Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
File: tYe8Eust4poQJrj1a-jUafL1jPM.mft (raw, json)
Hash identifier: goNTYGJxfsN8jQMJwjuX6SUCva4OdmVNeZVOT6rB2qQ=
Subject key identifier: 3E:20:65:C1:66:2D:8E:2E:E7:09:A6:A5:3D:3B:D6:6C:16:94:D4:7C
Authority key identifier: B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
Certificate issuer: /CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Certificate serial: 019D31F5B82B4C81896C8BC42160DF64147C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
Manifest number: 188B
Signing time: Sat 28 Mar 2026 01:01:20 +0000
Manifest this update: Sat 28 Mar 2026 01:01:20 +0000
Manifest next update: Sun 29 Mar 2026 01:01:20 +0000
Files and hashes: 1: LSmA9aVfYN8vZx-gz7lEvcEIFtY.roa (hash: NeSU5/g2soRo6L8ictxWw8A5QCSPK8gFyqkHuAKeHv8=)
2: tYe8Eust4poQJrj1a-jUafL1jPM.crl (hash: JNZUQW00+B/cLXOBuxuch3/6pZApiL569CwfoTxjelg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:b8:2b:4c:81:89:6c:8b:c4:21:60:df:64:14:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Validity
Not Before: Mar 28 01:01:20 2026 GMT
Not After : Mar 29 01:01:20 2026 GMT
Subject: CN=3e2065c1662d8e2ee709a6a53d3bd66c1694d47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f7:c5:f3:53:29:ec:83:25:9b:55:a1:2c:6d:
d1:c4:f3:36:c0:7a:20:fa:69:7d:67:ca:4f:96:32:
52:09:9b:11:15:ce:6d:47:ca:5e:15:3a:b8:63:16:
c7:b6:9f:81:e9:f6:24:0c:a1:3a:01:6d:7e:29:79:
e4:23:0d:0b:33:84:78:af:e1:81:a8:9a:de:63:ce:
84:60:26:7b:ba:96:2b:df:5a:0a:21:62:37:8a:b8:
ea:dd:9d:4e:eb:12:3e:6a:ad:76:67:97:05:4d:90:
13:1e:28:60:5c:6c:be:7f:13:4a:fe:1c:b5:55:de:
83:a1:c7:a1:70:49:82:4d:61:73:2a:b9:a9:91:f3:
12:07:7c:02:ea:64:0b:8b:52:da:96:21:95:f7:a7:
da:ad:6f:45:0c:15:70:1e:02:33:7e:b2:cd:34:95:
2f:ea:ea:f6:8b:50:cb:53:2f:a9:57:f9:e1:27:f3:
e8:de:82:0d:8d:5f:af:67:7d:7d:b9:be:8f:35:f1:
48:3e:67:27:31:67:aa:56:79:5a:f9:60:f5:50:57:
08:e1:cf:c4:6c:31:37:ca:a0:24:18:1a:12:58:d1:
51:32:66:dd:8c:9d:c9:0d:b8:bd:e3:65:e2:ce:64:
74:a7:f2:d9:89:c5:e6:17:c7:40:d8:6d:7d:f9:63:
20:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:20:65:C1:66:2D:8E:2E:E7:09:A6:A5:3D:3B:D6:6C:16:94:D4:7C
X509v3 Authority Key Identifier:
keyid:B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3b:a2:a7:98:44:62:92:9f:70:6b:0f:d5:f4:66:f5:42:44:
66:4c:e1:88:d8:b1:de:49:2d:21:8d:29:00:ee:16:d4:74:b4:
82:92:08:ac:d6:4a:ed:68:42:9d:08:a3:d0:ac:09:61:6f:72:
e9:fb:68:da:41:ac:f6:06:ae:db:fe:2b:b7:e2:d8:c0:30:fd:
9c:c2:35:f8:20:2f:cc:89:6b:f5:80:49:ec:f5:41:4c:6c:a0:
d1:64:a9:99:b1:da:cb:c4:4a:86:30:d4:4d:31:ef:f6:9a:8a:
f9:93:f1:8b:7d:a2:6b:8a:36:8f:ee:71:d7:45:75:b3:52:98:
41:eb:15:05:48:d5:24:a6:05:15:29:94:8d:99:f4:04:30:76:
cf:4f:61:12:12:75:b8:55:fe:27:39:62:f0:6a:d0:68:58:18:
63:73:3f:b3:26:b6:c1:26:68:4f:8c:c3:7c:3e:16:b5:24:29:
9f:50:4f:b3:d7:75:c4:e2:b0:ab:df:0f:bb:68:11:3b:f2:49:
61:3a:ab:a1:eb:b7:a9:96:5c:46:55:13:70:46:0c:eb:f4:75:
6e:0b:62:a2:03:4d:37:50:0b:3e:2c:44:d4:57:53:f9:21:3e:
71:f2:3f:14:cc:84:e6:02:4f:df:99:c7:f9:47:9a:fd:ba:0b:
f2:af:24:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:08 2026 by rpki-client