Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
File: TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json)
Hash identifier: s/5bpe1YUfXMlv7+xIonMK73BBkp/l57dc9h3HrAkJ8=
Subject key identifier: BF:C5:99:E9:E7:70:87:45:16:F7:CB:33:2D:E5:84:89:04:AF:AC:BB
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 019D0D44240F0C38BA866B67258D091DE8C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
Manifest number: 1814
Signing time: Fri 20 Mar 2026 22:01:02 +0000
Manifest this update: Fri 20 Mar 2026 22:01:02 +0000
Manifest next update: Sat 21 Mar 2026 22:01:02 +0000
Files and hashes: 1: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: gN55ppRDKBxFPYzm6nK+YRMyNUTnBLB0WAVLQWA1OGc=)
2: cMSq_NcYXBjORlEeP54TeKaU-zc.roa (hash: AnKK7epayFvj9OjYad7fK2xMQOaLyQs9vYbQVKbmXI8=)
3: svmsZH4j3FCzPSNp-bJETBP8qzs.roa (hash: enOf8GhkIm48YbUB7aWnRSzpdWjW5NG5zxx4fZ/PPB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0d:44:24:0f:0c:38:ba:86:6b:67:25:8d:09:1d:e8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: Mar 20 22:01:02 2026 GMT
Not After : Mar 21 22:01:02 2026 GMT
Subject: CN=bfc599e9e770874516f7cb332de5848904afacbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f2:42:0a:8f:35:bb:10:b7:03:3c:98:d3:9a:
57:32:a0:19:aa:40:8e:47:42:1c:cf:9b:e9:28:97:
7e:2b:3e:42:ef:7e:6b:ac:17:29:3a:33:88:d0:ad:
16:4d:0b:1d:aa:34:0f:e2:47:c3:d0:a4:6c:0f:7d:
6f:64:c5:18:0d:7c:7e:f9:5b:0b:79:c9:8a:c0:d5:
2c:09:6b:14:a4:61:96:fd:ad:7c:78:66:0b:78:62:
5b:0f:0e:00:62:1a:71:45:f9:eb:cd:0f:be:8e:66:
2d:c7:77:16:e6:28:24:74:74:97:7e:2b:89:d5:cd:
e6:cb:98:1e:87:ec:75:09:f8:54:7f:3e:6e:83:a7:
d3:d8:ef:be:0d:9e:f9:81:5a:8c:88:97:45:be:02:
7c:c8:6f:ab:f8:58:cd:bb:24:18:f8:ff:7d:31:81:
d8:38:ba:56:61:08:60:50:9a:74:fd:c2:d3:b7:78:
bb:24:d7:2b:58:53:6f:cd:75:b6:8c:d5:18:1a:3a:
66:5f:dc:7c:b5:3c:21:4a:15:ae:ee:71:cd:a0:1a:
eb:7a:61:7b:38:20:09:61:67:48:ef:f2:ee:80:b4:
62:d9:1a:2e:37:68:8f:dc:e1:f9:ee:d3:26:c1:9a:
65:0a:93:cb:fb:40:7b:fe:8e:3c:24:2a:99:05:68:
a9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C5:99:E9:E7:70:87:45:16:F7:CB:33:2D:E5:84:89:04:AF:AC:BB
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:91:43:48:13:66:01:f9:4e:38:d5:1d:0a:84:87:42:46:7b:
26:00:c0:c1:b4:fc:20:78:e8:20:e7:0a:99:46:f5:1e:35:c1:
d8:c1:9f:d8:f8:de:69:bd:76:33:3e:a2:9d:14:f9:82:8c:6f:
b5:f2:65:4a:a1:ca:f4:e6:a2:bd:cd:07:85:46:31:77:ce:59:
cb:6d:79:a6:3a:a4:a7:59:d4:d4:95:be:82:bb:5d:5e:31:24:
c2:f5:7e:fd:0e:20:34:3d:0b:67:a8:12:f2:7b:06:25:d7:fe:
ef:7a:04:b7:26:91:36:37:23:f4:c0:bf:78:79:91:a9:81:a6:
44:ee:d7:a9:fc:6d:0f:4e:68:26:26:18:5a:0d:29:d2:9b:b2:
8d:32:1a:44:5a:84:d3:68:ed:ab:28:aa:d5:ba:d3:1a:fd:ff:
a3:ae:2e:98:2f:2c:ab:6c:66:24:f0:1f:bc:75:a2:d0:bb:2b:
7d:cf:4f:99:b3:0d:86:65:e5:22:cf:de:0e:e4:27:e1:eb:d1:
4f:64:e7:de:26:c9:f6:24:1e:b2:9f:ae:1d:cf:54:e0:ba:7a:
18:e6:37:72:69:8f:50:ec:17:ca:ae:75:76:eb:97:a0:64:f0:
8c:93:97:92:86:b5:e5:f4:87:42:ad:ea:00:fd:9f:09:0a:01:
2b:30:99:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 08:12:02 2026 by rpki-client