Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
File: tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft (raw, json)
Hash identifier: K8XzmDsOWXgucJ1nLDk+AFNkaTpQNJECvVPJ0ucFUE0=
Subject key identifier: 59:89:03:4E:11:CB:87:A2:93:9C:0F:5F:41:47:F6:C5:FB:3A:EE:5D
Authority key identifier: B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3
Certificate issuer: /CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3
Certificate serial: 019D38656D2FE669A69F3F74E96FBBB93B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 07:01:04 +0000
Manifest this update: Sun 29 Mar 2026 07:01:04 +0000
Manifest next update: Mon 30 Mar 2026 07:01:04 +0000
Files and hashes: 1: tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl (hash: OxKMX6t8QX9Ya4SF2JHDVO+UoHKfIRnOUP/G0B/Ff+U=)
2: yZwyp6pL6dNlodNGDiCb82xzbNo.roa (hash: LBR3tLVZPF+ibt91CHtQViRrck7hdn7NxiOMDBIBNf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:6d:2f:e6:69:a6:9f:3f:74:e9:6f:bb:b9:3b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3
Validity
Not Before: Mar 29 07:01:04 2026 GMT
Not After : Mar 30 07:01:04 2026 GMT
Subject: CN=5989034e11cb87a2939c0f5f4147f6c5fb3aee5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:2d:b9:f0:57:3c:5d:46:90:6c:00:c3:79:
2c:64:9f:1b:e0:22:b2:16:4f:b0:27:fe:83:14:cd:
4b:c7:ee:27:70:aa:38:46:e3:19:0b:93:58:f0:0d:
10:93:66:06:83:50:b4:ad:d7:cf:26:a1:c4:19:b2:
65:47:85:43:b2:59:72:05:30:72:50:df:8c:dc:3d:
61:d5:ec:95:2a:6a:30:9e:d6:5b:56:22:8f:be:7d:
07:b2:a3:77:1b:0b:3b:70:d8:6f:f5:14:02:eb:df:
4e:56:ef:fa:cf:56:2f:5e:08:68:70:0a:71:9c:24:
35:69:ef:f0:9f:84:c3:81:a0:6f:4b:12:db:5b:f6:
c3:93:e9:3f:fc:f2:97:da:10:de:bc:c4:77:2c:c9:
a5:f0:29:06:7c:69:76:9c:5a:9e:44:90:1e:0c:74:
e8:50:f5:57:d3:e6:e1:b5:f1:5c:55:bd:d7:90:d9:
50:07:b9:d1:b3:d9:df:d0:45:20:9e:65:09:f2:cf:
dd:34:5f:f3:03:99:55:40:34:cd:82:9e:27:8e:38:
f6:5d:d4:6d:8a:b5:a7:7b:24:fa:6f:71:b8:f0:62:
48:7c:e5:13:d1:7e:3c:21:d0:06:ce:50:6a:93:36:
75:df:b5:3e:72:3f:87:eb:4c:32:bc:0b:09:9e:b8:
82:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:89:03:4E:11:CB:87:A2:93:9C:0F:5F:41:47:F6:C5:FB:3A:EE:5D
X509v3 Authority Key Identifier:
keyid:B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:09:d7:90:88:14:3b:22:f7:b1:c9:74:ab:62:db:71:6f:d5:
38:fa:3e:98:5a:1f:c6:25:79:34:fd:98:5e:b7:22:4c:5c:7f:
53:2e:17:5d:7d:63:36:37:6b:b6:3c:f4:3e:c4:2d:4b:80:c7:
96:d1:3e:92:52:1c:ac:d6:7e:e7:80:cb:2b:50:46:f3:14:5e:
b9:48:9e:d8:8b:c0:3f:4f:80:c9:20:3c:50:18:42:1e:ac:96:
36:82:4c:1c:96:ae:25:3a:29:25:73:82:33:12:32:13:27:7f:
c0:8b:33:81:cc:00:22:7c:b4:b1:5d:1e:30:27:c9:c5:2f:97:
7b:c3:9d:53:28:ef:13:9c:4c:de:5e:a4:81:a2:e4:1d:86:f8:
93:b1:a5:a3:e2:87:3c:c1:ac:25:e3:d8:2a:e6:e4:3a:5c:1c:
ff:93:de:f1:b3:94:f0:b6:da:89:44:08:cf:48:17:db:94:17:
c6:e6:33:eb:14:89:99:db:fd:7f:9e:3f:cc:9c:4f:04:a9:b8:
3a:14:33:c3:25:13:29:e0:35:d3:39:f5:80:c8:5c:ee:c1:a4:
83:3c:b5:49:70:07:af:5d:12:ab:46:04:47:ff:db:d2:1b:9e:
31:bf:ea:9b:7a:4e:bd:16:2d:45:54:c2:9e:45:d5:af:67:6f:
f3:8f:d9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:43 2026 by rpki-client