Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File: tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier: cjkfDWQBzJyQRu60FXw/+IcZD8ejEGbaIr/uG2t23b0=
Subject key identifier: 29:F2:5A:7E:05:97:19:32:A1:64:47:40:AC:D0:49:E8:39:EA:40:A5
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial: 019D29CDCFF85C39CB392BC03BCA67EAB99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 11:00:47 +0000
Manifest this update: Thu 26 Mar 2026 11:00:47 +0000
Manifest next update: Fri 27 Mar 2026 11:00:47 +0000
Files and hashes: 1: FCOqF_sQRgQBJURZwz5LSyaOjJ8.roa (hash: 6lS73JUDNo7BbYfLMWtS8VyH4+hvb7PzpHKXOKKSc8o=)
2: S_kn4DkQroHqq7HAquDXguodEnE.roa (hash: 9xxNTgjpkgjoYZUn/S2u9DKQyLLVAn0QlTy3a/LjFvI=)
3: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: 7PLPcbK/XZrgZCMtahQebgkTScZp/aCbwAhrHYfTrcg=)
4: wkBj6meKGNLkzfK8dNJpio292qU.roa (hash: fCT5GXsj0OqKgF2zl8rl9o29Q7I6qVhp6IsQiy2sl9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:cf:f8:5c:39:cb:39:2b:c0:3b:ca:67:ea:b9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Validity
Not Before: Mar 26 11:00:47 2026 GMT
Not After : Mar 27 11:00:47 2026 GMT
Subject: CN=29f25a7e05971932a1644740acd049e839ea40a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:d1:bc:b7:96:bc:51:1d:f1:b4:9f:7e:30:
ff:ae:98:b7:96:81:15:cd:43:2e:87:3a:3c:9f:7d:
a1:e1:b0:af:a4:27:ff:1a:f2:94:74:1b:e1:ae:e8:
65:fd:5d:72:c1:45:32:c6:1a:68:e0:6b:47:6e:3b:
c9:34:d8:50:7e:09:51:c3:5e:34:3f:1c:c7:a2:ef:
84:d6:14:1c:bc:90:69:84:a9:91:3f:b5:d6:0c:ab:
29:7d:2e:42:ab:b7:a9:94:31:71:60:d5:02:23:ad:
95:ac:75:dc:f2:a5:0b:86:72:77:b2:76:c8:c6:ea:
52:5c:86:61:b7:44:aa:16:96:83:f7:ed:58:e9:a3:
ce:41:d9:1c:81:d4:76:7f:74:f6:4b:79:72:87:f1:
21:6a:8c:e3:18:a9:72:11:06:23:0e:59:3f:31:e4:
e3:c7:df:84:04:0b:3f:eb:9e:00:03:69:12:5f:65:
64:d9:fa:8a:9e:1f:bf:f1:80:f0:8b:01:7f:71:a3:
4e:3f:0a:49:be:57:c6:33:3a:20:81:43:4b:4d:7d:
00:73:7a:9e:cd:0d:c2:c1:d5:bc:a1:53:df:71:e1:
d9:d4:d8:7a:e3:03:2c:c7:d7:dd:a9:a8:0a:9c:84:
a7:7e:a5:ff:fa:23:08:a0:f1:f9:b0:dd:68:65:fa:
0a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F2:5A:7E:05:97:19:32:A1:64:47:40:AC:D0:49:E8:39:EA:40:A5
X509v3 Authority Key Identifier:
keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d0:8b:50:2b:d7:51:06:81:66:5c:d2:59:ba:d8:8f:ef:f3:
4c:69:26:2b:d6:09:82:15:08:bd:b7:c4:27:65:d6:d8:99:53:
51:2b:d5:41:06:e7:70:21:11:74:97:4e:25:f7:de:a2:6d:ed:
d6:03:3b:df:8b:ac:1c:0a:52:ff:c8:07:13:ae:c9:e5:30:87:
1c:4e:23:13:ce:be:5f:9e:12:bf:d1:5e:56:cd:e3:fb:bd:ea:
10:66:f1:bf:aa:98:9f:15:02:ce:19:84:6f:19:fe:00:bf:70:
5d:7e:b3:cf:dc:e8:55:40:d6:0b:f2:f9:6f:7b:d4:9a:5a:8e:
76:2b:0f:d3:e1:46:1e:45:dd:56:04:a7:d4:38:4e:c8:d8:60:
b0:18:98:eb:6b:5c:ac:5d:b3:f2:3e:f7:c5:9c:cf:6c:40:e7:
2b:7a:24:cc:1b:94:8a:47:10:df:ca:0b:66:82:44:00:74:65:
5a:89:db:98:80:36:db:b2:1e:3f:2f:74:3f:15:c4:41:73:c8:
04:75:6f:e8:a8:56:73:ff:75:45:47:b1:7b:f2:10:43:76:f9:
df:ba:5a:fa:34:a8:09:5c:32:d2:aa:47:a5:7b:64:0f:09:84:
1e:16:00:7b:68:31:c9:fc:a0:ef:f4:3d:fb:13:6e:aa:93:f5:
1b:aa:17:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:38:32 2026 by rpki-client