Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
File: tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft (raw, json)
Hash identifier: y2zjzCbwHddn4g1fa6AQiY/4OsYJCOLR2Cc8Xx4JXgE=
Subject key identifier: C4:AE:22:E5:E1:66:37:8B:80:78:A9:BC:E2:EF:61:23:85:23:7A:8E
Authority key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
Certificate issuer: /CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Certificate serial: 019D2816D4234A6CEAB397A993DD0FE4FF4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
Manifest number: 0FAE
Signing time: Thu 26 Mar 2026 03:01:17 +0000
Manifest this update: Thu 26 Mar 2026 03:01:17 +0000
Manifest next update: Fri 27 Mar 2026 03:01:17 +0000
Files and hashes: 1: aZwxnKfHqmWxJT5LCOQaGzxTYfE.roa (hash: nuhL9NfNeMCM3Rnpe5bSoUeqEl5NVyDAwtG7Usr9Q4g=)
2: eVN-GPa2ZCzhCPNX82lsSDt1ilo.roa (hash: tjSDAKdgNEbCogLtkUwbJCmlZIdpfckJuru8vN6J8S8=)
3: tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl (hash: 7x/r1F3E+BlTU5nqUOwknG/rY7ynuOvgCB5/m/rEbIE=)
4: xxDHsd77vMM083YLrcc2xqEqOfo.roa (hash: w1yEB9PewQvSTE0IyZqBOAJcsbRhDlUVRG4rFXPAJVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d4:23:4a:6c:ea:b3:97:a9:93:dd:0f:e4:ff:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Validity
Not Before: Mar 26 03:01:17 2026 GMT
Not After : Mar 27 03:01:17 2026 GMT
Subject: CN=c4ae22e5e166378b8078a9bce2ef612385237a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:14:77:c6:a2:d8:96:25:75:9c:30:5b:1f:
08:79:9d:de:7c:8a:ce:83:af:ff:d9:d1:38:1f:f7:
ac:8f:83:49:3b:9e:64:e3:da:37:ac:27:dc:c5:0c:
85:aa:f3:d3:e0:7e:3c:d9:9a:88:38:0e:b1:78:56:
c2:88:74:78:86:64:8a:ae:a5:4d:48:d4:96:b9:db:
3a:1d:b3:ac:be:e7:76:9f:62:73:34:1d:12:85:ee:
fc:6a:c5:01:e8:c6:fb:56:bd:56:91:b1:07:ba:1f:
e1:61:f4:d8:68:25:80:63:55:d1:f9:18:76:66:d3:
3f:23:81:e7:62:82:6f:82:a7:56:97:39:73:99:fb:
b9:89:b9:9c:0f:1b:4f:5e:21:6d:58:c7:e2:dc:69:
78:f9:61:7e:4b:09:3d:88:93:c8:41:aa:e6:e8:f4:
31:81:46:2f:57:ce:26:55:97:08:8c:5b:51:d3:f7:
47:30:f9:e1:d7:89:16:cd:1a:3d:52:e7:5f:93:75:
c6:22:4b:bb:f2:94:7b:ef:60:97:6e:82:d0:40:d6:
88:f5:ca:30:d7:a1:c9:44:7c:d8:9d:bf:d6:83:82:
23:5a:8a:07:a2:b4:61:ca:be:7e:a4:4c:1f:29:3e:
e5:70:b9:11:82:9f:32:0f:81:f9:73:27:47:b4:7a:
41:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AE:22:E5:E1:66:37:8B:80:78:A9:BC:E2:EF:61:23:85:23:7A:8E
X509v3 Authority Key Identifier:
keyid:B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:97:08:a5:3e:ef:42:21:e4:a0:bf:63:75:b1:7c:9d:71:ea:
05:8f:7a:a6:9d:a2:5b:6a:ab:d8:65:e3:16:4c:8a:d5:84:c6:
a3:f8:d3:a7:df:c7:21:21:b3:2c:ff:2f:08:c7:5a:e5:18:2c:
9f:70:e1:be:4b:47:bd:27:d9:9a:e2:7e:26:69:39:03:d0:19:
48:5e:37:ca:ac:17:37:42:38:b4:a9:0a:5b:be:76:02:c3:6d:
ee:fd:20:08:e1:3f:fd:83:f7:26:e8:61:0d:b7:2c:50:56:5a:
16:43:24:02:fd:9e:6a:a6:a3:3d:70:d8:8b:93:0b:68:d6:af:
7e:59:d8:c0:6d:98:fb:17:4b:4b:19:e4:27:7a:3f:3d:8e:fa:
7f:90:f5:7d:a9:a2:ef:b7:6c:d1:a4:2a:95:53:2b:94:a7:a2:
e5:5d:50:fe:40:86:82:7d:47:c5:a2:90:9a:d2:aa:c8:e7:5b:
cf:aa:cb:2e:17:b2:65:67:e3:4b:9b:14:3a:03:d1:42:43:6c:
00:1b:35:61:32:80:22:d1:a1:bd:6e:70:2f:8a:a4:38:dd:c1:
52:c1:24:33:a6:64:b2:e9:98:1d:1b:13:72:28:f4:0d:db:75:
f1:9a:a6:6a:df:70:72:41:57:54:c5:b4:c3:1e:1e:b2:78:40:
23:26:94:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:45 2026 by rpki-client