Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
File: tE-FORdNAL-ov95JBD9IXDpYdSU.mft (raw, json)
Hash identifier: Txaapo81MGo+R/Yh7AMyHtx4y4w/KbhyXvxryNcosVI=
Subject key identifier: CE:F8:65:4C:DF:4A:D3:3C:5C:8E:5B:7B:4F:66:E5:22:F0:47:F3:4C
Authority key identifier: B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25
Certificate issuer: /CN=b44f8539174d00bfa8bfde49043f485c3a587525
Certificate serial: 019D262885E736CF712223953ADF1C8C57CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 18:01:23 +0000
Manifest this update: Wed 25 Mar 2026 18:01:23 +0000
Manifest next update: Thu 26 Mar 2026 18:01:23 +0000
Files and hashes: 1: Som9pdt2cBfqpNs_uoKUr5V86tc.roa (hash: Er0ATXdFVQI+dlPzaVCGDkbogKEk2cw3WoLgdwrv/rM=)
2: tE-FORdNAL-ov95JBD9IXDpYdSU.crl (hash: 6PonSJngn00wNOKCLHaUr/HjsQxZTpHv38qv/XdFPzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:85:e7:36:cf:71:22:23:95:3a:df:1c:8c:57:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b44f8539174d00bfa8bfde49043f485c3a587525
Validity
Not Before: Mar 25 18:01:23 2026 GMT
Not After : Mar 26 18:01:23 2026 GMT
Subject: CN=cef8654cdf4ad33c5c8e5b7b4f66e522f047f34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:db:95:49:04:b6:ec:83:38:de:b0:21:48:
d8:58:30:f3:01:80:e4:1f:56:ee:5c:eb:32:09:6a:
c8:21:9b:26:90:73:fd:84:a0:42:79:98:dc:d9:e7:
bf:11:83:b3:4c:68:c1:cf:48:38:50:ce:98:b5:f4:
c4:4c:36:d4:24:37:55:a7:79:cd:15:d0:5d:3c:21:
19:ff:83:c1:a3:72:f5:e9:c8:96:c6:80:40:e0:d4:
c5:64:c2:f4:06:e1:87:be:2d:9b:07:17:42:cc:6f:
81:e6:78:d8:ef:a3:d6:7b:34:be:b9:25:c2:8b:28:
1b:c7:6c:b6:e7:b4:ca:45:87:a7:0f:6f:e0:c0:07:
a6:11:10:9c:74:e7:a0:75:5e:82:df:08:b8:14:6b:
1c:74:8b:99:f5:03:86:ab:33:00:6d:a8:b6:c3:29:
fa:03:b1:dc:86:fa:5f:55:fe:74:cb:c6:42:f7:62:
b0:36:92:0c:12:a3:cc:df:e2:d6:dd:63:8b:77:ca:
4b:61:d5:10:ea:81:92:43:22:a3:ec:b8:ce:83:81:
e0:68:52:65:92:ae:dd:6a:5c:33:d0:a6:e0:59:15:
df:cc:f7:9f:c5:21:35:64:0c:1f:95:58:da:45:66:
20:7e:66:4c:de:d8:21:ce:c6:82:cd:1c:13:e7:31:
10:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F8:65:4C:DF:4A:D3:3C:5C:8E:5B:7B:4F:66:E5:22:F0:47:F3:4C
X509v3 Authority Key Identifier:
keyid:B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6f:57:ba:fa:73:5a:e4:83:c5:f3:f5:1a:b8:26:13:cf:64:
9e:45:5e:d7:3c:2d:1c:24:51:46:49:49:7b:69:72:82:38:f6:
84:88:88:f1:52:25:cf:b5:48:74:87:22:5a:a3:c3:c3:cb:6d:
f8:dd:51:03:d3:bf:3a:d4:83:28:4b:07:73:b8:89:87:b6:eb:
04:4b:3b:1c:05:1a:4b:2d:e8:87:c6:50:79:01:5e:d8:a6:08:
6d:71:dc:68:8a:dc:c4:0f:9c:33:ba:d4:33:54:e8:96:7d:c4:
b4:da:1d:88:19:30:d1:65:46:d8:75:21:73:d2:64:09:bf:cb:
eb:4f:e7:b3:9e:38:4f:39:b6:06:e9:f1:81:bd:9d:17:f3:8f:
88:72:4b:6a:d4:69:83:18:e5:92:0e:1c:3a:4d:8d:5e:d4:94:
a2:65:0c:aa:f5:11:b8:ac:04:8b:14:90:b0:70:78:22:a6:21:
76:1e:3a:c8:98:ea:9c:9b:6e:3b:c3:92:42:55:4a:18:72:8b:
b8:8f:10:55:db:0b:2b:cd:0f:9b:fd:2c:fb:96:4c:75:ca:1b:
4d:57:95:26:f0:69:cd:03:d1:64:9c:80:0a:a4:08:02:06:66:
ea:f3:06:9b:0c:4d:88:56:d3:ce:cd:34:09:96:5b:26:2f:94:
4d:16:6c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:15 2026 by rpki-client