Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: pwPFt9gr95G63zmrI8a4izzTZsUgEJtnIjDOE/uiNvE=
Subject key identifier: 63:FB:A9:DD:AE:A2:C2:77:EE:97:83:99:E9:93:B7:4D:EB:79:97:2C
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 019D273A9D4C6AF251D621236F42AB405603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 23:00:45 +0000
Manifest this update: Wed 25 Mar 2026 23:00:45 +0000
Manifest next update: Thu 26 Mar 2026 23:00:45 +0000
Files and hashes: 1: 1-XW1Sz2PaZ2CH23FH35lEDI1Dvg.roa (hash: OwzM/XrJoESuDpIjRWGFQ9kHnBpSBVpQxsgx+bma9vw=)
2: t8HbGCUUFDZ79HOoIDzniW_5CjE.roa (hash: bURUeHYTHQjo9pWgWM8FHgpTvl8hZ3bV5mZnZQ6g4Cs=)
3: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: SxckoIwO/3L/LPav/j6CbOAs14hyRRZcYreeI7FwUOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:9d:4c:6a:f2:51:d6:21:23:6f:42:ab:40:56:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Mar 25 23:00:45 2026 GMT
Not After : Mar 26 23:00:45 2026 GMT
Subject: CN=63fba9ddaea2c277ee978399e993b74deb79972c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:bb:8d:1b:37:45:44:6d:c2:45:de:29:49:
a0:72:74:fb:ee:9f:4d:b7:2e:90:21:08:13:f1:db:
d8:b5:73:02:74:76:11:06:94:4a:d6:74:1a:f5:5f:
67:30:19:fb:74:b1:02:d9:84:ac:fb:b6:3d:cc:29:
26:0d:d2:49:72:5f:d6:7e:71:da:f5:ea:34:fc:96:
02:b9:73:fe:ba:3e:3b:af:ee:12:b7:a9:53:e6:6f:
f7:2c:96:c2:05:c0:62:f1:65:f2:80:ce:a5:19:bb:
18:56:77:74:1d:77:c2:e0:55:f0:c1:49:27:b6:19:
4a:59:81:e5:2e:02:16:9e:7d:ad:97:52:18:6a:94:
fd:fc:b0:3e:0d:55:26:93:04:ea:12:15:d9:78:66:
2e:47:74:15:4f:12:64:7f:46:88:ab:79:94:e3:ac:
96:d8:08:3e:93:b1:c7:19:69:89:e0:c9:cf:50:a1:
0a:ed:ec:94:cd:45:1e:0b:1a:a6:8c:39:0b:28:50:
22:2c:24:1c:f5:2f:0e:6a:ca:d4:0a:aa:ce:f8:e0:
f2:3b:0a:4c:8b:c0:d9:dc:e1:b3:34:3a:39:f5:6e:
32:7a:d4:e4:54:33:d5:36:20:31:2b:e1:c6:89:81:
6e:b7:73:ae:cf:1e:76:66:c7:a5:95:95:a6:fd:80:
c8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FB:A9:DD:AE:A2:C2:77:EE:97:83:99:E9:93:B7:4D:EB:79:97:2C
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3d:2c:38:23:04:1b:62:1a:d4:6d:07:86:6c:51:35:53:69:
cf:df:77:a3:6a:11:47:9a:b5:44:12:0f:d7:32:a0:3a:5e:c4:
51:17:0b:4f:05:ce:c6:50:77:05:ca:c2:d4:68:be:2d:a2:4e:
d4:cd:7e:32:5d:68:cd:71:ed:0f:b6:4e:ee:40:68:25:80:83:
18:e6:2c:d1:ca:f4:d7:54:9d:23:37:c9:e3:fc:91:2b:d2:2f:
56:12:23:b0:f3:57:31:3d:3a:77:75:b1:67:57:f8:19:a3:70:
f7:a4:a4:a1:44:13:7f:79:0c:b2:3a:84:37:10:2e:36:f9:1b:
2b:e6:c3:98:53:bc:e3:a7:3e:24:60:80:ab:b0:5e:7d:a4:d9:
60:03:7b:bf:5a:9f:00:57:65:68:0f:9f:86:6d:54:9d:f4:86:
b4:ec:f0:3b:1e:6a:41:5e:79:00:4d:6d:c4:ef:c7:ec:b2:df:
07:73:71:97:8d:5c:1b:f8:a4:26:28:1f:fe:85:bf:a4:36:70:
0a:ed:ef:39:09:53:fe:34:0c:ff:03:90:52:3c:1e:02:6f:d7:
2b:94:4c:4c:6c:b8:85:42:0f:83:22:4a:6c:34:a7:4a:52:cf:
bf:79:f6:f2:33:0e:f4:54:9e:24:68:66:eb:21:18:14:2c:24:
c1:9d:39:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:21 2026 by rpki-client