Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
File: tGS0UjqJcrni9GpPShY06XAnrt8.mft (raw, json)
Hash identifier: SMnd+aqewEBa343XkSKkf71ocTRTk2IoLS8SEqC2rNE=
Subject key identifier: 38:6C:3F:3D:16:75:5C:F1:EE:CB:E1:E7:F6:9B:02:7B:90:96:3A:0A
Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
Certificate issuer: /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Certificate serial: 019D2996E0FD3DD7E0FBFAD829353D6F10C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
Manifest number: 0852
Signing time: Thu 26 Mar 2026 10:00:46 +0000
Manifest this update: Thu 26 Mar 2026 10:00:46 +0000
Manifest next update: Fri 27 Mar 2026 10:00:46 +0000
Files and hashes: 1: 9Bk2DNR2uYMUyRc1vkqhEEQ_U7I.roa (hash: stlOV3eHfF1Tw/j9xaX8GJThoN6iWH1T13ESnbBJcL8=)
2: hB5bKIzKCvcbl8ogbaBmur_bdIs.roa (hash: Uyup6v2aW5b2Hld6LVCK6C+h9+vlfo2ENPD8ezX9qzQ=)
3: tGS0UjqJcrni9GpPShY06XAnrt8.crl (hash: JVQidZhZNZHBHclA7CMRJoEtpx3dO7CNW6FJcRTHGU0=)
4: ybJz7bnKGkBBxiMObl5o-Qmd4SE.roa (hash: JhVcV+03zxVD2R4ZSByn4pLYKVYrGi9gl0bLGuBHrWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:e0:fd:3d:d7:e0:fb:fa:d8:29:35:3d:6f:10:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Validity
Not Before: Mar 26 10:00:46 2026 GMT
Not After : Mar 27 10:00:46 2026 GMT
Subject: CN=386c3f3d16755cf1eecbe1e7f69b027b90963a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1b:de:2d:5c:0d:ea:3f:3c:ef:b1:ee:9d:22:
fd:8b:2e:3f:9b:b7:91:61:3d:72:3a:f7:2c:88:55:
2f:52:bf:10:3a:89:6d:5c:48:59:f7:dc:3c:6d:ce:
c0:c8:41:72:7c:bb:8a:ea:b8:4a:07:d8:59:cd:de:
8f:b6:6b:f3:ec:a2:e7:97:1a:ce:04:fa:92:d4:f9:
22:e9:70:1c:b1:b4:26:fa:62:af:85:17:c0:de:6a:
9f:e6:8d:28:e7:99:b7:8f:cb:b2:e1:4c:e5:fe:25:
af:22:6b:9e:bf:f1:eb:a6:55:78:29:b3:12:f4:bd:
9f:ee:de:3f:12:06:50:b6:64:25:2d:11:05:19:b0:
81:61:43:84:91:d1:c1:fe:0a:5e:5c:a2:c4:35:6f:
af:2c:7c:20:0f:0b:65:84:c9:11:b0:ed:00:60:2f:
61:ce:09:65:65:c1:f7:60:68:7a:1b:95:26:0a:75:
a1:c9:6a:e5:8c:24:ea:8d:0f:ff:f0:29:6c:16:9d:
2c:32:69:12:29:03:44:d7:51:a3:a9:39:a3:14:97:
00:1c:95:79:e2:1e:0a:f5:58:38:16:2c:a5:ad:62:
47:0b:94:50:a2:cc:61:2b:15:a6:96:f7:21:6a:64:
c8:a9:de:66:00:1c:8e:2b:a0:6c:bf:fc:4b:4c:e0:
6b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6C:3F:3D:16:75:5C:F1:EE:CB:E1:E7:F6:9B:02:7B:90:96:3A:0A
X509v3 Authority Key Identifier:
keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e5:c3:8d:cd:10:a1:d3:05:f3:85:f6:90:0f:e4:44:d4:ad:
a9:8c:6d:f3:b5:e7:68:d5:48:b0:d0:4c:3c:68:2c:85:49:b5:
16:b8:a5:78:fc:72:83:37:97:fa:f9:f1:6a:f9:f9:38:2f:06:
dc:ef:2f:eb:fb:5f:68:09:4a:e2:f6:81:75:41:50:fa:93:dc:
de:bf:8f:29:91:19:07:ca:1b:8d:ac:8d:40:49:a4:ee:3c:b5:
cf:e8:9d:78:81:a9:7f:64:ed:05:6f:2a:70:af:22:a9:f7:ea:
02:88:04:71:26:dc:c9:60:ff:c2:4b:c5:46:1e:3b:67:23:83:
1b:89:74:79:65:c8:4c:04:74:d3:e4:fc:7e:d3:6c:c3:e9:8c:
c8:66:82:19:ea:26:0d:5c:85:47:21:a0:f4:81:fa:1e:9f:f9:
9c:0a:d8:03:24:2c:2d:38:23:a9:41:3b:21:2c:41:ea:3c:34:
2b:2b:2d:89:85:fa:da:cf:64:8b:ba:77:c7:f3:31:d5:7b:ff:
78:ab:08:50:68:06:63:1b:0f:41:68:fa:fc:5a:74:0a:5c:a2:
20:35:a3:9f:da:85:4d:44:9e:f1:59:b8:79:61:3b:7c:e6:3b:
8b:80:23:5f:b6:4f:a4:3c:47:b0:a4:ec:c7:c8:28:1e:f2:27:
55:59:9d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:40:05 2026 by rpki-client