Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
File: tKkPaJZnhEKvruG6qqayot7KzTs.mft (raw, json)
Hash identifier: 09aZ1vFwbS3zwTVMlNtb4HBCIj70TsXNelvDerJa91U=
Subject key identifier: B2:ED:6D:A2:78:78:32:62:3B:5B:43:53:01:48:FD:E4:71:93:C5:86
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial: 019D25BA469D88844C809D6FFEA440D0A35C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 16:00:57 +0000
Manifest this update: Wed 25 Mar 2026 16:00:57 +0000
Manifest next update: Thu 26 Mar 2026 16:00:57 +0000
Files and hashes: 1: DjRcKjGf481KpSn3dS8opbsCTRQ.roa (hash: q4qSCDk+u7QWlYigOct6W9NgvEFiQbOazsiPpD4B9fE=)
2: KMdcbWWp5MyTzP2tDi5ljSFkPgs.roa (hash: rr/RZr6IyiOAVd9654gWzYqEL3pIM32RlUlY8qv46PE=)
3: eNHn6hiUVOxJ-_Y5SJktOte6hXk.roa (hash: jPd38RvXr6qVEzTNTT/Ft+c1V1MvmsnZDnEJANdwKuo=)
4: tKkPaJZnhEKvruG6qqayot7KzTs.crl (hash: M+VVJ3zvvIMaLXHKgXDMmil5Mf0ik11396Q+ImEs+jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:46:9d:88:84:4c:80:9d:6f:fe:a4:40:d0:a3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Validity
Not Before: Mar 25 16:00:57 2026 GMT
Not After : Mar 26 16:00:57 2026 GMT
Subject: CN=b2ed6da2787832623b5b43530148fde47193c586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:fe:13:f4:ef:93:de:a8:5b:95:24:40:78:
f3:bf:61:79:44:33:b2:fc:19:f5:e6:5d:0d:81:31:
bd:aa:48:26:f0:11:b6:fa:fd:81:83:35:e7:8e:03:
09:66:18:53:e7:e7:50:33:02:41:05:89:a2:ad:bd:
ab:89:90:e2:74:6f:78:61:24:d8:87:27:e8:57:9c:
17:8d:08:7b:c8:1e:85:53:7d:96:f6:e5:90:77:05:
88:21:7f:73:f3:13:ac:30:4c:ef:f7:75:cf:a1:24:
79:80:e3:43:51:78:a3:81:4d:2d:c4:9e:42:d8:36:
b7:4e:c2:ef:0c:e1:e3:16:22:66:50:73:5a:ed:00:
8a:4d:c9:b9:a0:36:94:94:fd:09:b0:e1:08:e5:3b:
71:22:75:2e:da:02:f1:6b:96:13:eb:50:d6:51:1f:
96:45:2b:1e:cb:8e:69:e3:a8:f0:14:50:ca:e8:ec:
61:5c:15:5b:70:b0:2b:ed:b6:e0:3b:1e:cc:99:25:
6b:6e:79:50:48:64:25:28:c9:8c:96:35:b1:9a:44:
cd:60:bb:8e:6e:e9:8e:10:b2:dc:66:b1:71:2c:af:
e6:c2:ea:dc:9e:ae:7d:90:fd:ce:b4:06:09:2d:cd:
54:4c:a9:0e:54:53:b7:23:74:84:e7:eb:66:a5:fd:
8c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:ED:6D:A2:78:78:32:62:3B:5B:43:53:01:48:FD:E4:71:93:C5:86
X509v3 Authority Key Identifier:
keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7a:00:59:b5:29:f4:eb:c5:fc:5f:4e:6e:0d:8e:c5:5c:e9:
f7:3e:53:40:7a:29:ef:7a:0a:3a:3b:b1:bb:2a:e0:17:00:19:
35:fb:f4:1b:05:a7:ac:0d:9d:84:1b:b0:d2:e4:59:34:e3:d3:
9d:70:32:aa:00:eb:f7:3b:6e:85:29:8d:ca:56:e7:e2:e6:fb:
11:c3:94:65:30:01:17:9c:18:4e:7d:c7:80:73:a4:29:da:72:
48:57:fe:6d:b5:29:ee:5c:9b:db:57:ae:25:a2:cc:34:5c:d3:
42:5d:b3:7b:94:2d:2d:a1:2c:42:17:83:5e:9c:2c:34:82:99:
c5:6c:ab:ff:ba:89:28:c9:81:bd:98:8b:31:08:d3:a5:cd:ed:
42:7a:63:f0:4b:df:48:ff:20:bf:a5:58:31:27:36:78:68:c0:
99:af:10:7a:d5:de:a4:a6:38:2b:6b:a1:9b:0e:9a:09:8d:69:
ae:90:d0:d4:78:41:5f:e1:b2:22:d1:66:c3:10:f9:05:a3:0f:
46:29:5b:f6:77:c9:8b:12:26:67:3f:97:b6:85:cf:53:89:cf:
6b:1f:c2:58:ed:ae:39:d4:2d:9b:2e:00:c0:c8:9e:4f:07:31:
fb:ef:bf:10:d2:eb:04:45:7d:ea:3f:80:67:84:3c:07:3e:86:
bb:5a:56:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:50:53 2026 by rpki-client