Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
File: tF5iJw0g-UZ6avx4lj28-4D79So.mft (raw, json)
Hash identifier: RExCRbrpTdsFBuUEWCJh21tJK+19mYXyoU1Ss5+NrMk=
Subject key identifier: F3:1C:0A:21:09:E3:78:FB:82:A4:3F:5A:2E:95:1A:80:35:02:DF:17
Authority key identifier: B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A
Certificate issuer: /CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a
Certificate serial: 019D389C55B8FEE59FC09CED9734E8442F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
Manifest number: 100F
Signing time: Sun 29 Mar 2026 08:01:02 +0000
Manifest this update: Sun 29 Mar 2026 08:01:02 +0000
Manifest next update: Mon 30 Mar 2026 08:01:02 +0000
Files and hashes: 1: OaFZLyzit9aeE8Q-rZBaTKGo_VE.roa (hash: Z2wq4t88shsGbAykTeNAzXxxEV7hDGsKc3AYjBfbT+k=)
2: tF5iJw0g-UZ6avx4lj28-4D79So.crl (hash: eQMXEiia0s+HCEejQzZddzOf49i7MtFT8HgacvDGIxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:55:b8:fe:e5:9f:c0:9c:ed:97:34:e8:44:2f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a
Validity
Not Before: Mar 29 08:01:02 2026 GMT
Not After : Mar 30 08:01:02 2026 GMT
Subject: CN=f31c0a2109e378fb82a43f5a2e951a803502df17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:9f:9a:45:32:a8:19:40:f2:13:f7:80:d2:
93:33:02:e8:3f:c0:da:2b:c4:22:26:33:e0:77:1d:
61:0d:5c:45:19:67:34:b2:20:99:7f:03:20:f2:cf:
86:bc:cf:ed:f5:e0:20:24:4d:36:e7:dd:96:3d:33:
fb:84:05:50:20:eb:95:a5:84:00:57:26:af:bb:cd:
74:26:be:4b:91:6b:49:77:b8:dd:60:1c:66:ff:19:
08:2f:82:ee:6e:dd:41:0a:ba:71:d6:7b:db:6f:b5:
5f:43:4c:8a:1b:52:52:80:e8:6f:f5:cd:b7:90:37:
6f:76:e2:1d:aa:ad:99:f0:87:f8:7b:f7:50:e3:99:
39:35:89:dd:a6:ee:fe:00:aa:c3:c2:58:ed:14:5e:
3a:e4:d7:11:43:42:26:b7:6d:7f:e2:b7:0d:34:f1:
cc:3c:13:eb:06:75:d8:5a:af:15:5c:30:90:63:25:
b4:2e:f8:8a:bf:d9:23:47:54:74:65:2a:c6:71:87:
f3:92:9d:86:06:b0:ba:bb:9f:24:23:20:a8:08:5a:
e5:0c:b5:7b:b0:d0:46:dd:0d:c6:5f:0b:50:24:09:
bb:26:84:a5:ec:a4:41:5e:64:7f:28:8e:e9:6b:9a:
c9:85:41:6b:1e:48:70:5c:ea:42:bb:86:67:54:9c:
90:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1C:0A:21:09:E3:78:FB:82:A4:3F:5A:2E:95:1A:80:35:02:DF:17
X509v3 Authority Key Identifier:
keyid:B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:de:03:11:d6:0e:99:db:d5:29:52:d5:6a:28:f2:6f:80:35:
d6:05:a6:ac:d5:b5:96:6b:d2:be:cf:8c:70:4b:9f:78:52:11:
fa:c1:37:50:a8:68:e6:40:7d:81:28:5a:12:48:62:1d:fc:51:
df:93:2d:fb:dd:a9:41:5d:07:58:50:4d:ba:37:2b:c3:ca:16:
82:31:69:82:df:0e:5a:d9:68:b6:8d:c2:d8:0b:f9:bb:07:fb:
b4:2f:98:36:15:89:07:3b:bf:7f:38:74:d8:60:57:32:cb:74:
da:5f:49:56:55:61:0b:9a:ca:15:66:2d:36:6d:f0:35:0d:b7:
4b:ba:39:ff:5e:36:2b:b7:78:3c:1b:65:6a:c8:7a:95:f3:12:
de:51:27:39:88:d3:5e:0f:fb:c2:e6:0e:3b:43:84:cc:17:26:
f7:da:9b:57:02:b7:fc:fd:96:be:65:98:57:92:78:d5:18:94:
b5:67:79:aa:13:3f:bd:ee:d1:ab:5e:56:08:86:93:fa:c7:70:
93:73:93:8c:85:0b:50:b1:d8:46:84:74:dd:aa:32:7a:a7:be:
c4:6d:fc:d2:1d:9a:c2:52:ea:96:2d:66:cf:3f:0c:33:ed:59:
b0:30:be:c9:c2:c6:af:27:fd:b3:e1:95:7e:6b:0a:25:84:28:
06:c7:8a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:58 2026 by rpki-client