Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
File: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft (raw, json)
Hash identifier: bGHiVFIyepZ+wpgBkbAdcfPYATJuDIG6rG3gsw05/XQ=
Subject key identifier: E2:A5:F1:89:2B:BA:4B:35:28:82:23:1B:AB:41:D0:F1:18:11:E6:96
Authority key identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
Certificate issuer: /CN=b522787599f1798e245f993f8cb8182f99cfd104
Certificate serial: 019D28843C43535B41B37DC8B8022AC72062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
Manifest number: 1004
Signing time: Thu 26 Mar 2026 05:00:47 +0000
Manifest this update: Thu 26 Mar 2026 05:00:47 +0000
Manifest next update: Fri 27 Mar 2026 05:00:47 +0000
Files and hashes: 1: 1Hoyrylcn8m_wR_RB6kG1AoUkbs.roa (hash: i7cfjhCZOPLGdCo7zGnFGevBuRCXnZkz1NQPc21PRUI=)
2: MwxPjEKsyukIW9UgrbKug1OUrD0.roa (hash: hFFWhkDQsz4xhLvtRVUNZgMK+EMIxF7IR1hHUl7v5Zs=)
3: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl (hash: BibAhAsqXNpeLimE7UuTE9lmyv49qFT//hK99bbp4ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:3c:43:53:5b:41:b3:7d:c8:b8:02:2a:c7:20:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b522787599f1798e245f993f8cb8182f99cfd104
Validity
Not Before: Mar 26 05:00:47 2026 GMT
Not After : Mar 27 05:00:47 2026 GMT
Subject: CN=e2a5f1892bba4b352882231bab41d0f11811e696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3b:b0:eb:74:09:c1:5c:94:16:ff:85:18:f4:
48:0d:45:d7:ef:44:55:83:fd:85:31:ca:c9:db:0b:
56:87:e4:bd:93:ac:72:e9:5d:a0:b3:03:95:53:10:
0d:4f:4e:44:81:63:d5:f9:7a:fc:63:2e:2e:41:44:
6b:b7:de:6d:f6:fd:d7:f1:2c:6d:cc:45:46:12:b8:
1e:9f:0d:06:d9:7c:9e:0d:9d:b1:84:ad:39:b9:e3:
74:cb:ae:8e:90:6d:d3:49:b6:69:71:17:cb:15:32:
c3:32:ab:1f:80:d2:00:e2:75:81:76:56:de:8f:41:
97:f0:be:d0:92:0c:eb:ab:3f:32:9d:ae:e4:5f:e0:
9e:fd:02:6c:bc:1b:d6:55:47:ba:69:72:a9:32:38:
39:33:11:ee:70:83:13:c0:65:ed:b3:9d:45:7c:08:
f5:20:90:7e:96:9a:e3:e6:77:bc:e1:8c:fa:bf:3f:
37:96:c1:b4:d4:bb:c1:a1:04:52:cb:3a:2e:a0:38:
75:4b:2c:24:9c:8e:30:66:2d:1f:10:8c:a8:78:50:
0e:c6:f5:12:43:ae:ae:65:6f:bf:ff:9c:5c:d5:e8:
e1:c8:63:5c:80:07:5b:77:76:77:2c:dc:58:de:32:
7f:83:52:2c:b6:59:44:7a:8b:c0:ba:29:8c:68:9e:
d0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A5:F1:89:2B:BA:4B:35:28:82:23:1B:AB:41:D0:F1:18:11:E6:96
X509v3 Authority Key Identifier:
keyid:B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:af:26:ea:9c:08:c1:7b:fe:03:99:4e:6d:a1:2c:b9:c0:93:
30:1a:7c:78:8f:79:33:07:c5:55:86:3b:bc:fc:f6:14:f8:33:
c5:b7:7d:fa:d6:1d:ed:5b:e3:e8:40:81:9a:76:63:da:6b:2b:
6e:a1:16:6b:6f:5f:75:6d:01:38:15:4a:3b:68:b6:11:e0:cb:
b3:e4:74:5e:e6:53:f0:12:5f:d0:1f:15:a8:76:c8:1c:b6:93:
0e:ae:d6:5e:a4:5a:b9:96:76:e8:cb:98:1e:c8:57:39:7c:02:
25:4a:74:2d:a8:65:54:81:a0:ac:5c:3f:22:32:5e:7f:ca:0f:
68:63:54:ed:c8:4b:73:16:01:ba:70:99:d3:89:b4:18:e1:86:
f9:f1:35:9c:d3:4f:b4:a5:e1:72:1b:7c:63:87:c8:84:ed:9b:
93:f8:27:20:eb:da:c8:a4:0d:d7:b1:a1:c2:a3:f2:99:9d:27:
88:a1:a8:cd:5d:b6:73:13:00:8b:df:43:55:49:c5:ab:7c:2f:
e8:0e:9c:b3:8f:9a:3e:59:46:c9:d4:94:d4:09:24:29:ea:84:
39:f2:63:b2:e1:f4:65:15:e3:ac:54:8a:ca:39:2e:b1:5c:a0:
00:48:9e:14:d6:b8:d6:0c:d2:5a:48:da:ca:c7:bc:5b:2b:51:
a9:45:5c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:32 2026 by rpki-client