
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
File: taJj0Y61xUD3R4glu3LvrG8o-Cs.mft (raw, json)
Hash identifier: yfkX/3IPSAMclLRa8miAa2eOYH17W2x5xpFymcKqxvA=
Subject key identifier: 91:07:03:99:95:E5:4A:88:E8:01:3F:8F:8F:C0:C5:0B:1D:03:8A:8A
Authority key identifier: B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B
Certificate issuer: /CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
Certificate serial: 019D270450DA091D7A95B05BC6F0F8870164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
Manifest number: 1817
Signing time: Wed 25 Mar 2026 22:01:27 +0000
Manifest this update: Wed 25 Mar 2026 22:01:27 +0000
Manifest next update: Thu 26 Mar 2026 22:01:27 +0000
Files and hashes: 1: mGuGgApHSUc3pkLejONy6uxFa8I.roa (hash: 72owtSfE8WtU3O8vsf/pSLMkM235o/0ogXWxdafrLec=)
2: taJj0Y61xUD3R4glu3LvrG8o-Cs.crl (hash: p1IJ/U4KKjq16R9U1A4cKmz/pFxqF92JS/q2sz0t/fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:50:da:09:1d:7a:95:b0:5b:c6:f0:f8:87:01:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
Validity
Not Before: Mar 25 22:01:27 2026 GMT
Not After : Mar 26 22:01:27 2026 GMT
Subject: CN=9107039995e54a88e8013f8f8fc0c50b1d038a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:38:b1:23:25:82:c6:46:f0:77:d0:23:44:
d0:a4:e7:49:b4:7c:07:97:d3:0e:b6:2e:55:d5:96:
20:76:91:90:4b:80:2b:dc:97:d5:c9:a3:e5:ac:64:
55:6c:4a:6c:ad:f6:e4:a6:01:f5:52:86:58:2c:4b:
1d:d1:84:92:19:07:6d:78:9d:ab:f3:3d:7f:9d:fc:
8f:ae:6e:1d:4f:94:86:7d:57:91:a1:ca:27:b9:bf:
a4:c4:ed:63:33:9a:a7:fd:17:e7:aa:84:db:11:17:
9b:88:4d:0c:52:49:d6:8f:aa:1c:05:b8:00:a3:4a:
4f:93:7d:e2:8a:b0:fc:a0:5c:a3:ac:4f:0e:bf:6f:
75:75:46:28:4d:80:24:dd:cf:6d:42:f3:39:bf:3b:
16:9a:ec:b4:6b:60:73:8c:9b:67:72:2d:87:1b:80:
e3:fa:0f:85:7e:3e:08:47:aa:e8:c0:8a:34:72:c2:
3a:84:61:b6:21:07:d4:a1:a3:84:28:2a:35:7e:8b:
bd:f8:f3:cf:fe:04:ae:ff:5f:b4:68:9d:21:8b:3b:
6b:96:9f:fc:bf:77:b9:0f:c1:a1:e5:2a:81:59:1b:
d3:90:d2:f6:fb:5f:88:a6:c5:ff:77:8d:64:46:7b:
6d:0d:d9:4b:d2:e8:46:08:6e:16:d3:6f:b8:a1:ae:
89:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:07:03:99:95:E5:4A:88:E8:01:3F:8F:8F:C0:C5:0B:1D:03:8A:8A
X509v3 Authority Key Identifier:
keyid:B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e2:bd:26:da:69:8a:0e:29:93:a8:6e:71:5a:43:01:11:83:
c5:8d:2d:ed:54:b2:79:c1:bc:ae:37:c2:83:3f:e5:06:2c:4a:
db:22:a1:d5:56:75:c0:bb:b6:30:0c:f5:a9:52:f2:32:e5:dc:
c4:cc:ca:5a:67:ec:73:55:33:14:d9:b2:e4:a9:4e:ca:83:55:
02:20:fd:4a:f3:66:88:16:37:5b:98:6d:7d:1c:ac:8a:e9:44:
36:2b:37:5f:77:7f:18:db:d0:34:02:3f:07:b9:e7:4d:6d:d4:
3b:07:28:1c:30:03:92:69:90:88:b7:9e:e2:72:78:39:78:ed:
19:02:a4:2a:39:2a:1f:96:02:22:e7:56:66:93:be:71:be:e4:
99:97:3c:b4:0d:62:d4:fb:13:d3:ee:89:26:4d:55:0b:75:58:
89:89:58:b0:75:ef:f8:1f:1e:06:48:3b:b4:dc:5f:b0:9f:37:
43:a8:7e:94:a9:33:4b:35:76:37:49:4f:fe:1f:4b:50:39:81:
4b:04:10:42:e0:ac:3c:5c:04:b5:57:fd:f2:23:1b:3d:0a:ca:
e9:f8:1a:2f:d3:3d:62:3d:08:02:84:e9:92:15:aa:3a:c2:53:
c0:be:01:95:30:39:a8:9f:1b:bf:b0:96:f4:30:a7:6c:67:af:
00:48:c0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:39 2026 by rpki-client