Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
File: tvvGPvVhSn75WhBhiOPXh1XGh7k.mft (raw, json)
Hash identifier: 8TX+EJkqdR5geOfnWCLZ+4O2XzmxJoUXzm0h3G7Jm/o=
Subject key identifier: 91:FF:1F:C2:E0:2F:1F:46:DE:45:C4:12:51:82:1A:D9:D9:55:4D:E2
Authority key identifier: B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
Certificate issuer: /CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Certificate serial: 019D37F73D351CEE8A2F7BEE2A1B4D9EDB36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 05:00:42 +0000
Manifest this update: Sun 29 Mar 2026 05:00:42 +0000
Manifest next update: Mon 30 Mar 2026 05:00:42 +0000
Files and hashes: 1: bxb4jsQXnflWYRNxaHtGts6L3fo.roa (hash: hSfRMw5uEppXFydIGGQoR0g6l6WPyrzH4kiqrfSt7O4=)
2: iMImZ1JXlWfmPfxyuu455VKKHUc.roa (hash: 038Ca8EqNUCh1s0mKXCCjtHKnbOn58ESpskQQmfAtRQ=)
3: tvvGPvVhSn75WhBhiOPXh1XGh7k.crl (hash: dODn9sDUmlxnkwgbo3KQynR7teWl+vERta5wuU0XNYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:3d:35:1c:ee:8a:2f:7b:ee:2a:1b:4d:9e:db:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Validity
Not Before: Mar 29 05:00:42 2026 GMT
Not After : Mar 30 05:00:42 2026 GMT
Subject: CN=91ff1fc2e02f1f46de45c41251821ad9d9554de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2f:aa:73:fa:0d:48:51:73:bc:50:c3:4b:f2:
53:1b:2b:ce:22:ff:a5:e7:07:42:7d:50:7e:f9:8a:
8e:cd:67:b9:b6:5b:4a:eb:32:2a:ad:f1:ef:a7:ec:
ad:5b:20:55:c8:e7:4d:fa:be:9e:d8:a7:10:82:bd:
57:b1:c4:93:da:40:17:55:48:0a:a1:3b:6a:d7:e4:
84:df:9a:64:72:cd:3b:58:32:13:80:7a:b0:24:e4:
a2:3d:38:b6:c4:be:55:d0:94:fa:11:5c:92:81:8e:
dd:df:c3:f4:2b:05:81:b9:b0:62:ba:0d:5f:5a:25:
16:7b:91:62:87:28:7c:e7:b2:bc:48:8b:bf:9b:2a:
7e:f3:cc:3b:f4:e7:0d:5c:6d:2e:0f:1c:0d:64:61:
03:54:bc:b3:62:a3:6a:03:61:c1:2c:20:24:7f:0a:
38:0e:27:6a:d4:d6:eb:51:a4:e3:21:25:49:e5:8d:
78:ae:eb:be:ff:73:0e:68:01:66:77:d6:3f:25:a5:
3e:af:bd:d5:ea:22:62:db:79:ec:48:f9:70:13:ae:
08:c7:e7:0f:22:0d:fd:44:0c:85:c0:81:cf:99:69:
9d:8d:2b:5b:7d:9a:6e:35:e8:03:5f:bf:69:55:f5:
da:39:59:fe:a8:e2:75:69:09:15:1b:dd:ed:4d:89:
7c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FF:1F:C2:E0:2F:1F:46:DE:45:C4:12:51:82:1A:D9:D9:55:4D:E2
X509v3 Authority Key Identifier:
keyid:B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e0:d0:ce:21:dd:1f:b2:6b:36:da:d5:ae:40:7f:74:6e:36:
67:8e:dc:f0:56:84:cb:06:46:de:bb:cf:e8:c4:4d:ff:7c:90:
ed:45:3b:82:8d:30:4f:92:1b:93:38:1d:fb:31:2d:48:ff:cc:
0f:b1:86:06:65:14:4a:31:31:4f:c8:a6:89:7f:10:e7:a0:a1:
c3:b7:f3:b3:42:62:b2:35:01:1a:a8:61:99:91:bd:ae:37:f9:
35:a0:7e:fa:88:ba:56:25:48:d9:13:1f:7c:97:a7:8c:c6:8c:
88:e1:9d:7f:53:e6:86:e0:ab:34:5d:a7:39:3b:26:bd:56:28:
c8:55:e5:46:9c:cb:e9:88:4a:cf:3e:1f:09:a0:50:3d:6b:d5:
08:aa:4c:c5:68:9d:6b:7d:a3:de:3f:85:7c:c4:60:aa:1d:44:
f0:de:d5:1f:a2:ff:01:db:a3:de:8e:26:52:be:e1:eb:81:16:
46:f2:16:7c:4e:58:ee:d9:fb:57:0b:be:9e:3d:d1:fb:55:1a:
d3:f3:72:38:a0:32:a8:1f:57:ad:f1:cf:ef:19:1b:93:c0:dc:
94:94:a9:69:7e:93:22:36:a0:93:88:18:5f:a1:a5:6d:af:3d:
cd:d3:b3:68:4a:27:f8:56:54:d0:d7:81:de:24:2d:be:76:4f:
8c:8f:2d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:21 2026 by rpki-client