Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
File: tXZXfSAIXEwi_IARyNGpP2MhHA8.mft (raw, json)
Hash identifier: zTiRPfMOXHUtzr3FN5JRolLryLv7hdnNq/gcOs1UE9c=
Subject key identifier: 61:55:90:42:77:33:E8:22:84:E9:38:54:77:25:82:ED:F1:51:F0:A6
Authority key identifier: B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
Certificate issuer: /CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Certificate serial: 019CEAB7E77AAC3D6A6BC5B01C37DE96B584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
Manifest number: 038D
Signing time: Sat 14 Mar 2026 05:00:46 +0000
Manifest this update: Sat 14 Mar 2026 05:00:46 +0000
Manifest next update: Sun 15 Mar 2026 05:00:46 +0000
Files and hashes: 1: BrEn8Ll6xu0ChcaE3vSi9IymY14.roa (hash: NNxrHTmgvweqwRH2WYDaRBvMbTQvhCqzhXCgDcQp9hU=)
2: dJzuUQdUvbJK7ApuLpV6Tk_tQMQ.roa (hash: xDU3oB6soulsXEg0wveHXPe21+ZwGXL0i23r4rN7i40=)
3: tXZXfSAIXEwi_IARyNGpP2MhHA8.crl (hash: /b9Ppx4cMs4BNo2Qk6Uj2UHCJHTonVXVSdkf2ub+BsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ea:b7:e7:7a:ac:3d:6a:6b:c5:b0:1c:37:de:96:b5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Validity
Not Before: Mar 14 05:00:46 2026 GMT
Not After : Mar 15 05:00:46 2026 GMT
Subject: CN=615590427733e82284e93854772582edf151f0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0a:f0:43:e8:1c:80:31:95:b5:fe:18:db:bc:
a5:ad:a3:99:6c:56:50:fb:21:39:58:e9:44:79:c8:
fc:f3:46:27:b3:13:45:ec:38:fb:bf:4b:b6:62:6c:
7e:fb:38:ab:81:29:e2:ab:f8:20:c4:e8:6a:86:1f:
4b:fd:d9:b2:63:0a:2d:18:f9:d9:ca:60:b6:76:ad:
97:c4:42:f3:de:9d:d1:5e:32:e8:d6:b7:d4:5d:a5:
7a:cb:12:23:bc:fc:8d:6d:f9:1f:25:e6:0c:d2:4c:
02:07:4e:9a:1f:5c:f5:ca:23:e9:bf:24:b3:62:d3:
1d:bb:9e:25:3c:e7:49:e9:34:3d:80:c4:5b:c7:f3:
6c:d1:74:81:40:1c:83:d8:aa:7b:cd:3f:88:44:96:
73:99:25:96:f3:6e:f4:91:8e:59:1a:d9:11:bc:a3:
c8:24:f4:4f:ad:29:5f:f7:3d:ed:34:ab:2e:e0:87:
77:73:69:2e:75:08:46:7b:3b:17:50:6c:95:ef:82:
9d:62:cb:e4:64:77:8c:ca:1a:ce:42:fb:bf:0f:71:
a1:f1:eb:3d:97:7e:e5:c9:43:1b:c2:07:21:79:e4:
42:bc:b8:37:59:5b:65:b7:51:14:87:91:c2:a7:33:
38:35:b5:4d:14:c1:47:0b:76:9f:06:82:22:1b:d1:
a1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:55:90:42:77:33:E8:22:84:E9:38:54:77:25:82:ED:F1:51:F0:A6
X509v3 Authority Key Identifier:
keyid:B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:be:1b:59:30:cc:9d:a9:db:ce:5d:4d:b5:58:c8:fe:ae:a0:
2b:72:e7:22:5b:9a:da:2a:aa:ec:c7:27:45:d9:09:e5:0a:60:
17:c1:1b:c8:45:61:60:5a:70:92:47:5e:34:24:5e:bb:8b:a8:
df:45:2c:79:4b:e5:8b:8e:e5:32:9d:85:5b:59:b4:17:99:c7:
c9:db:85:cd:69:74:4d:10:9e:37:47:e6:6c:db:76:a4:97:d9:
8f:d2:46:6c:2e:6b:c1:95:a7:84:70:1b:54:d1:0b:5b:ed:9e:
4f:08:2b:90:1b:64:44:67:ab:dd:32:fb:32:a3:93:b8:aa:66:
0e:1e:b6:64:ef:53:58:06:49:f1:3a:2c:d4:b7:83:de:9c:82:
c8:04:0c:13:7e:0f:61:03:d8:db:3d:cf:99:6e:eb:89:70:05:
1e:e6:88:1e:1c:0c:a0:e6:62:f6:d4:bd:c9:d4:02:bf:61:d8:
4e:28:33:20:0d:36:cd:76:53:98:82:7d:47:00:ab:9a:a1:41:
96:40:18:ae:7c:29:3c:d1:2e:03:1d:e6:8c:12:e3:98:7c:98:
bb:2a:58:f7:73:2c:5a:03:b4:48:70:a3:91:5c:63:f9:b0:90:
bb:f6:4b:d2:14:15:d5:06:54:25:24:e4:cb:7c:d4:38:a8:08:
88:d5:f9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 10:28:46 2026 by rpki-client