Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: tdG56sgDmrioIcj0ZI7XvPCbWzuT/eGZdhMFdbFzSns=
Subject key identifier: 34:A1:14:0D:C3:F1:4D:18:19:66:CA:DE:DB:50:6E:08:33:4C:FA:B4
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 019E1E6C09143FA3F6EC75694E2AA83B12C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 23:00:56 +0000
Manifest this update: Tue 12 May 2026 23:00:56 +0000
Manifest next update: Wed 13 May 2026 23:00:56 +0000
Files and hashes: 1: 1-XW1Sz2PaZ2CH23FH35lEDI1Dvg.roa (hash: OwzM/XrJoESuDpIjRWGFQ9kHnBpSBVpQxsgx+bma9vw=)
2: t8HbGCUUFDZ79HOoIDzniW_5CjE.roa (hash: bURUeHYTHQjo9pWgWM8FHgpTvl8hZ3bV5mZnZQ6g4Cs=)
3: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: cZZ7TE48cLlyelHTV5hkpjXDf7RcpXXG5xpdbcNxT/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:09:14:3f:a3:f6:ec:75:69:4e:2a:a8:3b:12:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: May 12 23:00:56 2026 GMT
Not After : May 13 23:00:56 2026 GMT
Subject: CN=34a1140dc3f14d181966cadedb506e08334cfab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:be:aa:e1:cb:02:2d:55:57:02:35:5a:d2:
5a:a9:49:5b:aa:0d:d5:6e:90:75:e3:83:ef:88:c7:
5b:48:54:44:6d:3e:64:fc:7d:ab:fd:8c:3f:bb:32:
ae:58:10:9c:b5:30:c0:9e:e8:95:30:4d:6b:4a:45:
5a:6d:d2:05:e5:2a:3f:ff:f2:85:46:93:bc:7b:42:
8c:05:4b:8c:7d:53:8d:05:34:c1:d1:24:5a:4e:04:
a1:06:1a:9e:a4:ae:5f:53:95:a6:75:0f:1f:4c:6a:
0c:10:c6:cd:07:73:3e:68:c3:46:ee:a3:20:8f:9f:
e0:36:fb:1d:1b:3d:9c:49:07:cd:e0:7a:40:f9:9c:
19:be:22:03:31:97:de:6e:c0:d5:eb:57:4c:34:9a:
05:d5:18:12:54:26:70:b7:b6:59:4c:18:0b:d7:02:
dc:2e:94:50:4c:28:2e:36:72:5f:99:06:47:80:12:
a7:c9:17:d5:d0:1e:12:a2:ab:9f:12:52:17:59:b5:
e7:54:52:7d:84:c9:49:58:b5:bf:44:d0:cc:71:00:
97:ce:ec:79:1c:ef:a5:1d:57:ba:db:5c:58:36:e3:
41:db:f9:d7:50:b6:c3:c8:c5:42:b6:fa:0c:3d:8d:
72:a8:bd:17:ad:86:55:06:a9:7b:56:b3:f4:1f:cd:
9b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A1:14:0D:C3:F1:4D:18:19:66:CA:DE:DB:50:6E:08:33:4C:FA:B4
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:06:d2:00:ec:29:52:bc:26:53:f8:7d:42:c1:3b:e5:98:b4:
f4:8c:f8:a8:18:cb:fa:92:12:b3:3d:d1:5e:07:fa:27:f0:c0:
34:c4:f5:81:55:0f:b3:27:cd:fb:61:58:e3:70:0e:95:e6:38:
b5:9d:e7:1f:4b:ed:aa:48:d2:10:6f:21:0b:4c:e8:54:9f:3b:
27:0e:4f:1c:23:0b:61:ff:16:b9:2c:11:09:be:18:97:dd:e4:
73:5c:34:93:a4:5b:a9:4d:78:fb:dd:2a:84:e7:4c:4c:b5:81:
c1:c5:4e:58:93:6f:64:2c:a1:d9:b8:36:55:23:ee:30:23:22:
ce:5a:f2:ee:cd:ce:04:0d:c4:62:2b:f7:e6:bc:b5:ed:86:ec:
ec:d6:e8:83:9a:59:1d:62:ed:ee:67:54:d9:a6:f6:5d:42:d2:
ac:4d:aa:78:0e:36:09:44:da:78:07:27:f1:9e:d5:d0:ab:d3:
4f:4f:98:ad:2c:dc:d0:e8:3c:b5:64:de:0e:bd:25:c0:36:49:
b4:77:f9:06:57:bd:3d:04:66:13:62:06:de:86:5d:67:6b:2a:
15:f4:49:f6:90:4a:3d:df:8f:05:b5:8e:96:fe:91:66:7b:22:
6d:c5:6b:74:15:50:32:f4:f7:26:21:42:9e:ec:05:ab:b5:94:
fb:c8:3f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:05 2026 by rpki-client