Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
File: tCV3H5kv1037Bzbmla61nGr2fpM.mft (raw, json)
Hash identifier: xv3zEahufSufBLoEpzWgvOtWBWIaJLKcWbjKTGitpFk=
Subject key identifier: 06:17:C9:A2:44:50:30:F5:E4:C8:64:09:19:9D:41:14:6F:53:8E:FB
Authority key identifier: B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
Certificate issuer: /CN=b425771f992fd74dfb0736e695aeb59c6af67e93
Certificate serial: 019D299768EE76AA398149E8622A43287EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
Manifest number: 0958
Signing time: Thu 26 Mar 2026 10:01:21 +0000
Manifest this update: Thu 26 Mar 2026 10:01:21 +0000
Manifest next update: Fri 27 Mar 2026 10:01:21 +0000
Files and hashes: 1: Ipu1qUGfEU4g8Xm4HjOemR3yWWY.roa (hash: R0D/+J37ZrEsRH10sv5tmqRZhv8lgKjFyvvf+xRetHk=)
2: tCV3H5kv1037Bzbmla61nGr2fpM.crl (hash: 3yHJ7Qz9CTc73suIGxlJpQypRc0M8uqcOe0L3W9+w54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:68:ee:76:aa:39:81:49:e8:62:2a:43:28:7e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b425771f992fd74dfb0736e695aeb59c6af67e93
Validity
Not Before: Mar 26 10:01:21 2026 GMT
Not After : Mar 27 10:01:21 2026 GMT
Subject: CN=0617c9a2445030f5e4c86409199d41146f538efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5b:c6:1d:c7:c2:e0:88:c1:08:4e:e2:df:03:
bd:17:8d:bc:5b:cb:88:e8:28:b4:69:20:37:3d:e4:
15:e3:b0:51:c5:ff:87:74:0a:4d:8e:cc:99:57:07:
58:9b:a3:3f:7a:ed:f7:c1:a9:77:ec:68:2e:72:6f:
d7:e1:ed:aa:70:20:05:5f:95:53:86:68:e3:01:22:
c0:09:12:55:ba:f3:77:13:7e:db:25:12:1f:67:74:
4f:c5:d3:55:88:33:34:26:b8:0b:46:de:67:fb:9b:
88:91:29:55:78:36:41:8d:68:f4:81:ff:8a:50:52:
21:6c:7f:92:73:0d:8c:14:31:56:90:77:5a:74:9b:
79:19:f7:3d:16:15:28:62:f1:00:4e:d2:0b:09:72:
bd:c1:fd:8a:6c:73:e2:df:e3:2c:ae:02:66:39:05:
88:d8:f0:33:5d:8e:e8:56:bb:d9:84:f4:49:4e:f9:
31:b5:ee:a9:ea:79:31:41:d5:71:43:17:a8:b3:26:
ab:61:04:8d:ec:88:73:de:37:a8:61:7e:f7:0d:3c:
b2:57:20:17:05:26:05:03:17:59:38:32:65:9a:08:
43:05:78:59:c7:ac:df:d4:62:33:3c:e7:e2:82:fd:
3e:a6:37:42:07:9c:44:3a:b0:46:71:a0:2d:c3:72:
ba:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:17:C9:A2:44:50:30:F5:E4:C8:64:09:19:9D:41:14:6F:53:8E:FB
X509v3 Authority Key Identifier:
keyid:B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:54:df:48:c5:8a:80:d2:f1:18:1c:f6:4e:35:6d:a4:77:64:
54:c5:f2:e3:c0:62:1f:3b:c4:f8:65:b8:ac:35:57:f6:03:86:
4a:5f:72:70:13:8e:69:f3:01:a0:38:3b:f9:72:14:da:c1:81:
87:66:d5:f6:f9:d2:1f:c1:7b:e4:b1:a4:af:ff:e7:e7:60:ae:
51:55:be:59:91:bb:66:cb:ba:e7:c2:93:75:ab:4b:06:d0:34:
b0:40:9b:51:8a:96:54:50:5a:7c:c6:a1:e2:22:c7:9a:53:99:
f7:15:d0:22:4f:2f:8e:31:8d:16:85:77:9d:1a:39:fd:05:d4:
fb:cd:8c:2a:58:80:95:9d:6a:1d:9a:e6:a5:04:16:c3:e9:ff:
11:68:83:19:a3:39:5c:93:c8:0d:50:5a:b0:58:cd:c8:28:e8:
cd:7f:ca:7f:60:0d:0d:56:70:d1:79:6b:1f:f1:57:60:74:cf:
d9:a8:48:98:e9:f6:cd:90:49:12:d0:af:70:ee:5b:0e:b5:c9:
a7:05:52:98:68:dd:88:20:c0:92:34:2d:4c:37:87:f9:6c:24:
32:bc:38:21:27:9c:2b:71:75:50:72:07:bb:2a:b2:80:aa:e6:
b0:b2:fa:72:23:a1:72:9c:35:04:52:c4:fe:81:bb:03:cd:a9:
9e:2d:e5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:48:26 2026 by rpki-client