Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
File: tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft (raw, json)
Hash identifier: vUTwJIX63S+RvydhfnEMeodcAw5WJwykAVqzwa4BFiY=
Subject key identifier: 12:E8:9C:C6:A8:FB:79:07:24:86:C0:84:81:D3:5C:B7:9E:06:5A:3E
Authority key identifier: B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A
Certificate issuer: /CN=b4d8b27aaa55e51a345f6a4519e367955046c30a
Certificate serial: 019D2AE113CA133FD3EB0A47229D01FDBA02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
Manifest number: 1431
Signing time: Thu 26 Mar 2026 16:01:26 +0000
Manifest this update: Thu 26 Mar 2026 16:01:26 +0000
Manifest next update: Fri 27 Mar 2026 16:01:26 +0000
Files and hashes: 1: tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl (hash: DaW0WhIpGwagtVcJYelQbAd4tv1sXBPfiPwrLo4afq8=)
2: xqMEiaPGgAlIQo3TzS_5VB2M2OQ.roa (hash: Y2eUYtTDjf9bWENJZhOD8HXOBzywjtXZMecCETD0P0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:13:ca:13:3f:d3:eb:0a:47:22:9d:01:fd:ba:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d8b27aaa55e51a345f6a4519e367955046c30a
Validity
Not Before: Mar 26 16:01:26 2026 GMT
Not After : Mar 27 16:01:26 2026 GMT
Subject: CN=12e89cc6a8fb79072486c08481d35cb79e065a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:53:17:ff:26:a5:6c:cd:a9:fe:9e:ac:53:
d3:72:df:13:4b:fc:83:93:be:40:80:48:cf:17:50:
86:4d:84:37:0f:ca:fd:a5:d6:cc:3f:5b:8e:f5:e8:
18:a9:fa:44:86:f0:9d:80:55:a2:23:24:d0:89:6e:
95:54:83:7f:c3:43:b1:03:69:58:86:b3:28:09:a2:
4e:10:31:bb:9e:3c:ea:b8:5e:0b:c4:eb:f6:f3:1c:
5a:87:f7:46:ef:13:1a:72:e8:bf:60:21:c5:f1:b3:
a8:82:96:7c:03:cf:40:9e:f6:9b:9b:5b:29:47:0a:
c0:a3:03:b2:4f:26:55:bf:37:43:42:d6:94:da:d9:
4c:4c:3f:67:a8:a8:1b:5c:9c:97:b5:18:13:0d:7a:
c8:5b:03:ad:2b:34:3d:11:77:66:f5:e9:5e:79:18:
95:ff:3f:4d:20:66:dd:99:1f:29:53:52:ec:84:ab:
cf:9d:44:6f:ad:3e:ec:97:2b:b3:26:1c:f4:6d:be:
30:70:7a:66:48:56:b9:eb:78:3b:79:b1:67:b3:c8:
38:09:cf:0e:c6:06:61:c2:f6:52:32:eb:fc:6b:49:
cf:06:0c:0b:c8:57:e5:d3:32:ee:ed:23:b5:45:26:
0c:20:37:e9:74:4c:f7:c8:1a:7b:3b:1f:73:e7:8d:
76:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E8:9C:C6:A8:FB:79:07:24:86:C0:84:81:D3:5C:B7:9E:06:5A:3E
X509v3 Authority Key Identifier:
keyid:B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6f:cb:9e:1d:ed:fc:c5:15:5a:7e:72:64:f0:bd:de:35:4d:
57:31:af:7a:3b:d9:f4:ae:a2:11:55:9e:dc:45:7f:25:c5:a9:
35:a6:90:db:9b:1b:e2:c5:00:06:1e:9a:d3:c7:f3:32:d1:d1:
ba:87:93:60:df:f5:3c:16:26:88:5d:7b:1c:42:a2:48:d2:ff:
d0:8a:59:4d:ee:91:75:30:40:cb:14:6b:96:43:ef:7b:c7:45:
66:d7:2a:4b:8c:cc:d0:f7:aa:12:92:a0:80:d3:5a:8c:25:4c:
da:72:81:e3:19:e0:56:f9:93:8c:70:d5:44:9a:98:63:81:08:
cf:40:4c:b2:d7:70:9a:8e:f6:11:ec:98:bb:5a:ca:66:1d:d2:
f8:df:76:86:3c:ab:74:4e:c0:a2:af:77:e0:6b:ad:b4:78:7e:
38:0e:60:14:7f:8f:de:17:8e:bc:81:58:27:ff:44:74:02:0c:
6f:d6:6a:b8:1e:27:1b:58:39:37:b4:b2:4c:9c:92:9c:92:23:
a7:8a:cf:f2:52:fc:1d:40:8c:fb:d9:83:e3:d5:37:60:0c:bc:
5d:ce:63:30:21:a9:ad:3d:61:64:ec:29:2c:a5:44:06:40:6b:
fb:8c:02:a2:7a:16:e8:47:e2:07:af:b5:f9:b2:a2:ee:87:ba:
29:d7:b4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:48:57 2026 by rpki-client