Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
File: tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft (raw, json)
Hash identifier: 8jzV/nPqfEg4pHTD576rze03I7rR9qTuFRPXdSdUi4w=
Subject key identifier: 22:8D:E0:26:02:CD:26:B9:5B:C9:AC:74:21:E0:16:85:A6:67:C4:42
Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
Certificate issuer: /CN=b573d2dda93e420409163da59e7414ee91a2eef2
Certificate serial: 019D2583C6E02C15D6206C18924E2A0ED94E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
Manifest number: 0323
Signing time: Wed 25 Mar 2026 15:01:26 +0000
Manifest this update: Wed 25 Mar 2026 15:01:26 +0000
Manifest next update: Thu 26 Mar 2026 15:01:26 +0000
Files and hashes: 1: 0mP1ztpahebUSVqYXstfQVo6lU8.roa (hash: ROTZ3HoBIhGjMRa1VghM4xscpCElB4RFAaHFDBzcBcc=)
2: tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl (hash: wGYCf3ivVQCztbINnkoHuJohaEsdfJM/TNv8JUUhkg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:c6:e0:2c:15:d6:20:6c:18:92:4e:2a:0e:d9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2
Validity
Not Before: Mar 25 15:01:26 2026 GMT
Not After : Mar 26 15:01:26 2026 GMT
Subject: CN=228de02602cd26b95bc9ac7421e01685a667c442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6d:fb:72:1b:f3:b5:8d:c7:c1:f1:5c:25:ca:
aa:0a:9f:20:7c:59:71:0f:83:e2:1b:be:e4:fe:1d:
17:4f:94:48:54:47:0f:c9:36:dd:e7:ac:b6:d0:4e:
a0:71:7f:4f:f9:6e:7b:92:8d:fc:a7:63:f6:1e:68:
9a:96:f0:5f:e4:75:ee:09:5e:b7:20:d5:c7:cb:fe:
61:e7:51:13:46:d6:76:f1:93:12:cc:be:7d:62:5c:
4e:32:67:22:9f:ab:8a:20:bb:c9:c0:54:44:fb:a8:
01:48:7a:4e:cb:3b:c5:ff:58:58:03:c6:bd:30:d0:
e5:79:24:d3:2b:8f:59:fa:e7:0d:7b:59:b7:e6:5c:
7c:06:59:f2:c2:48:c0:54:3b:79:4c:67:10:a8:cf:
43:0a:c0:8a:ad:5b:06:4e:e0:6b:e7:8c:0b:e0:a2:
36:40:cb:1d:fa:04:a6:f2:4a:a2:ec:4b:09:d0:89:
e3:2d:9f:1c:ca:e8:be:e9:dd:cc:da:cf:cd:27:5e:
46:54:d3:a6:a0:55:e4:ce:48:a1:c9:05:c1:86:99:
3d:1e:ad:cb:5f:56:2e:9c:42:a0:85:1a:11:ba:7c:
5e:9f:33:dd:1a:d9:51:e6:e9:c4:5a:ef:28:ec:66:
0f:ae:3c:c4:4c:f9:3f:89:ee:61:6c:2d:f5:d0:32:
21:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8D:E0:26:02:CD:26:B9:5B:C9:AC:74:21:E0:16:85:A6:67:C4:42
X509v3 Authority Key Identifier:
keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:31:9c:6b:11:de:ad:b2:fd:1e:13:96:c9:12:05:d3:b7:3e:
1d:c9:9b:0e:38:f0:41:a6:6d:77:dd:71:c6:f2:a0:f7:4c:6a:
97:a4:5e:0e:36:ea:b5:70:7e:fc:0d:8f:75:8a:eb:a4:9d:d8:
d1:28:30:7b:74:f7:24:5f:8c:cc:12:49:b6:44:13:f6:29:74:
a8:ae:da:e4:9f:f8:93:c6:df:30:19:15:95:c2:e7:20:65:49:
b1:9d:6b:47:3c:6f:a6:dd:39:04:1d:8f:a9:b9:53:a4:03:32:
15:1a:12:9a:51:3d:09:ea:6e:65:95:2a:90:ff:c2:b7:fb:f3:
82:0e:db:b6:f4:3e:65:9c:bd:99:8c:21:47:6c:7a:42:96:f4:
c8:bd:33:6d:e1:e6:43:bf:f4:c5:a7:a2:76:47:38:8e:bd:c0:
b8:fb:82:9a:ab:fb:89:d3:9e:1a:4d:56:b8:dd:4a:89:21:e4:
94:82:b4:55:29:cf:d7:eb:68:5a:2b:36:17:42:6d:37:23:db:
dc:6c:51:74:30:c9:dd:f0:0f:11:1f:97:42:9a:8a:8f:1d:6e:
42:91:27:82:16:00:4e:c7:2a:d5:c0:9a:98:17:f0:2b:53:e9:
46:48:3c:e1:ca:2c:1b:8d:3e:68:ef:b5:a9:24:69:5f:68:3b:
4b:9b:e4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:19:13 2026 by rpki-client