Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json)
Hash identifier: kyz7lbvlfu9HYhAY1H1fn78p54jFxkt+PVazEHJPqWM=
Subject key identifier: 95:68:E0:3C:58:47:21:D6:CE:54:08:FD:87:CA:30:AC:81:E4:8C:21
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial: 019D389BCDBADC4A16416E257299E925AC57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
Manifest number: 1300
Signing time: Sun 29 Mar 2026 08:00:27 +0000
Manifest this update: Sun 29 Mar 2026 08:00:27 +0000
Manifest next update: Mon 30 Mar 2026 08:00:27 +0000
Files and hashes: 1: 58ydFFoOvrTPYA8iOIAgZMf_cpo.roa (hash: F/vDL/5heMjU5cUbUY7RNuovDGPBXC3rXD0ZADSlfk8=)
2: roH8dSJ1cyQiwOhgeOOscUYpa4E.roa (hash: 3JORgmdPZaQ8xXUzauNxbxZQHf1X4hPOhgbsIE182Bg=)
3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: Xt+Tr+feEBq7mvWQHAz3TzrPbCQqPD/9rQNvf3Mw8hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:cd:ba:dc:4a:16:41:6e:25:72:99:e9:25:ac:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Validity
Not Before: Mar 29 08:00:27 2026 GMT
Not After : Mar 30 08:00:27 2026 GMT
Subject: CN=9568e03c584721d6ce5408fd87ca30ac81e48c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:67:19:8e:99:51:d0:05:3b:db:78:16:92:02:
5b:d3:9d:9c:d6:f5:b3:1a:3d:ec:6b:28:80:76:18:
c6:c3:93:8f:71:25:b5:43:ff:60:7e:3e:70:1a:dc:
b5:6d:3c:54:fb:30:6d:b4:40:7a:56:fd:e5:ce:43:
45:3e:1c:5d:74:0b:f2:44:92:67:ed:2e:2a:95:08:
0e:a2:ee:78:7b:5d:b6:71:26:9a:20:10:fa:80:45:
ab:9b:66:9a:f2:a4:f9:8f:be:12:3c:0a:8b:39:5c:
aa:a8:03:57:91:39:de:c0:7c:18:0f:01:92:8f:5b:
3b:c0:b5:f4:ca:6d:ea:82:47:11:7f:ed:0d:fa:b6:
78:ef:c1:fb:d6:35:6d:92:64:62:6a:e9:d3:43:d3:
ee:9b:ad:dd:9f:7b:38:d7:fe:da:c3:af:56:e1:d3:
f8:a2:f4:41:37:57:94:cd:79:d9:0b:6a:1e:4e:f3:
88:49:c1:a3:ab:18:24:a8:e8:3c:cd:e2:45:b3:70:
5a:01:ad:ec:9c:e7:ad:c0:c3:81:42:61:33:42:6a:
e8:da:b5:ed:c9:3d:ed:fd:29:f0:24:a5:f9:db:15:
f0:ba:3d:39:a4:d7:92:df:2d:83:b5:a4:70:25:69:
76:81:26:b2:32:ca:e3:13:af:64:ff:22:48:86:43:
63:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:68:E0:3C:58:47:21:D6:CE:54:08:FD:87:CA:30:AC:81:E4:8C:21
X509v3 Authority Key Identifier:
keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:32:e0:6a:af:96:01:a3:20:51:b2:59:fd:b5:e9:9c:88:e6:
78:1a:45:97:c4:49:bc:9c:e0:8b:6e:19:cc:33:bb:ec:52:f6:
48:c2:3e:46:4b:0a:ac:fa:29:d6:58:a1:b7:0c:4f:57:14:87:
0a:dd:2e:97:74:64:3e:b5:4a:b8:81:11:19:17:9f:b2:24:89:
c3:ac:df:49:43:5a:2d:f2:23:b2:e8:6a:56:49:6b:35:57:3e:
bf:72:15:ac:39:fa:88:88:88:9f:93:d4:4b:5b:5e:32:20:38:
c0:27:78:f2:6e:ad:4b:27:d9:86:f1:55:ce:08:ee:e1:69:78:
48:3f:d8:7c:06:03:45:9c:80:c7:dc:ac:e7:e4:0b:d4:6f:fe:
22:8c:cb:d5:8e:ac:a4:2d:8d:43:1b:3a:89:25:53:04:02:27:
2b:36:d4:23:6f:38:03:8c:3c:d8:93:0e:f3:23:a4:e1:81:89:
8f:9c:ab:80:17:b0:2a:87:3e:5d:54:e5:ec:7f:91:a5:74:50:
02:8e:d9:1d:12:78:2a:d1:a6:39:f6:4e:c2:e7:c1:1f:02:71:
4b:34:fb:23:90:3c:4e:e4:57:02:86:c0:e3:b2:6f:a0:67:0e:
44:2b:f6:a0:e3:0a:b1:37:f8:e8:ec:33:c3:5d:e6:33:80:3d:
45:10:a3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:38 2026 by rpki-client