Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
File: tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft (raw, json)
Hash identifier: T3I0H3U6oCfqhPGPbFlLTLeJVSm7xkYDfm3QaK9D35Y=
Subject key identifier: 10:85:C7:BD:60:49:4F:D4:D2:68:63:45:62:AB:D1:CD:01:CF:FE:73
Authority key identifier: B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A
Certificate issuer: /CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a
Certificate serial: 019D37F6EC23CEC66025326A1E64D34ED4EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 05:00:22 +0000
Manifest this update: Sun 29 Mar 2026 05:00:22 +0000
Manifest next update: Mon 30 Mar 2026 05:00:22 +0000
Files and hashes: 1: 7S2yeHR4bFiFyxZbbPP_sYHQp2w.roa (hash: VNevD8nKtYDVh3U0iiaGr0TdZvD9DviTbw2gv5/lGDA=)
2: tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl (hash: TUWdYDfSwjg8klBTVVOdMrqf2stdctTAcBSuYeWS/bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:ec:23:ce:c6:60:25:32:6a:1e:64:d3:4e:d4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a
Validity
Not Before: Mar 29 05:00:22 2026 GMT
Not After : Mar 30 05:00:22 2026 GMT
Subject: CN=1085c7bd60494fd4d268634562abd1cd01cffe73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:84:56:eb:ed:39:1a:72:57:fe:8b:2d:ba:
25:39:9f:64:fc:53:30:33:cf:95:1c:d0:b3:51:6e:
16:3f:be:72:e0:3d:e7:61:bd:72:1f:56:dc:2c:a4:
a6:c0:b2:a2:bf:79:b0:a1:ab:86:fe:34:5a:c2:18:
c8:22:78:0f:48:a0:82:af:b8:8a:25:ea:e7:5e:d7:
5e:7f:e8:e8:3b:0e:d6:1a:41:49:c1:61:69:b5:7e:
e3:a8:f4:c3:ac:b4:28:6d:43:33:84:e9:0f:5b:fd:
7f:b6:0e:be:47:e5:cc:fa:f7:73:51:68:00:eb:70:
40:b1:85:63:96:01:41:4e:9b:3c:5a:ba:69:20:cd:
dd:ad:57:9d:ad:9a:4e:35:d6:b1:92:0a:69:66:b7:
c0:67:78:09:d7:43:88:0f:fc:d7:e1:a3:42:40:b8:
e6:b3:86:3a:65:78:80:28:05:28:96:37:e5:95:f0:
d9:10:c0:f6:6a:19:f1:aa:41:81:8d:02:a0:65:bc:
a7:53:d2:00:ca:14:aa:d5:dd:06:e6:14:05:f3:cb:
5f:57:0c:65:62:f0:5f:67:d4:b6:18:5a:01:2b:9e:
b7:16:16:32:21:ce:cd:75:07:47:7d:05:44:fe:9a:
01:b7:02:3e:1e:08:e0:84:52:db:6b:ef:86:67:a6:
6b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:85:C7:BD:60:49:4F:D4:D2:68:63:45:62:AB:D1:CD:01:CF:FE:73
X509v3 Authority Key Identifier:
keyid:B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:01:97:75:ea:ed:9c:86:b8:d0:4e:21:35:5c:1a:02:5c:4c:
6a:99:83:4a:6b:9b:a1:cb:37:cc:b5:22:31:59:72:71:a5:52:
f8:ee:4b:29:4f:83:79:83:92:7b:79:b2:ac:4b:a1:3a:a7:ef:
03:01:ac:ad:a2:de:b1:e6:5d:6c:be:7b:33:93:62:8e:c0:56:
91:93:b6:9e:ec:24:b0:04:e1:39:97:dd:a7:ce:9e:c4:6a:e8:
7f:58:82:f5:9f:3f:20:02:5e:38:d0:8f:00:8f:83:3d:83:8b:
da:bb:8c:c6:2c:16:d5:eb:80:cc:00:76:92:75:05:fb:14:be:
c1:b6:d7:e8:fe:85:b6:5d:ed:22:7c:0e:43:b1:c0:0d:10:49:
89:2e:74:ca:c0:f2:fc:5a:c5:d6:ec:a7:e6:5a:15:ff:d0:6d:
e0:f6:61:c9:da:2c:dd:a8:8c:d4:41:0f:f3:05:30:48:20:2e:
2c:5d:89:f9:76:a5:0b:8f:a8:e3:a6:27:6c:52:75:99:6e:7c:
9a:3a:a7:1f:56:79:c8:b3:22:fd:fb:da:5d:84:cc:f0:37:21:
04:55:ef:b9:a4:ef:4b:9b:e0:85:1f:c0:cd:1c:8b:d3:4f:d3:
ac:7e:89:2f:7a:df:da:2d:94:8e:f8:2b:e6:1e:42:05:34:2e:
a0:37:9a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:12 2026 by rpki-client