Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier: jU8/1lHxehmuFtnXMUqiBgIzFJJKE694MMlElVWj+TM=
Subject key identifier: C6:2C:99:2E:8A:49:8E:D8:F4:13:55:C7:FA:23:9D:F6:EE:A2:6B:2B
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 019CBEF22952AAD8F2F447170D94EB7507C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number: 1854
Signing time: Thu 05 Mar 2026 17:01:07 +0000
Manifest this update: Thu 05 Mar 2026 17:01:07 +0000
Manifest next update: Fri 06 Mar 2026 17:01:07 +0000
Files and hashes: 1: b7WIoLNUFyReyBs5srL2P-7kWBY.roa (hash: KaUmjHHJdwqwRidv+DylDRGHxrEDsHhrz5N8o1v6ikI=)
2: qA1FSgo8W2WfbgMfxgehUTGINhY.roa (hash: QlYJVn46F259ZKkX99iXU3ryDNDtJ4SF3Ih4Ss1i1sM=)
3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: /jZl7cxkhs4rZeAfIMJqBam/a5exPrqf6HybT/dwjhk=)
4: w1rSq9HiUPdlBfnJQU20TUnkDtc.roa (hash: e/N9+4KOJLWpyk5b2EmLTnk1UrTHENrYm4rgBBrmxPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:f2:29:52:aa:d8:f2:f4:47:17:0d:94:eb:75:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Mar 5 17:01:07 2026 GMT
Not After : Mar 6 17:01:07 2026 GMT
Subject: CN=c62c992e8a498ed8f41355c7fa239df6eea26b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c7:dc:0e:e3:6a:e3:e5:af:cc:d9:7e:e6:e8:
34:89:45:55:aa:9b:8f:c0:c2:37:80:f9:b4:b9:ac:
30:43:44:3c:37:f2:74:d8:12:db:4c:e1:f1:ea:db:
cb:5d:3b:f6:a8:9b:98:18:a5:04:dc:94:1f:78:22:
20:d3:7e:73:54:18:40:8c:ba:77:49:4c:42:07:17:
f6:00:70:3e:11:ee:ae:ce:9e:8a:d5:1e:3d:32:19:
30:0a:27:d5:22:b3:27:1d:56:f8:b0:3b:c9:a4:27:
a4:a3:89:2f:8f:f2:b4:e3:2f:06:fc:d4:0a:2e:92:
f9:11:5a:67:3d:24:00:26:bc:72:d4:1a:a3:02:8f:
47:18:68:d1:63:76:6e:c8:60:9d:4e:ae:5b:4b:6d:
e5:4a:99:4b:92:c8:f3:0b:50:45:24:cb:41:02:25:
1d:67:92:2e:da:e5:b8:de:01:dd:2f:00:4c:a5:0b:
53:6f:80:b3:41:4c:53:ad:8f:6c:9e:ef:a0:9b:6d:
86:d3:d7:1a:33:8f:db:db:59:63:cf:a9:01:96:4a:
c0:e3:c2:12:5d:41:38:91:bb:d8:0c:f4:4f:85:02:
6d:24:ca:7c:16:06:92:12:ae:5a:c7:a7:da:7c:ff:
ad:93:76:67:83:c1:51:76:76:df:c6:af:80:82:13:
f3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2C:99:2E:8A:49:8E:D8:F4:13:55:C7:FA:23:9D:F6:EE:A2:6B:2B
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a6:33:1b:6d:8c:c5:9d:aa:d3:15:df:4c:42:5e:7d:fc:49:
dc:fa:7d:21:4f:73:59:6d:b6:49:4c:bb:9a:3a:19:7f:b6:d8:
06:7a:17:05:b1:77:58:0a:c3:e3:51:3c:4f:3f:e3:6d:0b:49:
33:b5:e1:a3:a4:42:7c:c6:f5:d0:fc:42:16:f8:45:3d:ae:cd:
73:71:81:e7:93:0b:66:5a:85:08:08:da:1b:c6:86:f1:b5:84:
00:9c:4f:15:b5:93:88:b7:a4:a7:4a:82:f0:f6:04:33:43:0f:
f7:10:3f:23:2c:cc:24:0d:32:a3:a5:22:c8:9d:01:e7:85:8a:
e9:8a:b7:db:8b:98:1b:27:71:14:ca:fb:58:73:1f:eb:7f:2e:
02:a2:f3:e8:28:f3:74:8e:f8:51:69:48:8f:13:67:f5:5b:39:
92:bc:fd:3d:c2:1d:ee:c0:93:2a:2b:b6:5b:3f:0b:13:64:7f:
8b:d6:6a:f4:e9:94:eb:86:e9:a6:36:1f:e4:55:d6:70:a5:d4:
d4:a7:83:df:6f:a7:20:6b:0e:ca:72:38:34:c8:55:64:0e:be:
87:8c:6b:04:01:0d:e2:25:14:db:0b:3a:f5:32:7f:09:12:57:
52:2c:4d:a4:03:51:28:92:13:95:b3:d7:d7:ef:9f:38:7a:06:
00:85:02:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:51:26 2026 by rpki-client