Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
File: tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft (raw, json)
Hash identifier: YZJHO2/Zg120E652Y4vhpL1uWZy9WN38gplwy8yIMe4=
Subject key identifier: C3:6F:68:0E:F3:2C:BF:BA:9C:04:17:BE:84:ED:70:D2:F1:29:E0:19
Authority key identifier: B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
Certificate issuer: /CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Certificate serial: 019D2695BB19C5ED4C4F1B3C041E87E57A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 20:00:40 +0000
Manifest this update: Wed 25 Mar 2026 20:00:40 +0000
Manifest next update: Thu 26 Mar 2026 20:00:40 +0000
Files and hashes: 1: RNoONMgjC7AI9bUiPXHJnoNxdw4.roa (hash: EyX2BbVopJ5hjqPnGfS3gH2lJBH+hCeBYJzhz4A8ggc=)
2: nUF12WZsvpoiPI9C00eeFdJfaVo.roa (hash: 9SbxvhyRlkdpKS3ff2WOCyOa7It2KK0x1wSPI6mJgOw=)
3: tNl2UUnZ4217WSLfqRDSI0O_BWU.roa (hash: TJsFtOL6bWviF8Z8b9ypqKLo31djdrQdvLmCXkT7uLQ=)
4: tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl (hash: UkM97TAMQd+C6MES5l44sE47kt7rpcTiL+OJTNPvwE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:bb:19:c5:ed:4c:4f:1b:3c:04:1e:87:e5:7a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Validity
Not Before: Mar 25 20:00:40 2026 GMT
Not After : Mar 26 20:00:40 2026 GMT
Subject: CN=c36f680ef32cbfba9c0417be84ed70d2f129e019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0f:57:a1:0d:f1:29:b4:02:93:c5:99:26:51:
e1:95:8f:45:e9:46:81:1e:d9:26:b1:5f:6d:84:ce:
49:75:2a:a9:53:a4:38:db:32:84:8e:02:2c:9e:d5:
93:7e:ca:29:ed:df:3f:12:d9:6e:7f:f6:26:92:fb:
c8:92:c8:1a:0a:3b:5d:30:e0:67:3c:09:ec:9b:d6:
26:ba:03:f8:cf:35:c8:88:a2:d4:89:0a:3a:1c:93:
68:c0:9f:03:ef:54:00:84:73:1a:20:8f:25:28:d6:
1d:ae:15:b5:02:a1:37:65:fb:a6:0f:f1:21:37:93:
95:b7:4a:cc:5c:91:ce:bc:c4:9d:a8:5a:59:0d:2f:
6d:7a:53:a2:0f:e5:72:65:30:4a:65:a0:5d:70:15:
6a:48:40:b2:48:95:07:8b:3b:30:b1:2c:e2:a7:ca:
e1:2a:87:7a:40:85:b3:99:59:99:3f:e3:41:23:09:
d7:f9:d1:f4:0c:d7:3b:9f:9a:89:4c:eb:e3:49:0b:
8d:bf:cf:9d:36:6e:68:75:6b:2b:e6:af:1d:14:03:
24:b6:79:68:65:d3:2f:e8:db:62:6b:0e:01:28:42:
15:07:9e:34:ea:ad:81:ae:9e:30:6a:ed:30:10:e0:
18:37:66:76:ee:ea:66:af:65:f2:a2:ac:3c:eb:20:
a0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6F:68:0E:F3:2C:BF:BA:9C:04:17:BE:84:ED:70:D2:F1:29:E0:19
X509v3 Authority Key Identifier:
keyid:B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:99:6b:ba:e1:75:7f:ef:97:9a:f3:b2:40:70:8c:7c:85:5f:
98:7c:f2:40:65:4f:3d:8b:c7:fa:d9:b5:5f:a9:dc:d1:6c:10:
54:f2:8c:e7:02:a5:a6:80:c6:e1:3c:bd:9b:40:a3:9b:ca:b5:
53:9c:a4:8a:f8:dd:67:20:f2:0a:79:3a:08:ef:e9:94:32:57:
29:a0:86:3d:5a:6d:40:c4:57:62:7b:ac:b0:40:b7:18:61:d8:
00:e8:e7:e9:08:51:72:57:92:c9:8a:de:84:6b:d8:02:00:5d:
ea:48:5a:27:59:7c:b1:cd:70:c4:d4:90:ff:7f:1b:f8:97:dd:
c7:10:67:19:52:fe:51:37:20:6f:56:19:7e:32:3c:36:ce:63:
ec:c2:2d:e9:60:f3:ae:91:26:5c:24:5f:c1:f6:af:72:15:fc:
1a:0f:dd:aa:08:21:80:a4:9b:80:c0:a1:94:c5:a4:a7:41:5b:
20:3d:48:13:2f:ad:6e:4d:6a:d7:70:7c:0a:51:94:e0:6d:0b:
03:0e:4f:ea:a4:7f:1b:af:0f:ae:ff:7a:1d:13:e2:54:0e:9f:
89:0e:f2:29:64:34:91:c7:49:f0:c6:5e:7c:e8:ba:c4:55:cc:
50:d0:8e:58:a7:8c:91:85:c3:c7:b4:96:26:cf:0e:5b:a6:ec:
68:e4:e1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:51 2026 by rpki-client