Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
File: tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft (raw, json)
Hash identifier: MMek5g/PkOGZc9iWWQw3acxH1RW7SRuCdbdnRAFS4Fs=
Subject key identifier: 31:93:BE:CB:DE:58:82:AA:15:64:A1:E7:C5:6B:D5:E8:03:9C:52:B3
Authority key identifier: B6:91:FF:C8:65:9E:2E:63:A6:DE:CE:C7:D6:F3:6D:60:B6:64:09:61
Certificate issuer: /CN=b691ffc8659e2e63a6decec7d6f36d60b6640961
Certificate serial: 019CE71218D3391003ED06E589D8EB9968F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
Manifest number: 010F
Signing time: Fri 13 Mar 2026 12:00:48 +0000
Manifest this update: Fri 13 Mar 2026 12:00:48 +0000
Manifest next update: Sat 14 Mar 2026 12:00:48 +0000
Files and hashes: 1: CnAOgW0v2FHhY7xG5Ek16W61Xwo.asa (hash: BYtVtXvNLu7yhVLJxNiUtZ/vkS0B93JK13XOxYFj8W8=)
2: tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl (hash: uKkAXYCttyKvNtIp4tmb8s3jt1MsvUmuDxpR/+9YpvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:12:18:d3:39:10:03:ed:06:e5:89:d8:eb:99:68:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b691ffc8659e2e63a6decec7d6f36d60b6640961
Validity
Not Before: Mar 13 12:00:48 2026 GMT
Not After : Mar 14 12:00:48 2026 GMT
Subject: CN=3193becbde5882aa1564a1e7c56bd5e8039c52b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0b:a3:ea:98:2d:2e:b7:5b:5a:3f:f1:b0:fe:
23:dc:a5:b5:cf:aa:63:1b:90:c6:4f:1a:b1:98:55:
c9:9a:4d:85:58:1e:16:db:ad:16:38:ae:f0:6b:8c:
67:87:e9:cb:74:22:25:76:d1:70:b2:bf:4e:fb:34:
7e:c1:23:c4:1c:59:a6:70:58:35:88:ac:06:b9:72:
b4:b1:c8:c0:19:19:74:09:ef:45:b6:a6:e4:d1:cc:
6b:c9:58:17:b1:85:e1:b4:d1:bc:e7:cf:3e:b2:67:
65:a7:09:f1:15:6e:70:5c:ff:98:87:d6:5c:ff:23:
c9:59:da:91:34:37:e8:5b:05:1f:6b:bc:62:3d:91:
85:9a:dc:8e:cb:79:ea:be:86:23:91:c6:f5:97:b9:
e9:cf:ff:d2:11:7c:df:f4:3a:fd:e5:d5:59:f5:36:
77:fe:25:90:a0:88:3e:67:4a:88:a0:67:e2:18:66:
77:ed:d4:77:3f:03:c9:87:44:c1:a1:b3:3f:63:72:
ee:95:8a:3e:c1:70:f1:54:58:1b:b2:e9:e7:1b:dc:
64:f0:bc:47:c7:f7:ad:ea:2f:43:71:c1:a1:da:90:
0a:22:3d:4c:15:c0:87:b2:28:a7:98:ea:89:bb:82:
94:69:53:e2:c8:29:33:53:b1:e9:84:5b:b2:61:dc:
c9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:93:BE:CB:DE:58:82:AA:15:64:A1:E7:C5:6B:D5:E8:03:9C:52:B3
X509v3 Authority Key Identifier:
keyid:B6:91:FF:C8:65:9E:2E:63:A6:DE:CE:C7:D6:F3:6D:60:B6:64:09:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5d:88:65:07:39:e8:cf:fc:46:95:2e:ab:8f:62:e8:e9:af:
91:cc:16:51:9c:92:ac:e1:ae:51:84:ac:b4:dc:bf:7d:df:9d:
a1:1c:f9:05:25:ca:6b:b1:d6:15:64:aa:e5:76:6d:52:d3:fe:
75:c9:34:18:41:c6:92:a2:b2:39:f2:14:66:47:79:45:54:fd:
a7:86:f0:8c:a9:76:0c:67:a3:7b:03:ee:b4:76:fa:5d:e0:78:
32:30:59:e8:35:f0:92:8b:a5:b5:46:6f:80:62:d1:ba:dc:86:
d1:23:33:22:e9:db:f5:43:42:20:cd:8f:69:b0:1f:29:5c:6d:
5c:5f:14:78:9c:db:95:e3:6c:1f:0f:35:7a:2d:ce:64:50:24:
d3:26:66:9d:15:73:6e:91:73:3b:ed:6a:8f:38:81:fd:93:28:
74:46:49:e7:3b:26:70:d9:6b:53:54:a1:8a:68:39:8f:a4:86:
07:c5:97:96:9f:6f:e5:0e:fa:b0:0a:d9:45:f7:01:a5:f1:5a:
c1:e9:d2:1b:b8:e9:4c:15:04:42:55:96:cf:00:3d:57:d7:ff:
4b:da:ba:88:c0:b0:13:ac:50:28:06:94:81:e1:8b:f6:a0:fa:
ad:64:97:59:b1:be:72:e8:a2:ce:85:5d:0e:4a:ca:15:44:0e:
d4:14:cd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:53:39 2026 by rpki-client