Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
File: tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft (raw, json)
Hash identifier: ab1cciKG+WkZ4S3+LGLThZM1lZ6ZmcUB7DKUyO66kAo=
Subject key identifier: 89:1E:86:8C:AA:BC:13:84:F3:78:6D:83:D9:FF:9B:1C:1A:C7:33:50
Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
Certificate issuer: /CN=b467367967dc763349fd0b50e31f75b823028590
Certificate serial: 019D27DF7699C6D5FE97A8B450A1D64151D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
Manifest number: 1898
Signing time: Thu 26 Mar 2026 02:00:49 +0000
Manifest this update: Thu 26 Mar 2026 02:00:49 +0000
Manifest next update: Fri 27 Mar 2026 02:00:49 +0000
Files and hashes: 1: 2ZaoqGM6aCKm2bNlZEaeL94Fv10.roa (hash: S0GcAEqKxfe6Q+R2X0UdUocPpyMaBe0EXrwdyrx4AUA=)
2: CANUIzLfJR4qYVodzcMnNDXdUDE.roa (hash: w932Ollir53g5y+ieb37C38JTybDNf6UCpclagO7ofc=)
3: j5nMyhDkND_N1Ut4UNIil32kLZ0.roa (hash: UBj4OSufFBsr7TYpnQq+Obve4nAQx39q2B1z153K9mU=)
4: tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl (hash: jGvOSplScfiBH7J+n+IsV9CkwuTWkmjiMgdM5GqSFb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:76:99:c6:d5:fe:97:a8:b4:50:a1:d6:41:51:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b467367967dc763349fd0b50e31f75b823028590
Validity
Not Before: Mar 26 02:00:49 2026 GMT
Not After : Mar 27 02:00:49 2026 GMT
Subject: CN=891e868caabc1384f3786d83d9ff9b1c1ac73350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e2:c4:1a:5c:db:28:d8:73:cb:83:d2:5d:0c:
7e:79:1a:7b:1c:1b:aa:fb:7f:af:de:74:07:0b:a9:
c4:a5:5c:0d:22:4d:58:2c:14:c8:76:3d:46:8a:59:
07:7a:2f:4b:41:62:f7:29:2e:76:57:50:d2:f2:a3:
e6:f0:08:a6:d2:23:6f:bb:9c:5b:42:2c:65:4e:c9:
1a:bb:16:68:9b:0c:66:f5:b7:23:8e:69:21:9c:ff:
3e:81:24:f7:36:41:ee:a0:8f:9a:64:98:65:2a:c5:
3e:3e:e1:c4:de:9c:df:66:a6:4b:c9:fc:38:d0:2e:
a2:de:88:e1:ae:f4:4c:b6:a7:e0:fe:2d:02:76:eb:
80:7b:5e:16:c4:4f:16:0e:56:2f:62:c4:ed:ae:60:
29:c4:83:7f:1c:df:71:85:38:79:59:93:77:f2:f9:
6b:99:46:e7:45:a0:1b:65:69:52:48:f1:ca:46:9e:
5f:13:20:75:fe:2f:c5:a5:8f:c7:a0:cd:ac:08:0c:
4f:31:77:af:20:ae:df:bf:3b:31:68:70:a3:dd:e7:
ec:62:64:3c:52:d9:94:9e:4c:da:fd:5c:18:da:52:
ba:5f:5c:b1:9c:42:c8:02:ca:82:20:20:66:cd:ae:
af:67:bc:77:66:da:10:6a:58:be:09:1b:12:20:41:
be:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1E:86:8C:AA:BC:13:84:F3:78:6D:83:D9:FF:9B:1C:1A:C7:33:50
X509v3 Authority Key Identifier:
keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e0:b6:87:51:fe:88:da:46:9c:50:9f:a4:99:b4:2a:8c:13:
78:9b:54:7c:32:36:64:14:31:a7:ef:1a:31:f8:a1:8d:06:3a:
fd:8b:cc:22:8b:c2:c5:c2:d7:05:85:89:74:c1:5b:ab:b0:e2:
b9:3e:ca:50:01:46:f1:f5:e5:18:16:aa:22:eb:a3:64:25:f3:
8d:20:33:2b:26:1f:0e:bf:d0:c6:8c:2f:fb:31:cf:b3:44:02:
82:f8:29:65:30:cc:6d:e6:c6:82:b3:b0:3a:5e:0e:0d:fa:98:
3d:62:e3:2a:02:74:7b:cd:85:a5:d1:5a:e8:4e:6a:38:72:42:
ba:6d:92:d2:54:94:27:3e:81:7b:f3:af:47:40:87:c6:a3:00:
e4:8c:71:9d:54:64:73:1d:77:59:70:97:f3:c2:1d:a8:50:76:
ed:85:25:d2:22:7a:5d:f1:d9:b2:c5:ea:35:ab:e2:6e:dc:d8:
15:14:aa:16:f8:76:c2:4b:58:9c:0b:54:f1:e8:10:62:b5:b1:
84:0f:42:39:19:5e:05:9e:11:ca:e6:35:0e:e2:f6:28:cf:21:
38:83:27:97:3b:3f:80:55:cc:6c:1a:b6:22:cc:34:1e:72:48:
8d:67:10:a2:d8:15:ec:0d:0e:92:8c:dc:b6:33:5c:ba:73:68:
b7:d3:d4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:39 2026 by rpki-client