Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
File: tOZnwFV9jneon9L2dTh4NckpkDw.mft (raw, json)
Hash identifier: kjVbXVwNWOqunhlehpMuksnsYvCI9ipuq7kuCTHTg6I=
Subject key identifier: C6:31:14:72:DE:89:38:CE:F4:15:35:AC:96:9C:96:DA:6D:F7:57:68
Authority key identifier: B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C
Certificate issuer: /CN=b4e667c0557d8e77a89fd2f675387835c929903c
Certificate serial: 019D3308432EA28F419647D9682E0F4EC0C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
Manifest number: F1
Signing time: Sat 28 Mar 2026 06:01:12 +0000
Manifest this update: Sat 28 Mar 2026 06:01:12 +0000
Manifest next update: Sun 29 Mar 2026 06:01:12 +0000
Files and hashes: 1: iRgpkScl2E0qydvLYxmlqR43YT8.roa (hash: F9U+6PkpUBEG0XhufUjaRNeruVOGBXwm2wvsY4dTXhk=)
2: lj9BME9ANJ8XxD4qQD5tTVNccsk.asa (hash: SvpQzHiloco7sWEgcm+D+rsH9un12JiKM+fo6gxkVGQ=)
3: tOZnwFV9jneon9L2dTh4NckpkDw.crl (hash: qL/CB5TsNa51BdKg5I/8ZvT1qXfQY2lhNyF9XDO/K70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:43:2e:a2:8f:41:96:47:d9:68:2e:0f:4e:c0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e667c0557d8e77a89fd2f675387835c929903c
Validity
Not Before: Mar 28 06:01:12 2026 GMT
Not After : Mar 29 06:01:12 2026 GMT
Subject: CN=c6311472de8938cef41535ac969c96da6df75768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:91:fb:5a:c3:42:5c:a1:e4:81:ea:9f:c1:
3e:16:90:00:83:b5:c2:c8:94:7e:3c:cd:54:9f:7e:
9a:6b:cc:96:09:81:d4:36:8f:41:56:b2:00:4f:10:
1c:af:ba:55:e6:1a:76:24:76:46:48:5e:7f:64:33:
4f:03:3b:a8:12:26:ac:92:45:40:b7:11:69:5e:c4:
05:2d:69:04:46:71:94:99:20:5f:0b:95:1d:41:33:
0f:51:49:9d:60:af:8b:17:13:a0:9e:cd:51:47:f9:
ff:79:bd:99:20:39:05:68:13:7a:85:b8:66:f9:35:
35:7e:45:e7:1e:30:a9:eb:3e:7f:d6:9f:d3:54:bd:
88:92:b6:86:38:9a:68:2b:e3:82:0a:30:f6:1a:f4:
a7:3f:67:4c:32:7a:2f:fa:be:f9:cd:f3:dc:59:d4:
0c:b2:fe:a7:a4:8a:99:ac:9b:5d:e4:84:e6:59:91:
73:e0:33:84:57:19:73:19:df:fe:05:c0:b7:e6:15:
d4:b1:47:1d:99:56:f2:18:a5:dd:c4:9e:5a:d6:6a:
6d:9e:d0:1d:74:ed:37:b4:be:31:e7:56:d7:c5:e0:
dd:d8:c0:7f:83:0b:c4:ce:f1:cc:8d:65:fc:a8:f3:
13:12:0b:6b:96:4b:b4:77:aa:b7:43:8f:65:53:63:
db:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:31:14:72:DE:89:38:CE:F4:15:35:AC:96:9C:96:DA:6D:F7:57:68
X509v3 Authority Key Identifier:
keyid:B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:56:aa:1e:96:cb:2a:87:86:74:b5:bc:4b:04:e6:d2:69:d3:
6f:23:45:9a:11:f6:0f:3d:4e:b6:a1:34:5f:e5:26:79:0d:72:
ab:a2:9c:27:5d:7a:39:fe:8c:90:91:33:2f:a9:e7:0a:3b:a3:
5d:f7:55:97:ea:57:b0:74:01:3c:e1:f0:28:4a:41:63:7e:86:
ac:8b:bf:1a:11:e4:27:cd:d6:74:f6:6a:a1:52:cf:31:f6:fa:
93:92:f5:95:7a:04:25:dc:50:47:cf:86:3e:92:5b:f6:98:03:
66:7b:ca:ae:9f:ff:11:7e:5d:fb:7d:d3:9e:51:26:37:e9:41:
be:aa:4f:20:3f:6b:13:5c:ef:04:65:0d:15:b2:53:2c:2c:8d:
ab:54:38:bd:98:a5:ed:cc:c0:aa:66:a3:13:03:03:70:5f:4a:
9d:7f:90:17:ca:ab:5a:f9:9c:34:d6:44:71:6b:c9:33:f1:d5:
ec:ca:da:c8:e1:86:5a:e1:4a:b4:43:1c:d6:00:3e:6e:85:8a:
bd:ab:44:fc:9a:d2:57:a0:58:72:88:31:20:f5:8f:ff:a9:98:
3b:47:e3:ef:e2:8a:1d:69:10:cb:30:a0:9a:51:34:a8:3b:4b:
94:41:0f:05:08:4a:0f:d0:12:17:df:0b:bb:f8:67:08:56:81:
aa:75:be:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:41:57 2026 by rpki-client