:00:b3:b2:51:6c:7a:0d:d9:be:
0d:fe:01:11:ba:ca:10:08:1c:b6:76:e5:80:63:b8:
a2:b7:92:bb:d3:d4:da:d4:a6:fc:ce:3f:9d:d1:b9:
17:15:23:75:30:ad:4b:14:85:cb:48:ca:22:77:83:
02:94:fe:de:f2:27:99:36:6b:0d:85:22:be:17:56:
59:7b:b2:4c:ab:df:12:a5:71:c1:ca:56:82:2f:02:
90:b0:ba:53:0c:75:02:b8:c0:1f:72:43:f4:20:60:
75:0b:12:70:e2:6b:ff:38:28:07:bf:08:4f:85:d5:
f4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:65:7A:FA:1D:70:A1:5F:8C:2D:C5:B2:60:18:70:C1:84:B9:3F:BE
X509v3 Authority Key Identifier:
keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ce:d0:13:65:48:43:13:51:5d:12:20:7a:28:c5:c5:bd:df:
cd:87:fa:c5:aa:c6:84:01:8b:d1:76:ba:b1:21:30:48:67:5f:
50:38:b9:15:e1:b3:08:c2:c9:b4:27:a6:5a:a2:b1:37:71:58:
c2:cd:b4:2c:3c:85:78:0e:e2:6b:18:3a:11:42:7b:2e:d1:13:
ab:4f:4e:26:26:4b:63:6e:b5:57:24:6c:d1:1f:c1:55:43:db:
51:38:f8:25:ea:69:8e:a3:b1:87:f5:4e:97:21:41:2d:9d:67:
0f:9c:80:f6:07:cb:8d:5e:fc:7e:0a:b2:e6:38:e9:aa:08:14:
27:f7:65:63:73:38:70:b1:4e:37:3f:1b:23:8c:87:17:1c:de:
07:54:43:47:ed:75:73:ba:60:6b:2b:9c:3e:a2:d1:f1:bb:10:
36:24:ea:39:4b:9b:41:14:71:31:a6:7e:f7:0b:20:f5:97:0d:
47:a9:82:a4:53:78:8a:f6:c0:72:ef:c5:00:3b:17:1a:06:d3:
ac:32:c0:0f:2b:e0:03:2d:a3:83:03:08:28:41:a9:6d:53:52:
e1:54:e5:7c:c2:ec:fb:cd:31:66:54:67:60:f3:f3:31:84:a8:
74:18:c6:cf:7b:3a:02:25:11:44:61:81:98:b1:71:81:bd:41:
d5:bd:32:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:21:56 2026 by rpki-client