Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
File: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft (raw, json)
Hash identifier: xZCDqS0eH3yx+ERZxVO16ul7SksCzkSJ3HlTvUFklYg=
Subject key identifier: A2:5D:1C:BD:6C:F6:F3:D4:60:08:36:68:21:DB:F7:E4:65:82:11:F8
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 019D2816B13755A5F4FC67CF7BBCE0D46A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
Manifest number: 18E9
Signing time: Thu 26 Mar 2026 03:01:08 +0000
Manifest this update: Thu 26 Mar 2026 03:01:08 +0000
Manifest next update: Fri 27 Mar 2026 03:01:08 +0000
Files and hashes: 1: 7kCTcBBf9Y2mZp4MQo4FaThhaw4.roa (hash: 4G5b5APOZBeeZ1ZvQcD3v0tSN26DXUsz89KNzub4qWo=)
2: Axy-VDMaL0TttuQWr1HwszNqc0I.roa (hash: bbZhwLgQwTeviEfEB8kT+/Hr8GEpDxbaZvVMkhGxoa8=)
3: EIf4_e1IxdxiLFBKRrmbYkLdBhg.roa (hash: wTMfLnzpxmyagKAjlQHgrc2pzICPnW5ADwDSG8SyfAI=)
4: TX_u3ri8rca4P81egD9tMMtVs-E.roa (hash: VizDbLVqd0zmsz68Is1wbARP6+9Ai1vW465jIZXJ0vw=)
5: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl (hash: HwJrClAIHozQB401JtJvWyV4v+y8FvKA56lDe4ZfVfs=)
6: gnfK8SBpVOdVbxYnE0YvG_aCqwQ.roa (hash: 4HCQGxp9LRlzVGgeY9uvcPRB+giBsSJBc0o5g6+TINI=)
7: nlpW1LdUG8ccgcMsu_bYGBcmxBE.roa (hash: WjkJjvp8/U7WObhL1QFmDulfOKAgaqrKAeSX8GWbEKY=)
8: wtWJEYRFSG9Qv3ctSlt-PvC9YxU.roa (hash: zMI/aBSI0MnE5srRM6wJIzfTVWrBiFahbqJC56lWnfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:b1:37:55:a5:f4:fc:67:cf:7b:bc:e0:d4:6a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Mar 26 03:01:08 2026 GMT
Not After : Mar 27 03:01:08 2026 GMT
Subject: CN=a25d1cbd6cf6f3d46008366821dbf7e4658211f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:22:b8:fe:da:6f:d7:0a:7e:81:6a:f6:3a:
b5:11:48:10:02:7f:eb:84:64:1f:15:7d:3a:14:0a:
8a:af:8d:15:95:8b:c7:a0:4a:23:7a:62:e2:95:f1:
53:a5:be:6e:fa:8e:37:c3:b1:08:23:3d:2f:f3:e5:
d1:01:b7:cb:46:c6:40:d1:a8:74:4c:ad:71:45:04:
d0:79:9b:17:4a:5c:f6:19:bb:ed:fa:26:a1:42:04:
08:ad:c4:e7:23:86:4d:6d:c9:b7:83:16:bd:ed:6a:
13:f0:c6:59:b3:84:7f:55:38:ac:8d:43:ea:4c:5d:
81:2f:c1:21:ea:f1:9c:72:a0:bf:d3:75:10:9d:cd:
4d:cd:1e:e9:5d:33:82:8c:c2:71:0f:0f:f2:3c:b3:
60:53:79:0b:12:65:b9:46:8c:36:aa:2d:3f:8e:8e:
a7:20:0f:90:74:c7:fe:64:cd:49:91:a9:7d:09:d3:
bf:6c:99:a0:98:17:03:5c:1b:d0:2b:c6:be:53:1d:
2d:1e:cb:0e:ea:34:59:97:7e:89:1c:94:c4:b5:08:
7f:8b:a8:09:85:51:ae:e9:90:b6:ca:d6:8e:69:e0:
2d:6b:a6:0e:5f:68:a8:a1:12:9e:88:ce:f0:9e:ee:
b0:df:0c:2d:ad:16:73:d2:b4:06:66:ff:07:76:39:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5D:1C:BD:6C:F6:F3:D4:60:08:36:68:21:DB:F7:E4:65:82:11:F8
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6b:00:00:bd:42:93:19:5c:f4:8c:f9:73:37:07:1c:60:74:
42:d2:13:c0:3b:c3:b5:a1:ff:34:d6:07:29:fd:d1:66:f2:09:
ad:c3:4d:e7:28:da:06:ff:9d:af:b9:d4:2c:a8:a3:87:f1:f4:
f7:e3:74:88:bf:2b:3c:eb:0b:0a:b9:97:06:d8:34:a5:23:0f:
05:df:96:9a:22:6f:26:13:ee:57:7f:64:7d:a9:30:78:3d:b8:
0d:ec:e0:b8:96:f6:79:af:b3:38:21:1c:b7:61:98:12:89:51:
57:0f:59:ed:08:e8:76:63:cb:ec:9c:f2:3a:f6:38:03:bc:ce:
16:86:82:75:cc:33:25:a2:dc:d6:b5:90:83:3d:07:cd:29:c9:
99:ab:d3:f1:db:05:db:4f:ab:fc:a8:f8:3d:04:b6:e0:f8:0f:
54:68:cb:4d:0f:a8:c3:2f:22:d4:ce:5a:7e:28:54:3f:74:01:
e7:75:89:99:cd:27:ea:c3:1f:ec:20:ee:84:1e:c5:89:69:4e:
79:33:7b:fe:89:ed:61:c4:1a:f0:21:4a:76:b4:74:07:b7:c8:
3b:2b:91:56:c5:25:06:58:d5:82:e3:d8:af:39:9f:73:04:38:
75:78:bb:5c:15:b5:10:ac:55:40:81:de:bc:aa:10:92:82:56:
9e:b1:89:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:04:17 2026 by rpki-client