Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft
File: tIoonrst1oBtYLjFrQNseY9mugY.mft (raw, json)
Hash identifier: 2yJqmN69cVJkqJhG+GvSV5ggorR7tcVQ0+SuQEKBROc=
Subject key identifier: 31:EE:06:03:A3:A0:03:CC:6C:EA:B3:48:29:67:79:AB:A7:A6:D7:D7
Authority key identifier: B4:8A:28:9E:BB:2D:D6:80:6D:60:B8:C5:AD:03:6C:79:8F:66:BA:06
Certificate issuer: /CN=b48a289ebb2dd6806d60b8c5ad036c798f66ba06
Certificate serial: 019D39E54C0C0D0BB8C294EB3DDDD48C2305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft
Manifest number: 074B
Signing time: Sun 29 Mar 2026 14:00:21 +0000
Manifest this update: Sun 29 Mar 2026 14:00:21 +0000
Manifest next update: Mon 30 Mar 2026 14:00:21 +0000
Files and hashes: 1: RIJmcpqsOyhRMT_8YH6FyORD_tY.roa (hash: vIj6Llw4m9MXR4LYPtKFKtVkVJTQSERGEAEPyXkjVmg=)
2: tIoonrst1oBtYLjFrQNseY9mugY.crl (hash: fl+EXpz2eE4F1/olLHH6BvXAYlzMKPiKhzoJ1Tyj3eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:4c:0c:0d:0b:b8:c2:94:eb:3d:dd:d4:8c:23:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48a289ebb2dd6806d60b8c5ad036c798f66ba06
Validity
Not Before: Mar 29 14:00:21 2026 GMT
Not After : Mar 30 14:00:21 2026 GMT
Subject: CN=31ee0603a3a003cc6ceab348296779aba7a6d7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:98:a5:99:9e:3d:e4:33:5b:f2:aa:1b:eb:
68:6e:3d:1d:1c:c4:39:46:68:91:81:da:0d:69:05:
90:67:de:b2:ba:49:0e:88:93:25:73:81:13:b2:a4:
ea:ca:2f:ff:0f:f2:ed:a7:42:0a:97:b1:3e:31:82:
4f:ba:f1:00:d2:84:3f:f8:87:f1:0b:43:c3:2b:b0:
eb:98:c8:ec:89:cf:55:b4:71:1f:81:0b:c8:75:7b:
56:46:ee:97:53:02:28:b5:b0:58:c1:40:15:62:2e:
3d:aa:2f:62:10:34:71:22:17:e3:05:f9:bb:e8:7c:
ac:50:34:85:98:e7:4b:17:13:87:f4:45:97:e1:e2:
56:d5:58:b3:5f:be:47:c1:1e:c3:0c:bc:36:f4:82:
3b:3a:95:a0:fe:74:89:27:7e:69:f3:07:b5:35:3b:
79:14:40:02:29:3e:c3:4a:34:a1:ec:36:0e:a1:f7:
16:31:8f:86:5d:aa:37:4d:f2:c0:ce:d3:64:70:71:
05:db:a5:10:0d:ca:04:a2:df:fa:0d:cf:34:a6:77:
7a:f3:c9:26:6e:42:8e:57:9b:a1:0a:27:2b:cc:96:
1f:f3:bf:a9:64:4d:05:8e:af:5e:6e:04:19:fb:da:
60:fb:b2:d6:fe:ea:e4:71:57:07:6b:e0:2c:df:01:
26:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EE:06:03:A3:A0:03:CC:6C:EA:B3:48:29:67:79:AB:A7:A6:D7:D7
X509v3 Authority Key Identifier:
keyid:B4:8A:28:9E:BB:2D:D6:80:6D:60:B8:C5:AD:03:6C:79:8F:66:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3c:72:cc:06:49:22:8f:db:c9:ad:34:9e:24:2d:7b:82:db:
64:80:29:32:96:47:5c:95:27:77:19:f6:86:30:55:ac:08:96:
b9:ea:19:98:98:62:24:e7:46:66:46:a9:da:73:11:5a:5a:8e:
86:8f:fb:cc:86:0d:a0:66:0b:76:a2:a2:75:64:cd:e6:81:8a:
05:5a:77:06:ec:32:11:ba:88:06:e2:65:15:f2:3b:ca:6e:dc:
87:44:7b:20:82:64:1a:c8:c2:a5:31:9d:e9:10:db:77:d3:7e:
5a:8c:f1:33:75:79:2d:94:19:db:0c:70:72:6e:31:43:3e:4d:
8a:a0:5d:14:ea:7d:5f:73:7e:93:18:9f:97:92:37:93:f5:6a:
cd:c8:40:27:39:74:ca:c2:db:e7:ca:7f:96:3d:22:1d:97:e8:
71:90:bf:2a:db:09:bc:f1:9a:a4:d5:76:87:37:5e:30:1e:48:
fe:75:d1:9f:14:31:f4:24:ff:7d:72:a1:1f:5e:14:40:b6:d0:
32:fd:93:d7:e6:28:04:00:ac:b1:13:2f:9b:bb:cd:af:f1:e0:
0a:a6:b6:5b:af:4d:b6:31:50:3f:39:ad:50:a1:c0:1b:4b:12:
04:f5:c2:71:10:83:69:8a:26:d5:41:6e:51:8f:96:18:62:fe:
d8:4b:44:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:01 2026 by rpki-client