Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json)
Hash identifier: FPq1lEbrrobHFJQnRwUCT/48S/6pORURodY9Sn/EhMU=
Subject key identifier: DF:5D:64:9B:34:6F:42:32:16:C5:2C:BD:7C:B9:F0:77:BE:35:79:B8
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 019D284D50DCAA33C147AE001F7BFD034468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
Manifest number: 119C
Signing time: Thu 26 Mar 2026 04:00:48 +0000
Manifest this update: Thu 26 Mar 2026 04:00:48 +0000
Manifest next update: Fri 27 Mar 2026 04:00:48 +0000
Files and hashes: 1: WMqwkkOCeJIiDGczokQt6OKgfpo.roa (hash: 6yCQ2yXVHO2BxnZqJR1Rvu8adOAClmHZ2J60vDEAoZw=)
2: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: VXzVB+rFX6YnG+zmby/rVIKjR/Ud3S+amIwAZck4WDk=)
3: ydyTTB3FHmlgmrUF4u_cEkdDzws.roa (hash: sm5RJb+IplkwipOY1e61+aLvM0eV38hivV05zuDbU50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:50:dc:aa:33:c1:47:ae:00:1f:7b:fd:03:44:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Mar 26 04:00:48 2026 GMT
Not After : Mar 27 04:00:48 2026 GMT
Subject: CN=df5d649b346f423216c52cbd7cb9f077be3579b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d6:84:25:02:8c:84:84:d2:b7:93:3f:89:e1:
a7:40:ea:9f:df:7c:af:8d:83:8a:03:98:73:d6:2e:
43:97:49:0f:c0:70:ed:8a:0d:27:c8:b4:60:51:77:
a9:0c:9c:8d:3a:ae:7b:1c:65:9a:d9:f5:de:33:70:
9b:e9:49:d6:88:fc:fc:8a:cf:92:dd:66:b4:29:c6:
31:b3:07:cf:cf:a4:5e:e8:9e:2c:5d:d3:c3:bb:4d:
aa:ce:30:f1:8a:67:87:3e:ea:d4:ee:99:b3:cf:7b:
24:e5:d5:c9:db:e9:68:1e:48:21:67:a3:7c:9b:59:
31:51:b2:98:03:e6:34:05:ce:0e:1f:eb:be:4c:b5:
56:96:51:67:0c:f8:dd:9f:a4:ee:10:fa:e6:33:02:
9b:c6:13:ca:f9:de:2a:f2:1f:7b:3a:ac:15:94:aa:
35:13:e4:c1:6e:57:f8:5f:cb:2b:28:ab:29:21:cd:
d2:5c:84:cf:84:23:ad:dc:44:56:b9:58:ae:bd:38:
10:29:dd:09:1e:f5:b0:8f:48:6c:d1:0f:c9:73:ac:
52:32:41:b8:58:ea:aa:a9:ff:1a:2a:50:89:20:48:
b1:2e:7f:4c:1b:8d:9c:44:d7:81:4a:f2:d2:ed:3a:
39:fd:4b:4d:fe:13:ad:00:03:6f:d0:a4:12:93:36:
92:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5D:64:9B:34:6F:42:32:16:C5:2C:BD:7C:B9:F0:77:BE:35:79:B8
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:64:77:65:1d:f1:af:2e:2e:4d:ba:ee:f9:a7:de:44:32:37:
25:00:b1:10:fb:88:30:eb:7d:8a:0c:4a:4f:36:a7:41:fb:73:
b7:e0:e0:ba:ad:d5:d3:25:0b:8c:e7:9a:07:83:5b:65:aa:c4:
2c:fe:f9:6c:d5:eb:ec:f4:5d:a5:36:02:01:74:c8:ad:30:78:
22:93:c8:58:9c:66:30:81:20:28:20:78:ac:98:a3:1d:0a:79:
67:c1:e0:16:e6:b8:b0:fc:d4:15:02:26:c2:61:b1:fb:a5:6b:
4e:46:52:55:32:d8:9c:e1:74:e4:8e:7d:19:6d:9e:de:81:97:
d0:18:1b:ac:6f:26:dd:57:af:5d:f3:99:7b:00:69:b1:b5:b0:
03:3d:5f:47:9a:76:0f:62:62:82:5e:79:b1:aa:3c:a1:25:5d:
2d:ab:47:63:6f:c0:85:31:ee:eb:9b:b8:a1:4d:f1:c9:6d:72:
d9:a1:65:f4:2d:bb:49:3d:50:63:34:16:95:1c:b0:9c:ee:37:
8b:90:69:d6:39:57:94:0e:88:72:92:09:47:50:7b:86:76:53:
e4:4b:ef:f0:60:99:c5:de:39:30:4f:8a:a4:32:c8:ee:84:27:
fe:7d:80:f6:f5:cc:39:07:78:1e:88:a5:7f:5a:2b:69:37:5d:
44:cc:e2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:48:20 2026 by rpki-client