Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
File: tBuxzdW4a-d4BoidLhsgKswnsiU.mft (raw, json)
Hash identifier: OprQjnY1kUv+/fbiCjwdFQ/sSh9uU1v92o5h8XMqKp0=
Subject key identifier: A7:7D:74:48:5A:5D:51:0F:90:59:A6:7D:F4:D9:83:7F:EA:49:12:50
Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
Certificate issuer: /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Certificate serial: 019D3A1CE3D1892B87B22DA01A6FF8369366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
Manifest number: 055E
Signing time: Sun 29 Mar 2026 15:01:04 +0000
Manifest this update: Sun 29 Mar 2026 15:01:04 +0000
Manifest next update: Mon 30 Mar 2026 15:01:04 +0000
Files and hashes: 1: In4EzW4PifpkipDj7qZT5AtFRqI.roa (hash: 7ol6yCYPKNd+spUojNfO6UXZVpdbeZk6ckVx301HrIA=)
2: tBuxzdW4a-d4BoidLhsgKswnsiU.crl (hash: 45BDETLB6HUNuhpPay72K4fpdqBht4HmTAPtsXYxTnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:e3:d1:89:2b:87:b2:2d:a0:1a:6f:f8:36:93:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Validity
Not Before: Mar 29 15:01:04 2026 GMT
Not After : Mar 30 15:01:04 2026 GMT
Subject: CN=a77d74485a5d510f9059a67df4d9837fea491250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:58:cc:43:8c:b5:70:d4:48:50:c0:e4:1b:
f9:9b:b2:ff:10:2e:47:b4:f4:9d:93:01:62:4a:2b:
1c:2a:02:fc:ed:dc:a0:c0:b0:a5:7e:95:56:7b:1d:
6c:b5:00:17:65:ae:0d:e3:23:49:0f:7c:a0:dc:5b:
52:4b:bd:41:e7:41:5c:bb:cb:d3:f8:85:9d:ed:08:
f2:4a:06:2f:58:c7:89:90:f2:fe:64:84:4a:45:6d:
e5:c7:dc:1d:ed:c3:02:fd:4e:20:a8:2c:7a:50:bd:
ee:1a:d3:3a:b7:5e:12:7e:02:e2:d2:38:42:88:87:
0e:b5:c8:a1:df:03:5d:93:47:c7:db:27:fe:76:15:
86:c1:bb:dd:00:81:59:24:db:be:0e:2e:9f:a1:61:
06:09:a3:3d:6b:09:c9:fb:18:1e:b1:a9:c9:b2:65:
52:58:7c:f6:78:96:80:58:0d:4e:92:42:a8:df:4e:
7c:52:dd:52:07:88:6c:d4:40:56:0a:cf:aa:3e:65:
20:57:ac:6c:8f:34:75:01:39:67:9c:50:cb:25:fd:
e3:28:33:92:c1:26:cd:ca:b6:15:99:24:dc:fa:80:
ce:c5:48:14:4f:c1:83:3c:6a:ba:8a:5b:b0:14:23:
fd:ff:7a:40:91:13:18:48:0d:ef:1b:93:67:7b:77:
b6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7D:74:48:5A:5D:51:0F:90:59:A6:7D:F4:D9:83:7F:EA:49:12:50
X509v3 Authority Key Identifier:
keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:d2:13:39:83:39:31:5f:5a:a9:fe:0e:3c:06:3b:db:5b:be:
4c:ab:09:65:cf:c3:0a:0d:df:61:0f:66:04:3e:58:d1:ff:ce:
75:f3:c2:46:06:0f:11:4a:75:2b:64:d6:33:ce:95:b7:53:e0:
99:b2:fd:ce:66:8d:92:e9:97:60:39:8d:55:ab:23:fb:9b:4a:
82:14:59:36:e1:33:2f:eb:0f:67:2a:f2:b4:64:94:a4:01:7b:
53:38:7f:3c:8e:c4:83:bd:49:bb:4e:6d:1e:86:77:21:c6:cf:
e6:ab:59:da:8e:6b:bd:88:09:99:a5:b0:2b:bb:ef:30:4b:bd:
2d:42:96:92:40:83:da:16:fc:56:c3:db:88:fd:21:f9:e1:6e:
15:83:f8:a8:e0:13:3d:6c:23:35:21:f5:3c:e7:17:e1:28:2c:
03:43:f6:0d:e4:8a:4a:ed:ca:53:98:17:24:c7:b0:a1:e8:05:
4b:e1:31:a2:4c:14:52:f1:1b:b5:d2:60:cf:8f:52:b4:60:12:
20:d5:24:df:bf:67:d8:e1:24:ce:11:52:07:a2:44:7e:ae:2a:
60:95:24:14:f6:ef:9e:a0:21:a3:eb:98:35:9c:53:4f:c2:fb:
3c:bb:7e:f6:f2:4f:5a:0e:23:da:20:8f:0f:c0:f7:d3:84:7f:
1a:78:2e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:14 2026 by rpki-client