Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
File: tVNDqiHHSjn81Rg_T99V3EZ56D0.mft (raw, json)
Hash identifier: 1y7vB4afpQlBEgwbBt2NFYavlnJa5bLjnyXQtXDW2wo=
Subject key identifier: 98:B4:13:E3:9E:10:D3:EA:F8:29:EA:76:DC:9A:4D:15:42:96:8A:25
Authority key identifier: B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D
Certificate issuer: /CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d
Certificate serial: 019D2928ED1CE86B1B4DBF34D345B97240EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
Manifest number: 03BF
Signing time: Thu 26 Mar 2026 08:00:41 +0000
Manifest this update: Thu 26 Mar 2026 08:00:41 +0000
Manifest next update: Fri 27 Mar 2026 08:00:41 +0000
Files and hashes: 1: Zu-ElV4uUmsS8N-T5zbcqTuwkyg.roa (hash: 3I4QEhvQK0en7UHCJ9hltNJw37O1fUahnvRcDgraIJI=)
2: tVNDqiHHSjn81Rg_T99V3EZ56D0.crl (hash: u+Lz46Vzhw5C89AW0l5f4oCADEzFQR5sjlAtAT4fvBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:ed:1c:e8:6b:1b:4d:bf:34:d3:45:b9:72:40:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d
Validity
Not Before: Mar 26 08:00:41 2026 GMT
Not After : Mar 27 08:00:41 2026 GMT
Subject: CN=98b413e39e10d3eaf829ea76dc9a4d1542968a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:78:86:b5:f3:05:3e:be:93:b3:7d:55:27:83:
f9:65:75:6f:e7:13:21:6f:ba:41:b1:0d:41:5c:4c:
3f:79:fb:1b:7d:8c:c1:96:1c:c9:43:7d:d1:99:cf:
d5:96:b0:35:49:ef:98:d4:0f:df:e6:fd:f1:d8:36:
ff:5b:4c:1d:a4:f2:40:83:1b:62:76:d8:39:36:da:
96:7c:0d:ca:6a:bb:87:b9:dd:c6:a8:0e:bc:94:5a:
eb:84:97:e7:1a:93:2d:da:16:46:c1:a7:e1:3e:5f:
2e:dc:2d:62:6f:9a:bb:18:8f:c9:9c:b5:ff:d6:cd:
c3:c0:73:e8:8f:aa:ae:6f:4c:84:22:35:b1:51:5d:
91:8e:39:1f:fc:51:93:a2:e1:59:bf:85:d6:52:11:
86:45:90:c3:ec:58:52:6d:df:bd:9a:0c:3f:f9:25:
f3:43:da:ef:77:bd:98:45:96:8d:b9:a4:72:2c:63:
83:19:a6:0c:a8:b0:30:81:57:17:dc:0b:56:dc:6e:
df:89:e3:87:79:51:b0:b0:34:2d:48:62:0f:8c:76:
ef:9c:5e:10:c7:10:51:fb:07:9b:47:17:a2:4e:87:
1f:c1:31:a4:e8:33:e7:40:d0:27:d4:c5:7c:bd:41:
f4:28:f7:e3:ba:4c:1a:81:aa:b3:c2:55:a4:06:78:
0a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B4:13:E3:9E:10:D3:EA:F8:29:EA:76:DC:9A:4D:15:42:96:8A:25
X509v3 Authority Key Identifier:
keyid:B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:02:62:0c:30:de:75:b2:91:4d:35:18:f3:a7:f6:9d:f6:ce:
fa:04:bb:8c:24:3c:29:50:fe:39:35:21:19:62:b3:09:2e:03:
c2:71:13:4c:b3:f7:c6:15:c0:6f:e6:94:3f:ac:47:42:9c:97:
d3:93:a7:81:c3:17:89:2c:48:89:0a:83:33:6e:e7:78:90:13:
89:4d:39:08:e7:a2:73:fc:fb:25:88:a1:92:6e:f7:fe:74:03:
dd:b2:80:b5:8b:54:b6:92:2e:87:92:2e:71:ca:af:f9:50:eb:
98:0b:4e:46:27:69:82:12:41:ac:0c:1d:0a:28:03:93:0f:97:
1f:3d:1d:38:08:ce:60:db:e6:d5:19:4e:24:bb:36:2b:69:75:
28:ad:f9:53:1e:54:80:4d:ac:7e:f0:e9:2e:83:c1:b0:ee:67:
60:22:a5:85:04:eb:e8:cd:30:92:55:c9:88:81:d5:5e:49:93:
c2:8c:d8:18:ab:9e:ab:ab:9d:70:a4:7f:b4:42:a0:41:38:3f:
a8:59:71:3d:91:4b:be:3f:f5:0f:1e:2f:0d:37:60:b1:9b:67:
00:16:94:b0:31:61:86:9a:ef:7d:c7:6b:54:90:d2:1b:14:83:
42:56:ec:2a:10:9c:68:36:9d:86:0a:05:33:58:8e:ab:f4:d2:
e2:c8:f1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:20:33 2026 by rpki-client