Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
File: t0QwmQgmnlOLK0-pYzcMnsIHeng.mft (raw, json)
Hash identifier: coSYZTK9iwFDbv1QPwWjgpk/GRPU5tQdbjZx/OBqBQ0=
Subject key identifier: 98:20:82:30:78:87:73:C5:8E:A3:CF:16:C4:B8:8D:14:14:9C:23:32
Authority key identifier: B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
Certificate issuer: /CN=b744309908269e538b2b4fa963370c9ec2077a78
Certificate serial: 019D24A769615E90663E0BEED4D364A3279E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
Manifest number: 12D7
Signing time: Wed 25 Mar 2026 11:00:44 +0000
Manifest this update: Wed 25 Mar 2026 11:00:44 +0000
Manifest next update: Thu 26 Mar 2026 11:00:44 +0000
Files and hashes: 1: 6Ftx8Zws0EArRVC2i8S0_U_teiE.roa (hash: 7fbXsad6LDVhAfWE8WJEJDQ3QGP+dEI28LUew1x9B8A=)
2: AZAVETW5nGbM4Ib7koJRmOOqy04.asa (hash: iabYHg5cc7CrHac7c0hzecT2lUuKxBFUzv+J4PC7fgk=)
3: t0QwmQgmnlOLK0-pYzcMnsIHeng.crl (hash: AbfUFfi0JXuzsfM3jn2BPJsGxnzObV1KQ3OTzVm+oUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:a7:69:61:5e:90:66:3e:0b:ee:d4:d3:64:a3:27:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b744309908269e538b2b4fa963370c9ec2077a78
Validity
Not Before: Mar 25 11:00:44 2026 GMT
Not After : Mar 26 11:00:44 2026 GMT
Subject: CN=98208230788773c58ea3cf16c4b88d14149c2332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8c:82:1b:34:00:90:7f:0b:ff:ab:2b:52:6a:
00:e2:17:2b:94:df:53:1f:fb:f6:b3:ff:8e:2c:ca:
bb:04:1d:c0:35:d2:20:80:10:31:32:f9:78:dd:29:
18:20:df:fc:75:c6:22:7c:78:15:2d:e9:a3:b0:e9:
e7:f7:c9:24:71:13:53:a6:e3:87:3a:39:3a:e3:6c:
c6:8f:66:bc:4a:c7:d4:61:ab:09:20:65:f3:1d:67:
0b:a4:3d:1e:4b:dd:09:4b:e1:d4:98:83:16:cf:c1:
19:99:cd:06:39:d8:32:b0:d8:a9:b1:1a:53:88:91:
0b:f2:da:b0:6e:19:e6:c8:81:d4:c7:8c:37:3e:19:
85:2c:04:87:ca:4c:2d:9f:e8:57:1c:a0:16:9b:85:
e8:45:d1:ec:a3:c1:22:18:2c:37:8e:01:e8:2f:b6:
20:e6:09:69:14:10:0d:28:43:c0:6e:e8:4b:03:be:
48:e0:92:60:10:c7:89:36:0f:23:de:5d:ec:f5:26:
4a:dd:d1:15:ff:b5:be:7b:8e:4e:72:63:03:aa:19:
b9:eb:c5:8a:85:c8:be:4a:b9:7c:34:45:6b:f9:dc:
1a:4b:45:94:24:ec:66:b3:2e:e7:81:bb:bb:66:12:
7e:05:1e:2e:78:5a:b4:e8:31:6a:a3:40:57:e0:5b:
af:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:20:82:30:78:87:73:C5:8E:A3:CF:16:C4:B8:8D:14:14:9C:23:32
X509v3 Authority Key Identifier:
keyid:B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:25:c4:8b:1f:32:c0:5f:58:ef:60:ca:a9:91:25:11:2f:d7:
4c:02:13:41:dc:93:be:de:aa:51:39:67:1a:44:66:c5:64:75:
ba:5f:b8:dc:66:c0:6b:65:8c:bb:57:a1:49:d1:47:d8:bf:7f:
b5:83:61:ca:ab:4b:8b:f9:8a:b6:ff:8b:dc:93:10:02:47:5d:
00:e8:e1:63:8f:b1:06:e6:a3:aa:30:22:bb:14:56:12:2a:ba:
d6:32:22:35:6c:24:5b:75:63:43:94:41:c4:d9:08:0a:ce:29:
2d:ae:e2:30:66:00:ae:25:56:a8:04:86:c1:16:c6:f6:35:91:
49:bb:b5:d7:cc:4f:84:38:10:9a:5e:af:07:b3:60:a0:e2:ef:
c3:74:57:da:be:04:0a:e1:bc:1e:74:8f:8c:8f:45:21:70:4c:
cd:b7:12:9f:2d:0f:dc:f8:79:e0:e9:22:2d:a6:b4:89:6b:21:
b9:4e:28:1c:e4:59:d9:d4:ee:7f:6b:5c:0b:16:68:ae:31:31:
27:22:3e:84:55:32:2a:7c:5f:a5:d8:91:fc:90:17:dc:b1:fa:
92:ce:e5:92:5f:bd:f3:f7:b2:17:44:af:53:d7:c4:9c:ca:ff:
ec:b1:b6:93:6e:84:5d:33:b9:98:e2:24:97:18:ba:06:c1:7a:
f2:5a:4b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:26:09 2026 by rpki-client