Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
File: _Tq5WEdps0xpXg7zvkAN5chwX1g.mft (raw, json)
Hash identifier: U3uYlWAlvCWuiR6rETBIC1b9MNQooGxiyucbxkmemC4=
Subject key identifier: D4:B4:7D:0E:9C:D9:3B:A4:F1:BB:78:9C:CB:5C:1A:A6:D7:48:F5:F7
Authority key identifier: FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
Certificate issuer: /CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Certificate serial: 019D38D34C7E8BB2EACCD013076714BF2CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
Manifest number: 0497
Signing time: Sun 29 Mar 2026 09:01:04 +0000
Manifest this update: Sun 29 Mar 2026 09:01:04 +0000
Manifest next update: Mon 30 Mar 2026 09:01:04 +0000
Files and hashes: 1: 0BsOVzhVk1MKdipne8qaIMaKsew.roa (hash: GWXgVGFzyZitQdapoQ6ExT2SefdF2ctk1Wka/DqT424=)
2: _Tq5WEdps0xpXg7zvkAN5chwX1g.crl (hash: JhGiWMTCDIVqKgEbdKjeD307yQ0D5179++4FruubcEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4c:7e:8b:b2:ea:cc:d0:13:07:67:14:bf:2c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Validity
Not Before: Mar 29 09:01:04 2026 GMT
Not After : Mar 30 09:01:04 2026 GMT
Subject: CN=d4b47d0e9cd93ba4f1bb789ccb5c1aa6d748f5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:03:2d:62:0f:fc:31:1a:07:1a:4a:0d:b8:
31:fd:f7:ac:89:fa:47:81:6d:13:a9:82:d6:ca:0b:
34:7a:01:9a:d7:14:b2:52:28:cf:92:0d:85:77:75:
c4:7f:5e:c3:10:b4:7f:db:11:9d:d1:1a:dd:dd:c4:
55:5d:80:0d:28:b4:3c:5b:dc:36:0b:91:3e:09:90:
53:ab:67:4d:9a:ab:4a:cf:61:96:e2:d7:c2:d5:6f:
e6:0d:40:75:3d:44:b3:22:de:73:e5:ad:a4:b9:5f:
5a:b2:55:90:21:f6:2a:87:ce:65:de:00:61:55:74:
55:ef:0a:e7:7e:35:a8:8a:e1:ce:84:ab:72:e8:5f:
b3:a2:ad:07:c3:d7:fa:a2:78:bb:7b:dc:29:23:25:
59:2f:55:0e:bb:58:69:7a:b7:99:87:58:3e:91:54:
c6:e1:cd:d2:ab:41:ce:1c:37:a3:f6:a9:58:34:d6:
f7:ed:19:52:86:33:1f:1f:35:df:11:6a:f9:1d:58:
bc:76:a3:d2:e4:fa:05:94:1c:6a:58:78:8e:6f:c2:
69:64:a4:47:53:5d:87:97:32:08:70:e1:f3:42:4b:
a8:bb:7e:e9:0a:19:dc:5e:c6:df:fd:e1:40:f9:50:
7e:7e:c9:8e:2e:de:83:38:ef:74:1c:84:eb:83:8a:
a4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B4:7D:0E:9C:D9:3B:A4:F1:BB:78:9C:CB:5C:1A:A6:D7:48:F5:F7
X509v3 Authority Key Identifier:
keyid:FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:72:07:5d:6d:18:49:69:31:f1:f0:4b:60:0e:20:53:b7:fc:
50:02:20:f9:51:7a:b6:54:91:83:21:f2:c6:cb:23:05:9c:e7:
dc:f7:f7:6d:1a:ad:e0:5a:4f:3e:7d:b3:96:14:8f:46:f2:cf:
e7:b0:09:5a:26:e1:2f:9c:ae:bc:ac:d0:92:bb:a8:c1:17:4b:
09:34:73:5c:94:a9:44:aa:f9:0c:86:5e:51:3a:4d:dc:53:1b:
bf:e6:4f:14:47:a0:59:78:f8:6c:a7:a6:5a:c9:14:b3:a6:b0:
77:59:fb:99:13:3d:8a:e8:8f:a1:e0:9d:a2:7b:78:5e:e6:64:
aa:fa:71:f7:8b:34:16:14:41:71:46:3e:96:e1:0d:f3:fe:5e:
fd:7c:7a:6e:d6:55:53:8b:75:f0:71:9b:8f:43:de:ec:47:c4:
dd:95:a4:ca:14:aa:9d:42:3e:33:f1:61:49:fd:00:74:27:36:
ed:b5:4e:22:53:e0:4e:65:95:ad:92:bc:c9:1d:24:2c:71:a8:
a2:ff:bc:f7:3b:57:c9:9c:08:37:9c:57:af:90:57:07:6c:d0:
e3:f2:09:8f:af:ec:ca:f2:67:e9:16:0e:11:8e:c1:6a:82:82:
fa:5f:7b:78:e5:66:86:06:3e:9a:09:94:99:40:b4:2b:1b:07:
db:d3:d5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:22 2026 by rpki-client