Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
File: tCQBfG4cj_1jly4CRJCYR33fF98.mft (raw, json)
Hash identifier: FEVJDNIxUXx9nlVY8q5P8JCw/uDMWyTCxNf74SLCCTk=
Subject key identifier: D6:CD:C9:2D:BB:0C:C8:5C:8E:17:CB:81:1C:7E:4A:55:1F:13:97:33
Authority key identifier: B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
Certificate issuer: /CN=b424017c6e1c8ffd63972e02449098477ddf17df
Certificate serial: 019CF504F344647F782D8CC30F6C2E4C7198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
Manifest number: 37
Signing time: Mon 16 Mar 2026 05:01:08 +0000
Manifest this update: Mon 16 Mar 2026 05:01:08 +0000
Manifest next update: Tue 17 Mar 2026 05:01:08 +0000
Files and hashes: 1: Z9tAGQF9StCthIO0Pjcyl0N2xM4.roa (hash: 6AWanwgFbNvMqkMl3YCOopQDUI07IMGf93/6aV4ujtg=)
2: h2S5SOYfIdtYgW2lzny0MQ8S930.asa (hash: rCu8Reo7yVY7Fv0iiMibroZtuw9DHcD5SnkWO03YCtk=)
3: tCQBfG4cj_1jly4CRJCYR33fF98.crl (hash: UBvKPvd7E9QiIKE8eQomQgl6XF3gdY0BHQQEH+54M/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f5:04:f3:44:64:7f:78:2d:8c:c3:0f:6c:2e:4c:71:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b424017c6e1c8ffd63972e02449098477ddf17df
Validity
Not Before: Mar 16 05:01:08 2026 GMT
Not After : Mar 17 05:01:08 2026 GMT
Subject: CN=d6cdc92dbb0cc85c8e17cb811c7e4a551f139733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:07:fb:42:b2:be:ea:b1:86:d3:f2:8e:91:b2:
97:3f:1f:41:c6:db:1a:7a:58:ee:40:d6:1a:20:81:
b0:3d:c9:fe:2a:90:c0:10:8e:12:10:a6:ff:e6:f1:
16:38:5e:48:6d:c1:ec:77:eb:6e:b9:9d:ac:b6:c6:
7a:59:44:4f:62:64:84:cf:2c:88:69:39:b1:1a:fb:
6f:c3:58:1e:46:4d:45:ba:6c:13:57:90:ed:66:e0:
a4:1e:b2:4c:ad:7c:cd:e4:47:a3:63:f6:35:9c:69:
28:3b:33:91:a3:6b:b7:4f:d3:00:31:54:1b:3c:9a:
86:3f:12:b0:49:72:e0:b1:fb:c3:59:6c:1e:6c:e8:
fa:c6:b1:e3:a5:d0:85:e4:f0:f7:31:9e:9e:d8:86:
7c:ad:df:8e:9c:0c:07:00:e2:91:66:ea:ca:ed:fb:
58:62:8a:2c:b2:ab:9e:81:43:1c:33:8e:05:78:0f:
cd:59:c7:da:87:12:6a:b4:43:2d:7c:ba:ae:79:50:
14:a2:ec:d2:27:aa:67:35:e3:cf:a5:93:8b:d3:8e:
d1:84:14:53:ce:55:7f:dc:b7:62:a5:92:ab:ce:41:
03:87:69:75:41:cf:49:c4:12:63:f5:bd:35:4d:94:
5b:ff:5c:2c:aa:37:aa:d8:8f:ea:26:70:83:0f:15:
1c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CD:C9:2D:BB:0C:C8:5C:8E:17:CB:81:1C:7E:4A:55:1F:13:97:33
X509v3 Authority Key Identifier:
keyid:B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9b:a2:64:7e:70:bb:d3:95:6c:dd:b4:db:0c:8c:e6:dc:fc:
78:a4:ce:12:f0:76:da:b8:aa:84:0c:15:a5:7e:05:2d:24:13:
c9:ac:07:23:43:ff:ac:a9:e9:64:ea:54:70:65:14:c7:a6:98:
46:ae:a7:8a:37:f0:40:d1:ef:df:84:51:15:db:09:34:4d:5a:
4b:85:1b:b4:1a:58:86:f1:d7:6a:92:65:48:07:cd:99:c1:56:
06:2e:b9:1f:98:f6:40:44:76:6c:3a:45:bc:eb:8e:8f:17:bd:
67:4e:70:e5:8f:ac:79:30:00:bb:a0:65:b9:2b:9d:a7:30:8e:
09:b8:11:3c:bf:5b:64:1a:28:a9:7c:ab:6f:1c:f5:e0:a2:19:
c9:41:d8:57:b6:36:39:32:b5:3a:19:12:b4:4e:cf:25:ab:a4:
57:b9:32:97:95:d9:4d:d8:d8:6c:26:c4:52:31:98:97:b7:a0:
4a:f0:55:92:88:95:bd:d2:6e:4a:f6:5e:e3:48:eb:e4:e5:eb:
39:ae:f2:49:5d:af:03:99:d3:2e:83:51:e2:a8:ea:dc:9a:1d:
67:06:3e:74:e3:2a:88:76:ae:82:3c:8e:a2:87:77:81:1f:0a:
56:7a:42:34:ec:ed:69:dd:13:9c:46:ad:18:24:a3:d9:5d:06:
3e:3a:54:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:09:47 2026 by rpki-client