Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
File: tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json)
Hash identifier: ydZAl+QyGYX6trSjEuwEDyxOCJeVEae1queIGjYVyXg=
Subject key identifier: 51:DF:2F:07:2E:FF:21:E7:D1:E9:8E:04:73:65:BA:32:77:87:13:AF
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 019D2AA926DC543E9D9CEE7071A6F044B068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
Manifest number: 08B1
Signing time: Thu 26 Mar 2026 15:00:21 +0000
Manifest this update: Thu 26 Mar 2026 15:00:21 +0000
Manifest next update: Fri 27 Mar 2026 15:00:21 +0000
Files and hashes: 1: Bl3sRdVXNfJpY6b4S8cUpd5mA1I.roa (hash: Tra0gJRg7Sdu8UJqi6AHrAI7bigGVXmLkWidwg3C4tQ=)
2: PKNrfh3XImYcJKqE7W0yYI6OiUY.roa (hash: sziy6P9qjmgMh/Wjufdq7yg5DrB3okhv2h8JK1TFDTU=)
3: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: TmYcDsR+7TEPWn6jwQJtLXwtuSbfb+Dh5m4xz0FTD+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:26:dc:54:3e:9d:9c:ee:70:71:a6:f0:44:b0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: Mar 26 15:00:21 2026 GMT
Not After : Mar 27 15:00:21 2026 GMT
Subject: CN=51df2f072eff21e7d1e98e047365ba32778713af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:15:34:25:d2:01:6c:ab:73:73:65:bc:27:
f1:f9:02:ef:73:3b:d8:92:b4:01:f9:a2:03:0b:15:
53:6f:2a:53:93:1e:23:f7:09:c8:6a:79:24:57:ef:
8d:8e:b0:c7:55:c8:da:79:c0:3f:9e:27:7f:07:6c:
fb:e9:bb:26:91:0c:60:b8:15:b6:bf:3c:a2:ef:c7:
f7:36:e5:01:e6:4e:48:d4:44:37:1d:41:9e:e5:36:
08:3e:71:4f:c4:13:77:6b:5c:3a:16:b3:46:c8:2a:
95:61:cf:50:2e:2c:4b:81:f8:06:db:f3:f9:0b:0b:
1a:d6:0f:90:59:9b:2f:1b:e8:39:de:28:ac:d3:e4:
52:b9:ed:c2:87:49:ff:ba:1b:59:38:4f:c3:24:60:
52:31:e9:1d:4c:09:5a:9b:81:d0:f1:b5:95:2d:bc:
16:ca:ad:8b:11:13:13:98:cf:1d:03:cd:15:bf:b4:
11:f5:ea:48:16:84:b1:76:ee:b9:87:68:a3:a2:93:
bb:17:6b:97:56:0d:32:ab:d3:dd:71:16:81:61:1b:
b7:38:04:d8:fb:2c:5a:91:5c:04:d0:bb:a0:65:ad:
f0:53:9a:a0:b8:3e:f6:21:84:2c:cb:b7:94:cd:fe:
db:e4:9b:39:6d:74:0b:cf:ac:e8:83:f0:7f:8c:82:
b4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DF:2F:07:2E:FF:21:E7:D1:E9:8E:04:73:65:BA:32:77:87:13:AF
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:28:5c:ac:c1:22:1b:60:56:ee:6a:cd:77:20:3e:f9:d2:b6:
7d:6f:92:87:40:92:9a:5b:96:35:5f:8e:4a:0f:7c:1d:d5:bf:
a6:58:a8:7d:df:f0:a9:d5:55:4e:3b:92:11:e4:ba:c8:a2:26:
45:04:ae:41:b4:1a:2f:de:f8:6e:3a:46:05:68:41:b9:4b:b1:
30:f0:c0:45:ee:48:32:00:79:03:3a:fd:b9:b0:01:60:cb:fb:
ca:75:2d:c5:0c:7f:af:e2:cc:f8:09:a9:83:2f:80:d0:81:a0:
cc:af:b8:15:86:86:70:66:f1:54:f6:f2:49:53:a0:c3:55:1c:
f7:6d:52:17:1f:3b:a0:4f:59:af:95:75:6b:4f:e3:ca:2c:67:
cf:cb:66:17:2e:a1:ff:2c:5e:f5:5e:70:f6:7a:c3:30:cd:08:
08:94:1e:3b:55:fb:3b:f4:3f:14:08:42:9f:0e:1f:dc:ea:60:
13:36:3d:22:78:07:d3:90:4b:6b:88:8c:73:c0:1b:ca:11:fe:
e2:c9:ca:05:8c:08:ef:ef:be:c2:b3:9d:83:62:34:69:cf:cd:
b9:d0:40:fa:27:7a:0f:01:af:56:ae:71:97:3a:02:49:95:13:
00:02:d6:9a:a8:63:18:a7:8c:1a:d1:cc:dd:cf:e9:c7:a1:09:
82:b8:e7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:25:35 2026 by rpki-client