Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
File: tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json)
Hash identifier: TT5yqicIO8C7fGKpDdOqFBFqAVOoZmLvNfdkg183f50=
Subject key identifier: 39:2C:B7:13:F9:D8:00:EA:FC:FC:7E:94:9F:10:32:19:DA:F9:DF:61
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial: 019D265FEC4D24BD59556E6AC78B4C5B3DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:01:53 +0000
Manifest this update: Wed 25 Mar 2026 19:01:53 +0000
Manifest next update: Thu 26 Mar 2026 19:01:53 +0000
Files and hashes: 1: 1-GyqlA5KmcLfrL7pM3klE299nlw.roa (hash: J/BXL3XYbhHb/gfys6Z72uUSQjUFONh9EZ4ff4040ZQ=)
2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: AjC9+F/9UBAlWpdo9TUUZ6WyGK4BcCnMNyU6p/ab6xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ec:4d:24:bd:59:55:6e:6a:c7:8b:4c:5b:3d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Validity
Not Before: Mar 25 19:01:53 2026 GMT
Not After : Mar 26 19:01:53 2026 GMT
Subject: CN=392cb713f9d800eafcfc7e949f103219daf9df61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:db:02:e9:3d:58:92:01:09:ed:0c:5c:ff:19:
ed:ee:d1:52:ff:71:a9:dd:b0:f9:45:b9:9b:c9:2c:
c5:5c:ae:21:2b:8c:1a:e3:f6:3d:2f:46:61:63:29:
d4:43:bd:21:93:95:67:0f:c2:a1:c0:3e:88:d6:bb:
60:9c:31:e2:8f:d0:18:1f:5e:52:2e:e4:50:70:59:
ae:04:08:2a:d3:c6:e2:16:17:4e:b9:a2:72:87:4b:
dc:ac:ee:50:31:30:e4:86:49:bf:e8:0d:68:e0:81:
d7:01:cd:16:62:05:90:a0:b8:4e:63:f3:b5:e2:cc:
6d:2c:30:68:60:6b:cf:d8:f3:a7:c3:81:d3:67:67:
d9:f9:71:93:0d:24:7b:f2:3e:07:1c:f7:58:67:a3:
2b:06:84:91:7f:87:40:12:5c:aa:f9:31:a1:8f:a4:
9c:b1:a0:60:8b:36:56:5a:68:09:58:9c:33:f7:94:
8f:9e:4d:e9:2e:ab:48:c4:eb:7d:83:a4:7b:49:36:
90:e5:f3:fa:ff:68:b8:f4:90:50:f2:40:f3:06:95:
88:d6:f9:24:b7:00:b9:3e:63:64:b7:d0:9e:47:88:
15:2a:01:5b:f6:f5:37:b3:2b:8f:a7:32:c4:2d:41:
80:8d:97:c0:7d:b6:b6:3d:e9:51:cf:d9:14:b8:56:
7f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2C:B7:13:F9:D8:00:EA:FC:FC:7E:94:9F:10:32:19:DA:F9:DF:61
X509v3 Authority Key Identifier:
keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:54:08:e9:3e:aa:c0:d0:76:3d:0f:8c:77:32:c4:69:c9:41:
59:80:31:3e:51:8f:b3:bf:d1:91:5a:5d:28:dc:a0:44:d5:49:
38:31:29:75:a5:6d:c9:8b:a0:7a:54:03:cd:b0:fc:72:f3:05:
d2:36:27:57:8a:58:d1:fb:ad:e9:d5:48:5d:58:36:b4:1a:22:
9b:bb:a4:58:e6:f4:7a:b7:7f:d0:4a:d2:2f:18:6e:f2:ec:92:
13:9c:31:8d:dc:80:f5:5f:a1:98:c1:f8:56:21:87:30:bd:69:
f9:1b:c1:41:79:c0:39:5e:62:46:fc:e0:08:2e:56:01:36:e8:
9d:ca:bb:f1:7d:a8:c3:29:50:b1:5b:2d:44:7a:8e:48:e0:55:
fa:91:4a:bf:38:e1:d1:82:29:8d:24:c5:d8:e0:9f:a2:95:ed:
e1:d2:b6:a0:c9:37:5d:1f:c2:f6:58:99:72:75:36:62:eb:14:
01:ab:88:5f:99:bd:ec:71:70:35:bf:c2:07:d3:4c:d5:4f:98:
84:98:9e:74:a8:37:52:54:fa:4d:97:10:3a:12:0e:d9:5e:31:
89:18:c7:f6:c6:41:94:44:42:48:ad:48:e1:9d:5a:bd:27:ad:
17:d6:16:74:99:77:9d:6e:78:89:e0:d9:50:4e:99:20:ae:7a:
de:c4:be:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:36 2026 by rpki-client