Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
File: tgcVWH7cyzJajXwPWkLY8EOHHbc.mft (raw, json)
Hash identifier: J088m65nH6t9yUE9WE1fKyOQBx38Fcw6EeNXSLh97fk=
Subject key identifier: 54:D5:B7:70:95:21:58:75:8B:6C:3A:78:89:D7:3F:22:B1:A1:43:F1
Authority key identifier: B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
Certificate issuer: /CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Certificate serial: 019D2D7386F514B9CD033778D06C722F311F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
Manifest number: 03AF
Signing time: Fri 27 Mar 2026 04:00:39 +0000
Manifest this update: Fri 27 Mar 2026 04:00:39 +0000
Manifest next update: Sat 28 Mar 2026 04:00:39 +0000
Files and hashes: 1: eB4gEEpPyWFq6clsUK7vv51vvfQ.roa (hash: vOzaKzOf/nV2cWIeYZMZ7vTHjq9ov1FtZCm3hsoyh/8=)
2: tgcVWH7cyzJajXwPWkLY8EOHHbc.crl (hash: bhu79YtBZmEreU50aVdvUbPSs02SquMV4HighjryBBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:73:86:f5:14:b9:cd:03:37:78:d0:6c:72:2f:31:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Validity
Not Before: Mar 27 04:00:39 2026 GMT
Not After : Mar 28 04:00:39 2026 GMT
Subject: CN=54d5b770952158758b6c3a7889d73f22b1a143f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cb:d8:89:56:98:a8:ab:a6:96:e8:0d:ee:46:
43:1f:b4:4c:6c:cb:f9:e5:57:70:37:ce:91:0c:39:
e3:24:af:bb:c2:13:c9:f4:1c:61:15:fd:f8:43:d5:
3c:a8:da:6f:c1:19:6b:6f:54:6a:18:2c:ab:87:64:
03:aa:e4:df:14:19:c3:c1:f3:df:88:d6:bb:be:6d:
eb:4e:da:0e:48:5d:23:d8:41:be:48:59:40:ef:ed:
fd:7c:c4:b1:b4:76:05:32:99:06:cf:c3:93:42:24:
12:a7:03:c0:34:b6:fb:7c:2b:bd:49:93:60:39:c5:
c2:9d:11:26:a3:a3:1b:f2:ac:d0:a2:e4:2c:b3:4c:
35:0a:f6:9d:53:5a:04:24:96:cc:ea:31:b7:eb:30:
ca:71:54:a1:0f:d9:f9:0c:05:a5:bd:3f:19:dc:3a:
87:4b:4b:01:0c:be:9d:de:af:58:42:f9:fc:84:76:
cd:df:8b:a1:5e:40:81:b7:f8:84:90:ec:5a:da:b9:
f6:06:e5:60:af:6e:52:64:14:5b:83:1c:37:4e:04:
81:78:1a:64:33:8f:6f:40:21:90:8f:9d:81:dc:5a:
3d:47:5e:a9:40:9c:3a:79:87:b9:88:d5:8c:ec:bf:
ca:44:91:9b:07:37:91:ec:c8:db:32:45:21:f1:6e:
ab:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D5:B7:70:95:21:58:75:8B:6C:3A:78:89:D7:3F:22:B1:A1:43:F1
X509v3 Authority Key Identifier:
keyid:B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0a:af:b4:36:26:6a:a2:c1:c7:91:fb:43:99:1d:bd:a5:8e:
b9:96:0a:a7:e4:6d:d9:8e:44:27:31:b5:56:57:af:03:4a:95:
0d:d0:cc:d7:d3:75:97:33:93:78:1a:e5:bd:c8:56:89:6b:cb:
d8:95:5e:ab:09:0e:4d:f3:97:90:3b:22:b4:68:07:cb:3c:92:
b7:ee:93:c9:71:ae:d0:52:65:40:96:f8:ef:63:1f:e3:6f:17:
49:be:50:ba:5f:00:37:f1:e9:52:bb:19:a1:c8:74:8e:da:e1:
8d:70:a7:c8:8e:e8:bc:6e:cd:9a:54:16:be:b9:7b:65:3d:71:
89:8a:c2:f2:1e:b1:46:af:48:9a:03:8d:4f:c3:9b:06:97:92:
0e:5e:89:7c:cb:f5:12:2d:5c:03:6d:56:a9:29:16:ff:0b:56:
43:11:e5:b8:52:2d:f3:5f:e1:f1:a4:1a:39:13:05:2a:da:88:
ac:7f:55:94:38:f9:d3:aa:70:85:a3:bb:67:f5:c7:71:bf:1e:
53:c9:cd:a8:35:2c:13:cf:19:b6:4c:71:a1:30:a9:b4:08:32:
e2:99:99:15:88:c5:5c:1c:ce:97:56:fd:4e:d5:ee:b9:86:88:
aa:9d:69:6c:40:e2:6b:e4:f0:95:f1:e0:45:80:92:64:17:03:
e0:8e:59:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:22:14 2026 by rpki-client