Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
File: tFBkwayGkOLHepWaUCVG6YvNNyc.mft (raw, json)
Hash identifier: YANdpTm0cU+5e7vBQSBHbPDRQA+trUo5q9qk3Ym9Ghs=
Subject key identifier: B5:C6:A5:41:83:0F:08:0C:34:80:C7:2D:15:B2:A6:E2:74:30:06:0E
Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
Certificate issuer: /CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Certificate serial: 019D27E00DAC0AFF4DF87FDE35B524CB4DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
Manifest number: 0F07
Signing time: Thu 26 Mar 2026 02:01:28 +0000
Manifest this update: Thu 26 Mar 2026 02:01:28 +0000
Manifest next update: Fri 27 Mar 2026 02:01:28 +0000
Files and hashes: 1: tFBkwayGkOLHepWaUCVG6YvNNyc.crl (hash: 8JZnjdLIByXClcWm2rMn2V28iNiiqRRyJl/Q18X1GN0=)
2: wFIxH6rmc0pTO3lHbm1q54JXQUw.roa (hash: LdJ/iIkB/Qkjc76ikiZz0rGCtU2IPzIjdQ2qezYDSK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:0d:ac:0a:ff:4d:f8:7f:de:35:b5:24:cb:4d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Validity
Not Before: Mar 26 02:01:28 2026 GMT
Not After : Mar 27 02:01:28 2026 GMT
Subject: CN=b5c6a541830f080c3480c72d15b2a6e27430060e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ba:42:06:9d:4b:2d:2b:9c:b0:58:70:81:1a:
1b:64:5d:81:73:c5:f3:92:a6:7b:89:a6:ef:1e:fe:
fd:5b:8c:49:ab:6a:51:24:a6:16:c6:b6:cb:6b:7d:
6f:7e:5c:69:57:94:8d:1d:79:19:51:0c:de:dc:35:
83:d4:d7:a0:24:50:b7:0b:33:ab:c3:58:ca:d7:f9:
79:b1:51:e4:2a:eb:13:77:7d:e1:b3:f9:42:98:ba:
81:0c:2e:63:6b:63:a3:1d:44:83:43:c9:8b:71:f7:
b9:91:98:c0:63:75:94:0e:19:4e:12:f6:1e:ad:d9:
87:ca:cb:ed:8d:c3:ac:79:42:d5:f4:13:47:23:f1:
82:eb:a8:1e:f0:cb:32:96:19:27:46:4c:2a:33:cf:
79:90:9e:40:a8:bb:98:54:c2:7a:ed:91:5a:d2:85:
63:b2:91:8e:77:c4:d2:ff:85:ec:b4:be:45:5f:06:
d2:ec:75:ae:7a:ec:e8:6a:29:5b:a8:d9:ee:2d:71:
e8:31:c9:b8:85:df:58:ce:b9:bf:3a:a7:16:b2:f3:
8b:71:e2:89:a9:25:25:b0:df:df:65:25:8f:36:d7:
82:c6:d0:42:5b:f1:38:37:8e:14:e7:96:f9:61:2e:
1e:66:4c:05:bd:46:cc:f0:4b:cc:6a:bf:8c:3f:5d:
5c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C6:A5:41:83:0F:08:0C:34:80:C7:2D:15:B2:A6:E2:74:30:06:0E
X509v3 Authority Key Identifier:
keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:11:e6:40:c0:5e:47:3b:33:c4:09:80:ae:55:c6:f4:77:3b:
2e:5f:e8:f7:7d:ca:f5:20:43:c4:cb:8c:16:25:14:6e:2d:9c:
3f:5d:2e:04:c1:1b:69:84:13:23:cc:45:6a:de:49:2e:42:1b:
b9:39:43:b5:ff:49:70:ac:a2:bd:ea:b7:31:5b:76:41:47:4c:
72:67:0a:31:9b:c8:1f:c7:dc:94:b2:78:c0:e4:42:43:2d:ce:
75:a7:74:50:28:60:a4:1b:5e:06:c2:d2:3e:1c:39:14:8d:53:
d5:8b:8c:bd:e6:ab:f4:bf:88:c4:c2:e8:c3:40:84:bf:71:fc:
0a:d5:7e:a4:f8:66:5a:9a:ab:ed:13:b0:f1:81:0d:c3:65:93:
fd:22:af:7b:d8:b4:3d:51:ab:86:4a:90:e0:27:cf:a4:5a:28:
1e:5a:79:4a:cb:d5:82:32:94:6b:70:21:31:b5:0d:3c:99:6a:
3e:15:bf:cd:67:8c:99:33:b4:19:15:f1:c6:f2:6a:35:20:80:
61:f3:39:76:e5:62:19:1b:86:d8:c7:21:1b:90:2a:7c:9e:a2:
20:15:0f:1b:85:2f:7a:b0:1a:71:28:04:5c:7f:af:df:b3:ce:
5d:92:96:e9:d4:ba:4c:fe:2e:ec:09:c8:b6:7b:cb:c4:c1:d8:
1a:cf:86:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:40:06 2026 by rpki-client