Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
File: ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft (raw, json)
Hash identifier: tC/77EgXJQQkb78N8uc8OubOhLd29K2vQlNmKfiYLPU=
Subject key identifier: F1:C1:9F:D2:C3:B7:0C:6C:71:3B:D4:3A:41:DC:30:DC:66:9B:DD:DA
Authority key identifier: B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78
Certificate issuer: /CN=b62dd60548b67cc41e67b6a616a12ec53bf42978
Certificate serial: 019D39AE8F5CA8117BB99B836B79A1137AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 13:00:34 +0000
Manifest this update: Sun 29 Mar 2026 13:00:34 +0000
Manifest next update: Mon 30 Mar 2026 13:00:34 +0000
Files and hashes: 1: cR-Inx2FPQAFHMTBAFcIV-g96qI.roa (hash: /WX3k+99dSoxI5A3FmHr7z1BH//wZrnLXz4X48FtN/8=)
2: ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl (hash: e29sE4VaY9cxWPtCdysXd8aPEzk/Ooc5r6W9sKcRML0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:8f:5c:a8:11:7b:b9:9b:83:6b:79:a1:13:7a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62dd60548b67cc41e67b6a616a12ec53bf42978
Validity
Not Before: Mar 29 13:00:34 2026 GMT
Not After : Mar 30 13:00:34 2026 GMT
Subject: CN=f1c19fd2c3b70c6c713bd43a41dc30dc669bddda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:60:59:d9:cc:34:94:e4:d3:cb:1e:4f:ef:b9:
60:3e:8e:93:44:01:79:dc:0c:44:6b:f9:0e:7f:ec:
e1:a0:06:9e:19:b5:ed:91:78:a2:5a:c6:19:c8:71:
0a:f8:92:cf:ef:26:68:f0:ee:6c:22:aa:d9:94:85:
3f:f5:7c:39:db:97:2d:3b:71:96:e2:c2:97:65:e0:
b3:1d:4d:ef:54:52:fc:a8:6b:74:6e:9c:15:f0:78:
77:42:96:a4:d8:6e:5f:0f:30:1a:0a:7a:f2:9b:80:
7f:c7:84:0a:36:4a:ce:70:08:6e:a2:21:27:9b:c9:
4f:de:b0:cd:f8:98:00:da:67:d4:b0:72:96:fe:bf:
ec:ac:c4:a1:d9:fb:bb:5d:8d:7e:46:0b:8c:e4:bb:
75:84:c1:72:20:06:69:ad:9d:ae:3a:be:37:2d:b1:
e7:aa:e5:73:92:59:24:7e:04:f8:dd:77:67:e3:9d:
89:64:50:6d:f6:11:2a:47:87:37:c9:3b:01:72:c0:
76:60:b0:61:0c:2c:c4:e4:ef:4d:62:99:ea:1a:5d:
ef:02:94:ea:88:dd:c7:00:33:08:ca:75:e6:8e:18:
c1:59:bf:c1:fb:e1:85:7e:be:b4:b8:20:71:53:12:
6d:8c:34:c8:64:5c:f1:a0:3e:11:9f:13:38:b3:5b:
e2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C1:9F:D2:C3:B7:0C:6C:71:3B:D4:3A:41:DC:30:DC:66:9B:DD:DA
X509v3 Authority Key Identifier:
keyid:B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4a:5e:3c:39:31:a4:46:e9:06:fd:05:ff:20:12:85:38:9e:
d9:c7:40:5c:03:7f:6e:74:fb:61:b4:72:b4:cb:79:57:a6:3f:
8f:d9:c7:6a:50:b9:25:23:43:cf:f3:41:44:26:78:b1:99:51:
ce:d8:52:c6:02:15:2c:c8:5c:5a:4c:6b:a8:8e:cb:f3:3d:b2:
c2:79:7c:76:f3:98:1f:4f:ab:ce:4d:34:b5:19:5e:ab:ca:7b:
fe:67:af:3b:b1:e1:46:26:b0:a9:79:66:1a:9e:58:f2:9c:7c:
6c:0b:28:02:08:0d:20:24:ff:9e:54:81:b6:fe:43:9d:c7:aa:
b5:36:a3:f2:8e:6c:ff:e2:80:35:08:8d:14:2a:ef:10:d6:aa:
b6:d8:ab:8b:c4:5b:78:08:13:b0:71:35:77:9a:5a:7f:05:98:
4b:a9:9a:2f:79:bf:85:cf:3e:94:bb:be:45:71:24:98:c0:4a:
eb:70:02:5f:6a:cd:10:f8:83:7d:9e:25:4f:1a:ab:d6:fa:ea:
d9:aa:08:c4:3d:0a:e7:9d:e6:aa:b3:bd:59:fa:e1:56:62:13:
b1:00:8a:af:b3:21:fe:f9:ee:98:bf:a4:c4:af:5e:f7:c7:47:
00:92:b2:1d:7e:30:52:6c:6b:e4:76:35:d5:c7:63:92:59:af:
b4:34:a3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:09 2026 by rpki-client