Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
File: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft (raw, json)
Hash identifier: Le7aMGFq3iOydCGuTeX92hbEbhd4kOypCNBut7Ovzvc=
Subject key identifier: F1:85:3A:C3:A1:60:58:34:D8:1C:F9:11:16:B6:1D:47:5F:40:D2:55
Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53
Certificate serial: 019D27039ECCC9A1F853EBA435E0B588D208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
Manifest number: 15EE
Signing time: Wed 25 Mar 2026 22:00:41 +0000
Manifest this update: Wed 25 Mar 2026 22:00:41 +0000
Manifest next update: Thu 26 Mar 2026 22:00:41 +0000
Files and hashes: 1: YeKtEsYaTNZoSHj3N6MlBsotJrQ.roa (hash: twTw0giPhGzIQ/V/HMZrgKRp++mkr21dxckWNhdSudg=)
2: ielQr4EC94tydWptb7Zy7oQJTlg.roa (hash: IK1qVKo+95L3ssLme0pcM7macPsa/yBGCJukgetUuXk=)
3: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl (hash: 99ZQxTLRlbOEJ02BhipA8LwrkaTp+np8asgVZyalCxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:9e:cc:c9:a1:f8:53:eb:a4:35:e0:b5:88:d2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53
Validity
Not Before: Mar 25 22:00:41 2026 GMT
Not After : Mar 26 22:00:41 2026 GMT
Subject: CN=f1853ac3a1605834d81cf91116b61d475f40d255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d8:cb:e8:da:b8:10:06:cc:b8:e3:6d:0a:51:
d3:39:80:d1:57:ae:ed:a0:52:cc:f6:5b:ff:55:eb:
2b:d2:b1:c2:7a:77:8b:c3:a6:a2:16:25:73:83:79:
a8:e5:e0:1f:0c:f4:1c:d4:de:45:9a:69:e6:1a:d2:
e6:7b:18:85:51:c0:cf:ab:28:a6:d3:76:05:b4:57:
c6:c9:bd:d1:77:d9:8a:fc:74:85:2d:d5:ad:93:da:
07:09:a1:c0:13:69:b4:6c:cb:cf:9d:cd:21:b1:e4:
f8:af:44:c8:7e:75:7f:8a:75:62:54:d1:03:11:e1:
5e:98:35:cd:37:7b:85:91:6f:1e:40:48:bd:f3:ac:
7e:d1:ff:ad:06:ba:28:8f:ca:78:43:64:3f:d8:8b:
33:4f:62:43:6e:c5:7c:20:3c:38:00:f1:67:5f:3c:
dc:b8:8b:b4:c3:76:e6:39:16:eb:b5:61:39:c9:73:
29:11:76:c3:42:08:06:35:d8:ab:82:e9:88:b4:22:
52:95:86:d8:bf:3c:25:d2:70:e6:35:fd:b7:ef:35:
2c:45:c2:d2:6a:77:4f:17:a9:2d:09:b1:4c:51:c8:
e0:10:22:89:10:26:11:93:c4:79:27:c7:78:28:3b:
82:6c:c2:ee:bf:d3:15:c2:59:15:d2:d6:9d:f2:9c:
81:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:85:3A:C3:A1:60:58:34:D8:1C:F9:11:16:B6:1D:47:5F:40:D2:55
X509v3 Authority Key Identifier:
keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:07:c2:b4:a9:10:87:8a:d3:ae:fb:82:a9:30:6b:56:07:13:
51:59:43:05:d6:3e:a1:3a:3c:0d:59:c1:d8:4d:32:a4:53:63:
07:70:3f:d4:c6:80:f4:93:c7:93:70:36:ac:c3:d5:b0:81:da:
ba:e2:70:67:b4:72:d5:83:85:04:46:88:b6:ab:a8:5f:d8:bf:
2f:d9:9b:72:46:60:6f:a5:81:c7:22:99:5a:f4:21:6d:e8:5b:
e8:86:1b:a5:f7:0f:80:2d:e6:c0:61:b4:51:67:d1:52:c5:a5:
85:e2:98:39:f0:9f:85:7e:64:89:ff:f3:99:ce:71:27:85:d7:
a9:ef:65:c8:3c:50:0a:b2:be:4a:71:4f:4a:a7:94:a4:a9:10:
ff:c6:99:ab:3c:bd:29:c7:b4:29:3d:10:b9:6c:96:05:93:06:
85:96:05:19:76:e2:42:66:8d:2a:76:db:f8:1d:79:46:59:f3:
3c:b2:96:46:59:94:21:ba:88:36:ce:ce:f5:ae:92:94:16:68:
88:a5:77:d9:ae:9a:5b:b6:d0:c6:db:6d:81:0f:40:d5:9d:6f:
97:28:1e:33:da:41:18:0b:a5:fa:83:db:0a:3e:43:4b:e6:8f:
a7:7f:12:1e:46:c8:4c:81:13:84:87:d7:b0:ea:70:0f:99:a5:
46:09:f1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:39:16 2026 by rpki-client