Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
File: tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft (raw, json)
Hash identifier: BZkz8a8wzxDwcVyZF/WITYtSPOfiIn63NO5XcziZFro=
Subject key identifier: 69:28:E4:97:9D:99:01:A1:28:AC:0A:C7:B3:99:19:4A:13:97:30:15
Authority key identifier: B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
Certificate issuer: /CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Certificate serial: 019D25F11BA8DCCD218793232B846ECAA67B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
Manifest number: 0E4B
Signing time: Wed 25 Mar 2026 17:00:51 +0000
Manifest this update: Wed 25 Mar 2026 17:00:51 +0000
Manifest next update: Thu 26 Mar 2026 17:00:51 +0000
Files and hashes: 1: CCbPnsaraqAntkcEPLIKeh2owBA.roa (hash: lDC1/eX7jtqUQJvtcDT0bJoM6udb8V374OopJffpxoU=)
2: tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl (hash: NgZi/d+KJOjieIUFd5sWPTJ5pTGNnMnC53TXaVOEXto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:1b:a8:dc:cd:21:87:93:23:2b:84:6e:ca:a6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Validity
Not Before: Mar 25 17:00:51 2026 GMT
Not After : Mar 26 17:00:51 2026 GMT
Subject: CN=6928e4979d9901a128ac0ac7b399194a13973015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:27:c3:6a:a5:b1:93:ba:f0:30:1d:17:d4:c3:
bd:f1:f4:9a:c8:55:86:dd:26:f4:88:87:20:bb:4d:
5f:bc:1c:11:23:ec:8a:13:ed:47:5b:90:44:3c:9f:
f2:c5:c2:62:05:09:2f:34:69:47:06:78:e6:91:13:
98:47:d4:0e:61:de:bc:f1:a3:ca:c2:0e:6d:c2:7e:
e7:ca:cd:0c:e0:2d:1c:e7:2f:80:99:af:74:58:53:
84:81:37:75:f1:e9:23:dd:07:21:ab:27:95:41:18:
75:5c:1f:5c:ff:01:b8:52:9c:bd:2c:69:0d:ed:01:
20:b0:06:5e:44:ff:fe:92:c3:e6:ea:56:ba:3c:c9:
1d:6a:6c:e8:e5:db:d3:8a:a0:c5:bd:ac:f6:0a:fb:
28:dc:20:c1:26:d5:d4:af:e4:bd:a8:fa:f4:09:d5:
72:ca:28:6d:0f:bb:25:d0:48:28:bc:90:55:66:0e:
57:1c:5a:b8:14:25:d0:d8:d1:06:2c:3a:84:11:66:
c9:5a:67:25:c9:4e:02:99:b0:66:8e:ec:96:db:00:
ce:61:aa:98:56:67:e8:36:8b:18:c2:79:10:3f:9f:
a3:b1:c2:73:03:5c:5a:4d:16:34:1e:4e:07:fc:d9:
dd:80:5f:e9:28:b9:b2:e6:0f:9a:6b:15:25:f7:21:
fa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:28:E4:97:9D:99:01:A1:28:AC:0A:C7:B3:99:19:4A:13:97:30:15
X509v3 Authority Key Identifier:
keyid:B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:21:c7:43:bb:83:f3:4d:85:ca:2b:c3:86:ec:74:7e:d8:8c:
f2:71:98:bd:bc:5f:90:19:f0:a1:8b:0f:d0:8e:67:21:e3:90:
e3:e4:44:1b:59:de:0a:aa:64:05:65:ff:69:7c:ee:78:f2:68:
8d:95:ce:40:2a:0c:7e:d1:38:9d:b0:94:dd:ba:2d:e8:d1:72:
0a:9c:2e:0b:42:c5:36:a1:ee:b8:e3:55:43:5c:a2:6d:b8:e4:
43:b8:0f:9f:39:f4:34:a7:dc:6e:24:5e:da:3c:c4:5a:b7:03:
97:cf:3c:f4:c2:52:9f:6d:5d:17:99:01:34:77:a8:52:a2:f4:
04:24:8f:4c:14:70:51:8d:1a:2e:8d:aa:04:91:ed:fe:33:14:
5d:8c:e9:18:b0:55:6b:1a:6f:c0:23:0a:a3:7c:bb:f1:d1:a2:
c9:f5:5e:53:82:02:df:9d:55:dd:48:20:3c:15:fe:68:2f:6a:
df:71:57:82:3b:76:20:27:dc:97:eb:59:59:dd:4a:b2:60:f2:
ce:ce:a9:10:72:b3:93:54:74:55:5a:04:f6:1c:0d:41:3d:0f:
92:9c:ca:0b:0c:cd:9b:9d:da:6d:c1:bb:b2:71:2e:e9:11:25:
4b:7f:c8:ea:3e:e5:2d:11:f6:37:32:27:f6:9a:9c:89:ce:4e:
78:d6:a3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:18 2026 by rpki-client