Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
File: tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft (raw, json)
Hash identifier: sq3Fvkzw4c7vp0egXLbH7RcXPvy/GlC5anRrMJT0MPs=
Subject key identifier: B1:77:DB:CD:E0:4C:01:36:90:E5:BB:72:32:BA:5C:68:45:2C:85:17
Authority key identifier: B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
Certificate issuer: /CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Certificate serial: 019D2D3D55D4048AACA4334EAD27EA4D9C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
Manifest number: 0528
Signing time: Fri 27 Mar 2026 03:01:27 +0000
Manifest this update: Fri 27 Mar 2026 03:01:27 +0000
Manifest next update: Sat 28 Mar 2026 03:01:27 +0000
Files and hashes: 1: JaJgHNZlSAbtuKvLA3-BudJJTlo.roa (hash: uT77HGoSLR7ak2tNmSlHYY46dhCnEltA+vTWyDTCj6Q=)
2: tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl (hash: Ez7oIE3kIAuW5laWugcOb2v0nd2holTMGXP6NCXe0QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:3d:55:d4:04:8a:ac:a4:33:4e:ad:27:ea:4d:9c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Validity
Not Before: Mar 27 03:01:27 2026 GMT
Not After : Mar 28 03:01:27 2026 GMT
Subject: CN=b177dbcde04c013690e5bb7232ba5c68452c8517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:c5:18:f8:8b:3b:28:99:60:40:57:74:91:
59:f3:b6:4d:4c:a0:0f:ed:4b:ec:41:a0:34:d5:0f:
49:bb:f7:ec:8e:ab:40:d4:77:ef:92:f9:93:a9:6f:
a1:38:b0:d8:2b:fb:d4:9b:f7:d9:59:c2:23:06:0e:
01:5e:97:22:40:ee:85:72:33:74:ae:b7:98:76:3b:
3e:66:bf:00:6c:fd:8c:d2:a4:92:38:cd:ad:ad:64:
2b:4e:f4:b0:34:60:7a:b3:46:68:c0:57:bc:74:ac:
44:bc:31:77:b5:db:5d:55:63:5c:3c:ca:de:a6:44:
40:83:f3:ba:3f:ef:70:12:97:68:39:a8:0d:82:a7:
88:ae:46:3e:09:eb:90:3f:fd:c0:e9:b4:32:6e:ea:
b7:e7:6d:19:69:2a:3f:09:3f:fc:fc:60:7a:06:37:
d3:31:4b:29:d2:d5:9f:03:97:dc:70:c7:27:15:ff:
62:c2:4b:f5:e8:e8:be:82:ee:b8:ae:dd:5a:31:4b:
ca:14:a0:53:23:95:32:c2:fe:72:d7:7c:d5:e6:3d:
30:10:88:a7:38:53:ba:92:76:d4:ed:6a:bf:ef:02:
1a:18:be:3d:09:97:3a:0d:07:8d:5e:cd:f5:14:78:
75:01:d0:bb:aa:c2:55:ac:21:f6:61:2c:f5:e3:38:
3f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:77:DB:CD:E0:4C:01:36:90:E5:BB:72:32:BA:5C:68:45:2C:85:17
X509v3 Authority Key Identifier:
keyid:B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:df:76:b5:8d:f6:01:12:ae:df:9e:b1:c9:18:af:fa:3a:d2:
06:b6:4d:dd:af:86:31:be:8e:af:54:a0:fb:7b:28:29:d2:32:
34:20:6b:48:ed:68:0a:d6:85:c3:ae:32:2b:0d:e9:d8:c2:8e:
66:cf:7b:bc:60:b3:fa:2a:de:01:6f:31:8e:0e:a4:96:ac:28:
99:3b:4c:a9:0b:45:57:b9:a7:7b:c1:52:f5:92:c5:b4:28:57:
c2:02:36:c4:c3:99:fc:84:6e:82:ee:3e:36:6d:b8:fe:92:e9:
2e:4e:a0:c5:f4:88:5b:b4:9c:03:3c:62:a4:ac:46:3b:44:e6:
0c:61:ce:03:f4:9a:d2:90:38:d4:c8:dc:79:ae:48:66:b9:68:
fe:5a:82:e6:9f:eb:da:81:c8:c1:61:04:15:bb:f2:58:8c:be:
67:28:b3:8e:28:1e:fd:a0:54:8f:3c:be:96:64:98:43:25:60:
9b:ed:26:c9:a7:06:04:4d:d4:8d:5d:ae:41:75:cf:b1:10:2a:
03:fe:42:3f:cd:73:42:6c:05:af:9a:30:52:2e:f8:50:ff:c9:
a1:e2:b6:b6:78:87:df:0d:67:06:5a:a4:f7:22:3e:59:06:1c:
f6:49:14:68:5d:76:1c:13:53:43:69:c4:a0:12:40:04:15:28:
d0:b8:9b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 10:00:04 2026 by rpki-client