Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
File: TzvVbotU5tonu-ZiLaxny_Aqgeo.mft (raw, json)
Hash identifier: MGAQrap8BebQ5AT8zODLXpFiP92z6jt+zg1UrQFmBn4=
Subject key identifier: 54:0D:74:00:0B:0D:27:B0:77:EC:06:2D:60:AE:C8:CC:7E:61:1E:2C
Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
Certificate issuer: /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Certificate serial: 019D265EE9D7D33881F8534A7768481C579A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 19:00:47 +0000
Manifest this update: Wed 25 Mar 2026 19:00:47 +0000
Manifest next update: Thu 26 Mar 2026 19:00:47 +0000
Files and hashes: 1: 6h3DLRd0aoO08FWkuvK-DIL1TAI.roa (hash: QbNhinBRvnYOWmudxD6YkQ5YvTv3wj3nF5VH2568D0c=)
2: TzvVbotU5tonu-ZiLaxny_Aqgeo.crl (hash: z07b3QUa8+Gko3oOq78bw7eV6mR8gmhWGhibyHa+tnk=)
3: kzYQmwQKzbuQvS3iB2mDUlnw91Y.roa (hash: bz4ecHp+kkkRf1WW8soaqZgJTcHf8FiOXW+H4gSzf48=)
4: lv8af-jyuveaHC9x_OKdx2NgSxI.roa (hash: qC6P7LJylLpMoNR/tNemeZF9+aw6XACba3yU1fASXaI=)
5: wMLINqfRL31emUgeWzPrQ7en_WU.roa (hash: 28WktakjRSH95PtqAXbEMoIgPvxQiYsWki+RGQe70G0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:e9:d7:d3:38:81:f8:53:4a:77:68:48:1c:57:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Validity
Not Before: Mar 25 19:00:47 2026 GMT
Not After : Mar 26 19:00:47 2026 GMT
Subject: CN=540d74000b0d27b077ec062d60aec8cc7e611e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:e5:5e:05:f5:8a:e6:73:e7:cd:ec:81:ff:
6f:e0:fe:80:cb:8d:3b:71:61:c6:bb:6e:72:c8:8e:
7d:1a:b5:43:61:89:c1:88:4d:67:79:f0:84:60:78:
ca:f5:bb:56:42:ed:10:8b:09:82:e4:18:36:9f:0d:
5f:f7:b4:36:9a:c5:c0:66:d8:1b:43:90:81:64:94:
0b:d1:32:93:ec:0e:f7:4c:7d:04:c4:37:50:df:41:
22:02:78:f9:f2:1c:33:ee:6f:77:fb:8b:5c:e0:02:
10:23:be:5d:7a:ce:9a:e4:e2:95:0f:39:a7:b9:e8:
92:5e:20:bb:0e:ac:5a:3b:9e:e1:fa:79:55:b1:ca:
28:d8:65:97:0b:08:9f:ef:83:c1:65:71:07:4e:d7:
e5:0c:56:92:93:6c:04:b8:e5:0d:e0:4c:c2:56:0c:
96:c5:72:37:6d:9e:b5:b5:8d:c5:1a:e4:43:f2:4e:
d8:02:12:1d:ae:a8:bc:c5:a1:9d:3c:18:84:90:6f:
7e:5d:03:57:d9:13:24:f8:00:f2:46:8e:d8:d3:1b:
7f:a0:ad:6a:7c:3c:ce:91:5d:b9:19:0a:07:91:8f:
be:cf:f1:47:24:4c:1d:94:bf:9c:8c:b7:aa:fa:aa:
d9:f5:b7:9f:c1:87:af:75:7d:42:8d:d9:33:b4:fa:
c7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0D:74:00:0B:0D:27:B0:77:EC:06:2D:60:AE:C8:CC:7E:61:1E:2C
X509v3 Authority Key Identifier:
keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:5e:69:ee:fc:75:d3:ad:67:c9:57:40:56:45:aa:d6:70:3b:
33:73:f9:3a:c8:2b:bf:a3:f2:f7:00:c5:b9:dd:bd:70:5d:81:
9c:f9:27:5f:2e:2e:15:d3:85:2f:e4:02:00:c7:4d:66:13:82:
89:e2:c4:f6:eb:3b:51:50:1c:98:7a:c9:50:73:0b:26:dd:49:
11:28:c4:00:a2:ed:4e:0e:b1:3e:ac:07:8e:69:eb:f3:d5:93:
43:0a:47:1e:ed:ef:9f:b9:eb:1c:3c:1d:fa:e3:85:91:43:c7:
3e:8d:3d:d9:db:eb:7e:d6:84:be:78:24:87:94:ab:d3:b0:a9:
87:1f:e0:56:35:94:b7:79:48:46:1b:45:ec:0d:9c:da:10:82:
d7:f1:01:3a:4d:da:e1:0d:7d:c1:14:86:1c:b4:64:e1:de:f2:
1d:cf:3c:8b:80:53:f6:e3:5f:eb:4d:d9:ff:df:08:21:cb:5b:
5e:cb:1c:78:a9:1a:e4:40:3d:df:7a:20:a9:ac:6f:a8:a6:d6:
a1:a7:b5:dc:a8:66:fd:32:be:cd:82:61:9c:4f:8b:a3:97:19:
7c:58:ff:50:4e:45:df:ca:35:da:4b:6e:31:a3:dd:0f:c6:67:
4d:7b:54:33:b5:5c:fd:40:16:61:b1:b7:5a:4f:dc:c4:df:79:
73:bf:ba:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:14 2026 by rpki-client