Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft
File: tIENfJv8WLngoeWRacPdMi3p9zc.mft (raw, json)
Hash identifier: xYTufSbQ1VD+N8WpNs0/MHAbO/fa/cx5gfJZ9bVNZ7M=
Subject key identifier: 41:31:5D:D9:C3:F7:31:42:3D:69:B5:A2:15:89:A2:3B:47:3F:8F:38
Authority key identifier: B4:81:0D:7C:9B:FC:58:B9:E0:A1:E5:91:69:C3:DD:32:2D:E9:F7:37
Certificate issuer: /CN=b4810d7c9bfc58b9e0a1e59169c3dd322de9f737
Certificate serial: 019D27049AEB9F78340174B50EAC2F44F973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIENfJv8WLngoeWRacPdMi3p9zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 22:01:46 +0000
Manifest this update: Wed 25 Mar 2026 22:01:46 +0000
Manifest next update: Thu 26 Mar 2026 22:01:46 +0000
Files and hashes: 1: sBKm5lh9pFW6Bx5UfqBwJxTOW-c.roa (hash: fm7BpsPCc0ljnRZ7PGXN1/E5kbFIYol2cEhLrnlX2S0=)
2: tIENfJv8WLngoeWRacPdMi3p9zc.crl (hash: xaQJt6lidVsfwLLblqYwePyNJR6VkFaI1/uFnpESvkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIENfJv8WLngoeWRacPdMi3p9zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:9a:eb:9f:78:34:01:74:b5:0e:ac:2f:44:f9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4810d7c9bfc58b9e0a1e59169c3dd322de9f737
Validity
Not Before: Mar 25 22:01:46 2026 GMT
Not After : Mar 26 22:01:46 2026 GMT
Subject: CN=41315dd9c3f731423d69b5a21589a23b473f8f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:5f:9f:de:9b:1b:ba:1d:23:ce:93:4b:87:
b4:ca:c9:ba:5b:ac:c4:b6:fe:28:97:1a:80:7c:f0:
4b:d0:78:89:b7:57:40:35:48:41:30:6c:35:3c:01:
2c:4a:e7:a1:e4:4a:5c:6d:0b:e1:1c:16:03:b0:07:
e4:db:46:9f:3b:e6:b3:92:0b:a6:e8:20:a7:f6:e0:
ac:21:d1:c6:ab:60:ee:c8:93:f2:dc:a1:bb:e0:c5:
52:5f:a0:ca:95:1d:5b:dc:21:4a:ae:a2:21:ee:08:
74:f9:42:25:42:56:94:44:c8:bc:fa:3f:28:42:c8:
20:a1:1e:36:b3:45:07:e6:c7:9e:36:21:fa:5b:98:
7e:56:b0:d6:e4:f9:36:b0:7b:67:06:a1:2b:8d:55:
f7:13:73:23:49:49:58:33:ee:99:60:72:2b:00:d1:
b6:d7:55:07:90:56:7f:47:4b:38:2d:3d:61:16:85:
69:8b:57:45:f0:94:9a:c5:31:18:fd:0a:19:2d:ec:
a7:77:c1:7b:89:a7:90:fd:b8:d8:16:7c:96:e2:b7:
de:54:3f:22:f0:f2:11:a5:25:04:e7:22:82:33:47:
ab:ba:8f:37:b8:48:44:be:15:ad:57:8c:75:41:55:
f1:c5:4c:09:2c:57:46:7a:16:a2:14:ab:52:90:13:
71:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:31:5D:D9:C3:F7:31:42:3D:69:B5:A2:15:89:A2:3B:47:3F:8F:38
X509v3 Authority Key Identifier:
keyid:B4:81:0D:7C:9B:FC:58:B9:E0:A1:E5:91:69:C3:DD:32:2D:E9:F7:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIENfJv8WLngoeWRacPdMi3p9zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8b:ab:ab:fb:08:7f:90:36:0c:a0:73:a1:36:04:a6:9e:7f:
1b:18:10:05:60:ca:3d:71:35:8a:42:eb:66:68:3e:ce:98:f4:
f0:fb:04:cc:e8:66:22:e9:23:b7:1e:9c:23:74:e6:39:4e:4f:
a8:70:67:39:17:77:16:be:1f:91:6b:45:e4:44:fc:dc:b8:dc:
d7:2e:c0:e5:83:6c:60:1c:29:ab:38:2c:d0:46:1b:96:41:be:
11:fc:88:0b:70:d5:54:e2:a5:6c:fa:04:c6:67:e6:53:45:76:
2b:68:cd:0a:c9:09:a2:ca:f7:54:f4:2c:b0:15:1f:ae:34:1c:
67:b0:b9:00:9e:87:ab:80:c7:b7:04:5e:09:98:b4:dc:b4:ea:
72:88:10:61:b9:51:2e:4d:2d:8f:ec:82:bf:5b:6b:8b:d9:7d:
cc:8d:52:02:67:71:4b:5e:0d:a6:04:ea:c5:d9:a9:e8:fe:64:
e6:74:4e:1f:7e:9f:ba:2b:64:82:c2:89:9a:a3:ea:52:60:93:
d3:6f:33:37:2b:5b:bd:0c:ff:32:9e:ee:e6:36:b0:53:1d:ad:
f1:2b:39:de:4a:84:e3:7c:d2:34:42:57:b7:4f:7f:1a:9d:2e:
6d:78:40:67:75:47:f3:db:37:84:64:d1:f5:6d:70:09:dd:38:
11:07:2a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:55 2026 by rpki-client