Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
File: tp0ot9AoyruWhKgOFLqvFcpv0vY.mft (raw, json)
Hash identifier: /TOF+Zbcmzwer6kg4uF3ItxA+4PG7032AoKOx8sD0TU=
Subject key identifier: 61:FD:5C:98:21:4F:DB:A1:6D:AB:14:3A:D7:98:F7:D9:FD:3E:F2:1F
Authority key identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
Certificate issuer: /CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Certificate serial: 019D269670ACCE952E5E8332C251C6723558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 20:01:26 +0000
Manifest this update: Wed 25 Mar 2026 20:01:26 +0000
Manifest next update: Thu 26 Mar 2026 20:01:26 +0000
Files and hashes: 1: 2_vE_2Yv66AoGDtat3Y89P5hOyI.roa (hash: d3nG5S5TQuOOQymp5E7knbnTq0vEJnN1w6JhmrN4V90=)
2: tp0ot9AoyruWhKgOFLqvFcpv0vY.crl (hash: wXSE/acsfUScAvJoTNKh0jc8P5PUpPuCpeYO9cmO5i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:70:ac:ce:95:2e:5e:83:32:c2:51:c6:72:35:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Validity
Not Before: Mar 25 20:01:26 2026 GMT
Not After : Mar 26 20:01:26 2026 GMT
Subject: CN=61fd5c98214fdba16dab143ad798f7d9fd3ef21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:72:87:d0:6c:2c:e8:b9:02:d5:b9:26:50:cf:
ee:06:43:a2:e0:a7:84:48:d4:aa:ad:be:48:a0:d4:
41:e2:81:c9:dc:df:44:f5:4e:e6:1a:70:f9:f3:8d:
21:2c:db:c3:03:4a:af:76:e1:9b:b0:72:10:13:0a:
7f:d3:3d:10:c5:83:c8:75:ad:bc:83:b1:99:68:65:
44:22:88:d0:78:1c:b1:7b:f7:d4:7a:b0:57:07:8a:
ff:0a:31:69:16:6d:fb:34:f6:a6:ef:72:9f:60:16:
3b:10:ff:b0:0a:a9:df:4c:66:ec:0b:84:66:87:ac:
c4:82:bc:f8:8e:51:0c:da:35:76:02:52:42:3d:f9:
a7:24:52:a2:e8:2d:01:e1:d2:73:8e:8b:11:72:f8:
46:67:0c:a8:0f:2c:09:90:1d:86:be:9f:3f:09:02:
6d:fb:60:d0:da:73:2b:85:1a:e6:de:c7:89:2b:46:
69:c8:74:71:25:64:e9:7d:c0:71:09:c9:8c:d2:f2:
da:2f:f2:48:81:6c:fb:32:0b:f4:5d:da:12:55:0e:
c3:c0:2f:74:9f:bd:1b:00:cd:a6:59:00:8c:c4:11:
9f:9b:ab:86:5b:64:b4:9c:57:de:bd:d4:88:ea:ad:
b0:82:4e:0b:94:31:5d:23:06:27:a4:b4:39:2b:dd:
dd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FD:5C:98:21:4F:DB:A1:6D:AB:14:3A:D7:98:F7:D9:FD:3E:F2:1F
X509v3 Authority Key Identifier:
keyid:B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a5:80:54:e3:e2:52:d3:5b:44:5f:9a:c9:ca:21:81:d7:3b:
6a:f8:1c:31:84:cd:2f:91:83:bc:6c:4a:ba:79:30:71:09:ff:
1c:34:4f:74:70:75:49:27:1b:cb:88:92:d1:c6:00:f1:da:ab:
e6:70:3c:63:ae:06:eb:65:6c:01:12:b9:9e:98:d5:7c:ed:2b:
c0:4d:f1:8d:0e:50:a7:a6:36:f4:70:8a:81:6f:b2:80:a0:0c:
a6:b8:e2:d8:14:75:18:51:29:14:23:a4:c0:74:bd:67:e6:ec:
87:dc:7a:cf:2a:fc:d5:81:f0:bd:34:9e:6f:28:29:ea:68:2e:
12:d1:ed:10:e4:75:48:47:af:73:5d:86:97:0b:75:02:36:1b:
65:f0:93:cf:1c:76:7b:75:be:63:d1:bf:dd:71:be:19:ea:67:
33:75:b8:cb:99:57:fe:12:87:db:8e:04:88:ee:f9:2d:d4:31:
f9:ed:d6:e6:f8:7e:d1:0e:b4:a5:ac:76:ac:90:d7:b8:af:78:
37:79:07:dc:6e:6e:2c:b8:3b:04:c7:67:7c:95:e8:e5:03:d7:
19:aa:cc:c6:e7:dd:e3:4a:a1:85:5b:5c:59:89:ac:36:93:e5:
d4:a0:a8:40:2e:07:b6:7f:e6:c7:92:38:54:74:75:cf:17:e7:
97:80:99:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:00 2026 by rpki-client