Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/92d1fe-93a1-47cb-aec7-20424bba0cd0/1/tYV2mGjjnEWl9RJNIyVtd48hawE.mft
File: tYV2mGjjnEWl9RJNIyVtd48hawE.mft (raw, json)
Hash identifier: AZvaVRCkhsQLGNDprAUHque1E+Hvv3iIsCUmfSuIPys=
Subject key identifier: 09:73:2B:3F:5B:C3:CA:96:97:75:E1:83:DD:27:78:7E:98:9E:9E:27
Authority key identifier: B5:85:76:98:68:E3:9C:45:A5:F5:12:4D:23:25:6D:77:8F:21:6B:01
Certificate issuer: /CN=b585769868e39c45a5f5124d23256d778f216b01
Certificate serial: 019D28844BE138DFF414117AF1C3EF96D263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYV2mGjjnEWl9RJNIyVtd48hawE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/92d1fe-93a1-47cb-aec7-20424bba0cd0/1/tYV2mGjjnEWl9RJNIyVtd48hawE.mft
Manifest number: 27
Signing time: Thu 26 Mar 2026 05:00:51 +0000
Manifest this update: Thu 26 Mar 2026 05:00:51 +0000
Manifest next update: Fri 27 Mar 2026 05:00:51 +0000
Files and hashes: 1: tYV2mGjjnEWl9RJNIyVtd48hawE.crl (hash: uJy9b5Fi5mBvs2cSgfInMG1380mOpLxNrkSgYbyr0pI=)
2: uU8ossy2p7V8NUr-yE6SGQbVl1A.roa (hash: d8UVhRXFfrSP4F8iKcPdZK8V4ewW5P0RPFn5tLTH2VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/92d1fe-93a1-47cb-aec7-20424bba0cd0/1/tYV2mGjjnEWl9RJNIyVtd48hawE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/92d1fe-93a1-47cb-aec7-20424bba0cd0/1/tYV2mGjjnEWl9RJNIyVtd48hawE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYV2mGjjnEWl9RJNIyVtd48hawE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:4b:e1:38:df:f4:14:11:7a:f1:c3:ef:96:d2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b585769868e39c45a5f5124d23256d778f216b01
Validity
Not Before: Mar 26 05:00:51 2026 GMT
Not After : Mar 27 05:00:51 2026 GMT
Subject: CN=09732b3f5bc3ca969775e183dd27787e989e9e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dc:c9:a5:d4:ea:83:9c:ed:29:0a:a1:6a:58:
a0:d1:3e:48:63:84:13:a6:82:56:45:8b:12:0b:2a:
e2:cf:d4:36:da:ea:c9:27:37:51:e0:70:7f:c6:16:
2e:5c:5a:1f:0d:f0:95:f2:62:1c:92:28:f4:0c:ec:
53:50:7c:a7:f8:82:c8:9b:e0:d2:ef:22:38:a9:34:
5c:7a:02:cb:f2:9a:26:16:cb:a1:52:65:3a:43:4d:
03:1b:26:50:3b:0f:9e:61:34:d5:70:c8:b0:e7:14:
81:a3:2f:04:13:83:fc:63:15:95:9e:ab:47:33:81:
2c:e0:e6:b6:6f:b0:ec:9b:69:80:50:68:81:84:50:
22:cb:36:84:9d:a2:0c:11:58:98:a6:1e:2b:dc:3d:
e9:0e:d9:0b:16:0c:c9:db:f8:82:ab:a1:8f:0d:42:
c6:cd:29:53:29:6a:1f:d8:e1:d3:92:29:bc:ef:8d:
70:32:ba:f9:63:50:a2:27:99:a1:19:24:29:8b:cd:
51:ba:9c:67:58:5e:ec:62:a2:af:79:08:d6:1c:98:
0c:a5:b0:fd:d4:7f:f7:46:20:a7:9f:09:fb:6d:ba:
a1:7d:7b:16:67:ce:e1:57:2a:86:5f:31:3a:7a:7d:
e5:22:3d:6d:70:17:e6:8e:20:ae:7a:3f:e2:a4:75:
e4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:73:2B:3F:5B:C3:CA:96:97:75:E1:83:DD:27:78:7E:98:9E:9E:27
X509v3 Authority Key Identifier:
keyid:B5:85:76:98:68:E3:9C:45:A5:F5:12:4D:23:25:6D:77:8F:21:6B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYV2mGjjnEWl9RJNIyVtd48hawE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/92d1fe-93a1-47cb-aec7-20424bba0cd0/1/tYV2mGjjnEWl9RJNIyVtd48hawE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/92d1fe-93a1-47cb-aec7-20424bba0cd0/1/tYV2mGjjnEWl9RJNIyVtd48hawE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:41:58:a2:7b:c8:51:ad:ab:44:46:c9:53:fc:70:34:43:09:
a3:50:0a:85:09:15:48:f5:61:d4:57:32:b6:16:c0:20:4f:de:
6f:5e:fd:19:bf:41:ce:7c:14:13:3e:46:3a:d3:bb:0c:af:ef:
30:c6:81:a1:d9:85:87:02:9b:92:22:e4:e5:ee:9e:2d:6d:e8:
5c:bd:6b:78:2f:03:47:4a:94:87:45:19:da:2c:62:49:df:cf:
06:62:17:82:81:93:76:08:4b:7e:a6:40:be:ff:2f:7d:85:0b:
3d:e9:d2:5d:71:95:81:e2:95:85:e3:3b:e2:8b:b5:2d:53:64:
81:6e:e4:ca:b1:9a:a7:91:77:7f:55:3f:5f:e8:53:12:5b:ab:
88:b4:1a:ba:51:68:3f:c6:16:80:d7:ad:8f:18:9c:a5:90:2b:
2a:09:f2:5a:fe:01:51:14:b3:99:16:0e:37:92:b9:5a:eb:69:
c8:24:2b:eb:34:76:f0:34:06:fa:58:e7:00:bf:30:7b:35:f5:
3e:8d:dc:e4:36:d4:4d:36:10:3d:b1:9c:21:f4:7f:1d:b8:4e:
ef:cf:73:12:1f:42:d5:e0:3e:36:93:3a:74:6c:74:cb:23:9c:
d2:21:fe:dc:01:c5:ee:d9:14:cc:30:2d:ce:f2:10:28:b7:0e:
f8:5a:a7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:13:36 2026 by rpki-client