Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
File: tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft (raw, json)
Hash identifier: rHSMKnVlqVVYAgjPFFK23VeqxHhm1blkuWafzVQQbj4=
Subject key identifier: 4B:A2:B2:AB:76:FF:59:32:FB:0A:0C:1A:08:61:31:71:97:41:BD:19
Authority key identifier: B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05
Certificate issuer: /CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
Certificate serial: 019D273A8AD3FB60BA672395781D1D17A3C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 23:00:41 +0000
Manifest this update: Wed 25 Mar 2026 23:00:41 +0000
Manifest next update: Thu 26 Mar 2026 23:00:41 +0000
Files and hashes: 1: tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl (hash: HJkPdeX5CWFUpCtSVk1RbuZcBeHQtasyNheuUgYLj7M=)
2: wDBsp0oyWdkjKRu9iS_gOT-BaX4.roa (hash: H0RPzwCZ2+V4qfg0rKJ99HJsmkWUJLpB08RH50xwdYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:8a:d3:fb:60:ba:67:23:95:78:1d:1d:17:a3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
Validity
Not Before: Mar 25 23:00:41 2026 GMT
Not After : Mar 26 23:00:41 2026 GMT
Subject: CN=4ba2b2ab76ff5932fb0a0c1a086131719741bd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1d:97:e6:0f:34:11:8c:79:d3:6d:0e:0c:89:
a1:80:41:3a:d6:b6:ec:5e:3d:ba:5b:fc:a2:6e:75:
86:d3:3d:a9:0e:79:48:a4:d7:1d:63:81:36:b3:c4:
7d:1a:0c:f8:e6:44:31:85:a0:64:c2:fe:84:02:2b:
d7:7d:23:7b:b8:c3:e1:46:91:6f:fa:bc:9e:0f:8a:
13:36:0f:a5:3b:a2:d0:4c:8c:68:83:aa:34:b9:12:
5d:cb:a9:50:c3:6d:63:11:2e:60:a3:0f:aa:5f:41:
50:7a:fe:f0:89:02:e7:6e:be:52:10:42:8b:c2:4c:
4a:e8:68:dc:6d:5a:7f:f5:18:af:7c:0d:b7:9e:1c:
6a:a8:53:bc:04:dc:5c:a6:73:2d:f2:4c:99:5a:ad:
f6:f3:5a:6d:30:d8:61:e3:26:1f:31:2f:54:b7:fa:
b0:21:3a:ae:c1:a3:e0:06:c7:0a:f7:61:13:38:14:
6e:50:99:54:f7:ff:be:9c:e7:10:fa:08:23:a8:04:
0c:44:db:26:b9:62:a7:4b:ba:b8:3a:fa:2a:8f:2c:
26:9e:fc:ab:0d:06:35:53:4d:c4:4d:e1:2c:3d:ea:
1a:f8:1d:be:d8:a1:df:0f:2d:75:d8:f1:a8:c1:87:
b1:51:2d:77:3b:98:cf:ca:0e:bb:2a:78:ba:48:29:
ca:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A2:B2:AB:76:FF:59:32:FB:0A:0C:1A:08:61:31:71:97:41:BD:19
X509v3 Authority Key Identifier:
keyid:B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:69:18:1b:65:47:b7:67:4f:d7:a7:9b:09:87:bf:e8:2c:d9:
5d:4b:47:ff:3b:df:c7:0a:48:0e:8a:00:6d:c7:41:76:95:7e:
17:29:60:d9:3e:41:bf:c9:51:a2:1f:8f:1a:8a:29:10:9a:01:
f3:63:ec:ce:71:32:cb:3a:f8:65:9c:14:22:93:2b:54:5e:73:
11:4a:10:ca:f0:dc:bf:94:78:34:df:5a:8c:d0:ed:28:0a:20:
1c:43:43:e7:08:37:b8:9b:6d:64:e1:26:47:ab:8b:3b:71:4f:
09:a4:7b:41:08:b6:10:d3:76:ab:91:e5:34:7e:3e:c3:00:98:
da:13:28:4a:b6:be:24:db:d7:63:13:68:48:b0:47:c5:cb:82:
7d:6a:04:f8:85:80:ec:a4:a9:b2:60:c3:05:36:ca:8d:35:a6:
8e:59:6a:fa:e0:f9:3c:aa:2b:d8:43:75:98:94:ba:38:39:f9:
f9:db:d6:06:e1:44:e8:09:39:e0:93:e2:76:1b:66:61:e1:b5:
92:be:ad:11:bf:52:e1:56:11:48:84:3a:1f:97:a6:dd:f2:50:
01:aa:bd:59:86:f1:c8:ed:b9:1d:52:3b:5a:42:b9:81:c0:39:
c3:e1:dc:6d:0b:0d:57:9b:b9:a1:72:c1:ee:75:17:b1:cf:28:
44:f8:75:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:46 2026 by rpki-client