Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
File: tcsrXq88wV3Us7I62LlHKlJAwDs.mft (raw, json)
Hash identifier: Zv/9n80NdO//xijvtzNPSQLIisGYAqXlCZKrKJOL3Js=
Subject key identifier: A9:00:84:31:D4:DE:E9:B4:2E:1E:52:10:81:8B:A0:7F:E6:0F:10:0B
Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
Certificate issuer: /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Certificate serial: 019D254C9B251C2A4B7A591D4D63E98DF2DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
Manifest number: 0268
Signing time: Wed 25 Mar 2026 14:01:10 +0000
Manifest this update: Wed 25 Mar 2026 14:01:10 +0000
Manifest next update: Thu 26 Mar 2026 14:01:10 +0000
Files and hashes: 1: GJGcFx0xGAuamOa3lmo_7TyCIas.roa (hash: qw0UBzd9Mkc6V2U3rQ/Tp5ymNOy4O3f5at2SdO5Hyh4=)
2: JD-_RMbQpF-pKZOnXs4mYFjjidQ.roa (hash: kFiezG9HvRIWsHO1y6hBEeY1FqGlLKVulu5N0PlRmH8=)
3: mOOpQixSR_G0BkBLz_pfNJqCpPc.roa (hash: J7597tV7KTTIerXR1FKozSh7ddWeTNBPbVoOCxMRSXM=)
4: tcsrXq88wV3Us7I62LlHKlJAwDs.crl (hash: O/UymeSSQJP6UjiocUQVhvJoOWdJrAFwqH4SWxmeKSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:9b:25:1c:2a:4b:7a:59:1d:4d:63:e9:8d:f2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Validity
Not Before: Mar 25 14:01:10 2026 GMT
Not After : Mar 26 14:01:10 2026 GMT
Subject: CN=a9008431d4dee9b42e1e5210818ba07fe60f100b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:16:35:2f:ed:3d:2e:68:c4:ef:86:27:38:bf:
8a:b0:b0:6b:a2:aa:8f:65:51:54:94:c4:55:8e:76:
3f:9e:d7:9f:39:14:c9:46:12:0f:a5:eb:80:4e:6c:
b7:2d:73:93:99:0f:20:5b:1f:41:c7:95:7a:b6:90:
31:e1:24:0f:13:3c:47:ac:0e:72:24:65:e5:21:b8:
5e:65:48:e1:5c:ec:d6:4e:71:77:9c:c6:21:4a:b1:
fe:4a:97:a4:25:30:90:d7:ba:c0:84:19:fb:64:cd:
bb:aa:19:33:e9:7c:25:6c:3a:85:19:cf:ca:87:e2:
ed:a0:81:08:7c:c6:63:88:41:b2:f0:6c:7a:77:2c:
ea:aa:4d:5d:54:0b:9d:c4:50:22:87:60:b6:fe:a2:
0e:f5:12:49:37:1d:b7:36:d8:b3:f5:7c:93:e7:3e:
a0:4c:ee:02:78:b4:d0:58:66:51:a3:9c:16:32:4c:
f5:d8:54:72:2c:c0:5f:c9:e7:4e:3f:70:d9:2f:84:
51:e5:84:c3:b7:9f:71:08:2c:97:bd:1e:2e:f1:f3:
05:70:ae:83:3f:20:83:ba:7c:79:d9:7b:86:55:96:
77:13:be:40:34:28:94:e8:e3:b2:44:b7:10:34:9a:
62:38:cc:41:0a:d4:38:51:46:25:f8:df:a6:c3:7d:
bb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:00:84:31:D4:DE:E9:B4:2E:1E:52:10:81:8B:A0:7F:E6:0F:10:0B
X509v3 Authority Key Identifier:
keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:83:59:97:4e:a8:01:2f:34:79:df:b7:df:d8:ae:c1:65:4e:
4e:68:cc:ff:29:64:7d:10:33:bf:71:28:47:7f:b0:f2:0a:7c:
b9:d4:1b:ac:f1:cc:cc:a7:5d:e7:bf:d5:00:63:6f:03:eb:6c:
36:71:fc:84:69:b0:0d:81:ac:98:f8:a9:8a:fa:4c:13:64:cf:
1e:72:27:e4:d2:4d:08:79:78:8a:5e:0a:19:d2:1b:c0:8a:5b:
e0:ac:c8:f6:50:21:54:7c:c4:6c:5c:cb:b3:91:b3:20:dd:49:
94:5f:a4:48:9a:6d:cf:ca:84:12:80:d5:fc:62:9a:11:21:43:
bb:f9:d2:78:aa:c8:3e:8c:78:aa:23:49:8d:2e:57:52:b0:fc:
29:aa:a0:29:ea:85:b8:3c:e9:a7:05:1f:39:f5:92:a2:7a:33:
90:90:90:08:6c:93:8d:f5:bf:d9:33:22:74:8b:68:12:05:de:
b8:b6:d1:9f:ac:88:53:a5:1d:68:9a:69:a9:61:31:f5:64:36:
b4:8e:e5:e6:6d:49:ef:9a:52:e5:db:db:48:86:88:98:a8:cb:
9c:77:6a:4c:26:4a:a6:77:ae:99:f8:c8:5d:22:63:65:2c:22:
33:a5:b5:37:6e:78:9d:ac:b1:1f:3d:e3:e8:0a:88:22:55:f6:
a6:46:72:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:27 2026 by rpki-client