Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
File: i-tlpxrwKVknKswA1cTBlYOF3pQ.mft (raw, json)
Hash identifier: kl3Jn08BLARh/jH6WOEJsRR1KUXoM3iZK4AtnmUYDo0=
Subject key identifier: 02:8F:3C:3D:D8:B5:26:63:15:E8:E8:35:5A:58:A1:BB:DD:E8:09:DA
Authority key identifier: 8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94
Certificate issuer: /CN=8beb65a71af02959272acc00d5c4c1958385de94
Certificate serial: 019D28F2CA9EB3907F30B547C79C54526A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 07:01:33 +0000
Manifest this update: Thu 26 Mar 2026 07:01:33 +0000
Manifest next update: Fri 27 Mar 2026 07:01:33 +0000
Files and hashes: 1: 1-uapFsJGKC_fK5bX4vidKDJn0HE.roa (hash: GOVn0PIk7Y5SfmSrA/v+/c91vfTOsMUpyn3e33Mi8Rk=)
2: i-tlpxrwKVknKswA1cTBlYOF3pQ.crl (hash: bjDo0R7HFGrLDL5P7WHgbe06mnzvnQdqxx7uoHNGeuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:ca:9e:b3:90:7f:30:b5:47:c7:9c:54:52:6a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8beb65a71af02959272acc00d5c4c1958385de94
Validity
Not Before: Mar 26 07:01:33 2026 GMT
Not After : Mar 27 07:01:33 2026 GMT
Subject: CN=028f3c3dd8b5266315e8e8355a58a1bbdde809da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:77:0a:2c:54:af:03:ff:93:d4:4e:3d:46:
43:36:2f:2c:6d:66:67:25:a0:ac:a8:ed:41:97:2b:
e7:2d:e0:40:c0:86:82:b6:7f:1f:30:2f:9a:13:7d:
3c:ed:6b:62:36:16:83:f1:8d:ac:e4:eb:9b:24:d8:
f0:8c:fb:d6:9b:2d:8b:e2:ed:d0:3e:67:d4:f1:c9:
db:6a:13:7e:79:a4:81:9d:c9:16:a2:d8:73:0b:10:
e9:fe:4b:da:e8:53:d9:fd:cc:e8:ae:5d:fb:92:77:
63:85:c2:48:7a:c3:e1:37:81:79:6c:f7:25:79:13:
f7:27:73:9b:ef:ab:cc:4b:62:c7:1b:12:bb:d6:ee:
e9:f5:69:d2:98:e3:1e:22:da:15:b8:ef:a2:6d:10:
a8:ce:66:b2:78:c2:c6:94:e8:60:eb:ae:61:b1:60:
87:bb:a6:ee:59:90:12:a0:aa:d5:6e:d4:d5:4a:8f:
ff:23:90:55:f7:2d:00:f5:a5:9a:89:b6:07:6c:74:
9f:13:14:a3:fd:08:e1:bc:c2:13:2f:3b:e5:4c:65:
07:5f:54:53:9a:0a:e9:e6:56:58:34:ad:1d:d3:5f:
26:f1:e9:16:70:e1:88:35:ad:f7:6a:de:e8:5a:3d:
56:39:85:5d:aa:e3:78:1c:56:65:11:b4:95:84:e1:
98:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8F:3C:3D:D8:B5:26:63:15:E8:E8:35:5A:58:A1:BB:DD:E8:09:DA
X509v3 Authority Key Identifier:
keyid:8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:da:10:d6:c5:a9:71:48:de:56:97:c4:ce:fb:15:46:39:6d:
9a:79:0b:fd:79:e7:7d:f4:e7:1e:13:49:cf:d8:12:da:33:32:
35:9a:7f:76:d2:a8:b1:5c:e4:b2:c3:b0:a0:c1:37:0a:3d:fa:
a2:2b:96:a8:01:52:1d:d4:8b:e5:c1:85:fc:71:94:f8:69:21:
56:c0:c5:e4:a0:8c:6b:7c:a3:dd:21:cd:6e:38:d2:0a:a7:9e:
c0:cd:ca:c2:2d:9b:c7:88:b5:f3:a0:57:ab:bd:e2:cf:07:a3:
fc:9c:2c:b2:01:06:1f:c7:c0:16:bb:8d:ee:f5:56:1f:11:2f:
32:2e:57:4a:5e:56:e2:10:4a:7d:be:31:32:4a:31:e7:76:c0:
ca:f1:fc:00:32:ee:31:00:c9:26:07:9a:cb:21:a8:ae:57:aa:
cb:82:3c:bb:fd:d7:e5:71:b4:0e:5c:8d:08:05:0c:a7:2b:b3:
8a:8d:f1:6c:75:dc:fc:97:34:17:10:82:46:b1:70:e2:cb:3d:
14:57:1f:41:d9:5d:81:52:13:fd:86:02:1d:45:d7:70:20:0b:
4c:55:0b:2d:bd:37:3b:ea:8f:53:1f:fd:13:1e:6c:09:47:97:
ee:8a:08:8b:a5:45:0c:6a:c4:e9:24:62:54:5a:52:5a:7f:57:
10:a3:ba:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:55:41 2026 by rpki-client