Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft
File: tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft (raw, json)
Hash identifier: 3O5ZgpTqpdSRF7NaknwfMTWO/5tVAVUHFhzSbT36vXU=
Subject key identifier: 31:85:74:6B:77:21:CB:DB:FD:1D:98:C1:DC:A8:44:81:A9:A5:F7:36
Authority key identifier: B4:DF:C0:31:71:AD:32:54:38:0A:E5:14:43:A3:14:45:51:E3:4A:FA
Certificate issuer: /CN=b4dfc03171ad3254380ae51443a3144551e34afa
Certificate serial: 019D37C0850C277C4846B2F68CC7C3F60203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft
Manifest number: 31
Signing time: Sun 29 Mar 2026 04:00:57 +0000
Manifest this update: Sun 29 Mar 2026 04:00:57 +0000
Manifest next update: Mon 30 Mar 2026 04:00:57 +0000
Files and hashes: 1: jEu7pwg2-E1mqN2DpjSiLFBgzdU.roa (hash: TORAgDcuiUrJI3uCzvwnsqjEqpo7+K175vdEdYU+bdc=)
2: tN_AMXGtMlQ4CuUUQ6MURVHjSvo.crl (hash: siLY/YqYaqHqmaiNuIJCQYdWktTsULs33+fgQebG9i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:85:0c:27:7c:48:46:b2:f6:8c:c7:c3:f6:02:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4dfc03171ad3254380ae51443a3144551e34afa
Validity
Not Before: Mar 29 04:00:57 2026 GMT
Not After : Mar 30 04:00:57 2026 GMT
Subject: CN=3185746b7721cbdbfd1d98c1dca84481a9a5f736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:b8:28:21:83:15:88:3c:3c:03:82:05:2f:
6f:5a:b8:8c:1f:6c:8f:04:b6:17:e0:40:42:36:e5:
19:c3:a6:29:e7:b3:5c:ec:a2:67:85:95:80:7b:d9:
1b:9a:36:f1:ff:ba:95:ee:0f:72:87:8e:20:78:6d:
7f:01:13:05:e3:a7:d1:1d:79:da:0b:8c:1b:85:3e:
e0:0d:46:e6:fe:1d:a4:da:b2:eb:e1:07:e9:c7:3f:
c8:d1:94:37:91:00:84:0f:8a:7f:c8:bf:d9:14:40:
80:e2:9f:37:fd:29:92:4e:29:31:37:2c:dc:29:bd:
79:d7:05:78:77:2e:8b:4d:99:13:82:73:77:96:b4:
18:92:1e:04:04:08:b4:a3:7d:93:45:58:09:c9:d2:
fa:24:0a:a7:62:72:24:7f:22:98:9a:33:83:1c:5d:
e5:d4:6d:3c:bd:1d:97:30:72:14:cc:d3:71:fa:59:
49:e0:c0:c1:a9:42:10:18:31:95:e1:71:33:e1:7d:
0f:87:35:45:db:47:44:42:85:83:20:cb:4f:ee:67:
72:ef:99:67:e5:7a:6f:d5:ed:77:ac:f2:12:0c:3d:
cb:71:90:a7:ec:34:b9:92:58:9f:09:61:fe:6f:b4:
b7:8d:51:8c:24:31:16:16:c6:f7:99:a9:1f:7c:bc:
3a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:85:74:6B:77:21:CB:DB:FD:1D:98:C1:DC:A8:44:81:A9:A5:F7:36
X509v3 Authority Key Identifier:
keyid:B4:DF:C0:31:71:AD:32:54:38:0A:E5:14:43:A3:14:45:51:E3:4A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a9:fa:92:72:f7:50:70:25:67:b8:7e:d8:07:b0:36:e5:93:
2d:61:38:56:94:15:0e:a1:88:94:cd:1c:b4:69:df:57:92:db:
12:c8:4b:40:0d:8a:0c:67:50:7c:8f:0c:dc:a1:54:60:ad:81:
ef:36:71:68:6c:30:cb:05:e4:7a:c2:20:53:7a:eb:e3:15:aa:
32:04:e3:b2:c5:7c:f0:62:ae:7c:99:ea:f5:ac:f7:84:ab:b6:
80:5b:b4:af:8b:e4:fe:4e:a0:47:f3:88:54:d7:b3:bc:77:0d:
54:2a:8f:99:fc:dc:39:60:6b:7b:74:13:af:4c:8f:85:f6:e9:
0d:2a:c6:75:ac:cf:25:86:9e:02:eb:89:e7:3e:85:54:61:96:
6f:f6:63:24:c6:3c:df:8a:87:81:f6:8c:95:97:71:20:ce:50:
45:cd:f7:48:ba:cd:6c:f8:53:b7:f6:02:fb:f4:34:a4:a2:d0:
42:86:5d:3b:63:1c:27:78:10:06:ac:cf:8d:9e:de:42:4d:70:
08:06:2f:0e:b6:76:c3:ee:0e:3d:b7:29:e8:5a:7a:70:9f:2d:
59:f1:75:09:7a:eb:3d:25:8e:43:9a:5b:e2:3d:f9:ae:9a:43:
64:bb:62:20:e2:81:7c:64:b8:43:3a:4f:6d:63:42:77:b0:86:
48:23:fc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:10 2026 by rpki-client