Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
File: tgcVWH7cyzJajXwPWkLY8EOHHbc.mft (raw, json)
Hash identifier: ZXSemXDElNW6YTdFhxmz8y3uzkng0WTmROiuz4imWII=
Subject key identifier: CB:76:E4:39:B9:D4:4E:DC:7B:5A:A0:0F:06:7B:C2:1E:32:B4:CC:C9
Authority key identifier: B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
Certificate issuer: /CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Certificate serial: 019D2B85254AC1FB779EFCB46B4DFE6D332E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
Manifest number: 03AE
Signing time: Thu 26 Mar 2026 19:00:39 +0000
Manifest this update: Thu 26 Mar 2026 19:00:39 +0000
Manifest next update: Fri 27 Mar 2026 19:00:39 +0000
Files and hashes: 1: eB4gEEpPyWFq6clsUK7vv51vvfQ.roa (hash: vOzaKzOf/nV2cWIeYZMZ7vTHjq9ov1FtZCm3hsoyh/8=)
2: tgcVWH7cyzJajXwPWkLY8EOHHbc.crl (hash: 7BhOQmUR814/S9vx+RRU0OXfc+/dhGzqAUQ1ZDo5U0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:25:4a:c1:fb:77:9e:fc:b4:6b:4d:fe:6d:33:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Validity
Not Before: Mar 26 19:00:39 2026 GMT
Not After : Mar 27 19:00:39 2026 GMT
Subject: CN=cb76e439b9d44edc7b5aa00f067bc21e32b4ccc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:99:68:5d:df:df:49:5c:55:38:4c:31:b1:b3:
d3:d5:4f:d8:8c:be:01:f6:30:23:25:74:cb:02:3b:
ac:df:41:69:be:ec:0e:ae:1d:10:d0:e3:a8:2e:ae:
dd:48:48:6c:19:b1:56:e7:52:86:f0:e1:36:b6:4b:
16:5e:c2:52:c4:4e:46:66:ba:a6:bd:8a:4b:0a:1b:
3e:ab:90:c1:cc:5b:e9:a0:03:fb:52:c9:ab:92:45:
84:62:c9:46:6e:b6:8d:bb:dc:34:f6:89:dd:f7:05:
fd:d0:9f:bb:2e:fc:8a:9c:99:e7:c8:87:e6:f0:72:
b6:cb:e2:7f:49:fc:02:e8:9a:2e:9a:95:7a:ee:be:
d2:49:6c:73:99:67:7a:b1:5a:fb:b8:db:43:b1:19:
38:9b:4a:f2:b6:1c:ed:db:8d:8c:98:a0:c0:c5:76:
41:1e:5f:67:69:9e:9c:ae:f2:68:f6:04:1c:11:5a:
99:69:af:89:c3:35:25:88:b1:2b:b5:05:cd:b5:e3:
4f:eb:a0:af:13:0b:12:79:7b:50:8d:fa:19:9f:cb:
78:52:b7:f3:0a:26:f5:5e:52:29:aa:07:8b:36:5d:
25:b6:03:66:49:93:19:d8:c3:75:3d:3d:73:98:90:
1d:a6:80:4c:30:10:ba:09:f6:aa:76:a3:85:8c:dd:
85:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:76:E4:39:B9:D4:4E:DC:7B:5A:A0:0F:06:7B:C2:1E:32:B4:CC:C9
X509v3 Authority Key Identifier:
keyid:B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:42:36:8b:44:16:d3:cc:71:2c:ad:96:79:ee:a1:62:38:04:
a0:1d:48:b1:44:f6:15:c2:40:0c:aa:6e:88:80:43:94:2e:77:
52:d7:cb:ba:e8:9a:ce:90:43:2c:db:da:cb:c3:be:85:12:f4:
a6:df:e0:bd:e8:d0:b3:74:91:f0:fe:1b:1d:67:01:41:6a:ba:
df:c1:b5:bc:d0:98:90:d7:91:10:0c:52:db:83:5e:b4:11:53:
f6:91:37:23:77:e1:7c:30:b0:5e:71:f2:82:0a:d3:41:17:19:
d0:2d:db:af:75:be:2a:92:1a:67:37:c9:91:e6:f8:7e:46:db:
56:41:79:20:fe:76:71:88:5e:84:c2:60:a7:96:8d:2f:dd:34:
1c:e7:df:97:ef:39:ef:77:a9:21:f4:6f:f2:4d:52:7c:52:98:
db:71:67:16:fa:e4:cf:db:d1:29:83:e9:50:15:36:61:50:01:
be:f5:53:f8:ea:01:59:ac:a0:88:bf:af:d3:ea:1c:e8:c0:27:
cc:33:13:65:76:1c:f2:49:7e:18:14:2a:07:90:f7:43:d9:f4:
ec:fd:f3:2c:a6:94:9f:dd:30:5b:34:07:74:8b:1c:6d:91:38:
c8:9e:ac:dc:c1:40:d4:45:57:3a:0a:5f:91:0d:f8:6e:f6:97:
58:37:d0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:28:15 2026 by rpki-client