
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft
File: tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft (raw, json)
Hash identifier: zT5Z9OSVYWj3Bz89EnP8F1aTXZQgTwfPxoBJIkWRisw=
Subject key identifier: 35:28:A5:32:D9:4F:53:B4:88:13:68:E5:79:54:D6:F8:C5:A2:F7:EA
Authority key identifier: B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9
Certificate issuer: /CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9
Certificate serial: 019D37F73BAF9EBC28146A34406ADD11BFED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft
Manifest number: 1743
Signing time: Sun 29 Mar 2026 05:00:42 +0000
Manifest this update: Sun 29 Mar 2026 05:00:42 +0000
Manifest next update: Mon 30 Mar 2026 05:00:42 +0000
Files and hashes: 1: 8bRTFqqfGJUx5yKlpNBGGLyfeAk.roa (hash: kImY5tJNZeZT0ukreVQs42nY/D7z0/+YDr07Sp3JI24=)
2: CN-8Pu5bXSBT4QPtIGRjyVpzJzI.roa (hash: EZji+EdR2qZINXOAD9p9aVvQwY57zPJN1GhrheBWnsE=)
3: X7XF_Z41s1mEiSn68hr2N23_Z_M.roa (hash: zX/8WHiyiWYZSBhoo5FKkI77/U7PstQ4cdjNJSn1jls=)
4: Zi6T14ALAlh6vPIVj-p6wbXoXDI.roa (hash: BX99khHc0q72Oz6YygWlNq7UO49uBQ/389b6gOKYPCM=)
5: _auQCy3k3EaDuaZ7EPCV9pV4Ih4.roa (hash: 1toHC+hcpBjFnpYLj94qlEAibL9ZGiBJ5ML7CqI3XaY=)
6: tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl (hash: IzIjQYW2+K6sjIpqzk1ZiZiE+ctURhvhHvwLLkojpx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:3b:af:9e:bc:28:14:6a:34:40:6a:dd:11:bf:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9
Validity
Not Before: Mar 29 05:00:42 2026 GMT
Not After : Mar 30 05:00:42 2026 GMT
Subject: CN=3528a532d94f53b4881368e57954d6f8c5a2f7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:63:b0:96:7b:46:2f:19:f8:8c:f5:28:50:
d8:ec:42:74:b2:09:25:d8:5e:2d:17:07:ac:c6:6d:
c5:ac:61:4b:fa:9f:93:b0:e0:ae:44:12:12:94:13:
b2:8b:d2:0a:e9:4f:2d:b8:14:a5:2a:e0:6e:59:da:
32:cc:b9:27:d2:fc:6d:8d:43:70:dc:d2:98:93:a3:
ca:78:be:dd:8c:f3:e8:f0:da:a4:3e:de:1d:36:24:
76:bd:ba:e8:40:2b:86:6b:aa:1f:2e:62:3c:5a:8e:
7a:d3:06:ab:28:b4:b4:2a:e0:ef:0e:ae:eb:ac:ed:
b9:96:76:09:76:25:2e:64:46:b5:03:f0:3d:13:80:
f4:55:63:d6:15:60:c1:6b:73:91:40:cd:7a:ca:f1:
2a:c4:eb:21:08:60:44:62:b6:b0:98:fc:04:8b:e7:
0a:59:14:e2:be:5f:8f:19:fb:16:9a:12:52:1b:ba:
98:6e:92:e0:02:39:b4:7e:2b:91:98:f4:dc:72:db:
f1:d2:82:64:45:09:e3:08:13:54:2d:f1:4f:3c:41:
d5:7e:d3:32:1e:de:4a:fc:86:1b:7b:6c:93:c0:8d:
90:f2:05:ef:41:c8:9e:a9:52:b7:1a:70:7b:8a:f6:
c8:c4:62:2f:48:6e:17:ba:8a:03:c6:8d:8b:e7:1f:
94:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:28:A5:32:D9:4F:53:B4:88:13:68:E5:79:54:D6:F8:C5:A2:F7:EA
X509v3 Authority Key Identifier:
keyid:B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f4:fa:1b:bc:e4:44:c3:b9:cf:f0:88:4c:40:f6:dd:61:df:
e7:b6:16:df:5f:9e:6c:52:34:c0:84:23:4c:4e:0f:a1:61:35:
d9:c1:70:a2:cc:c4:aa:a4:b0:11:a2:70:0c:da:1d:5b:3a:ac:
2a:03:bd:fd:5b:36:04:08:55:2c:4a:cf:93:f3:de:09:7c:4a:
7f:e2:44:b4:e5:30:9c:c8:f5:24:a3:44:ba:ff:2d:c1:c7:31:
71:ce:14:a0:5d:18:43:14:11:b0:6b:84:64:01:c8:cb:1a:03:
a6:4d:e0:a8:21:69:bd:16:6d:d8:64:bd:29:a1:37:dd:dc:5d:
30:1b:3f:4f:c4:8a:1c:ff:1a:8d:3b:7c:dc:f1:23:5a:12:e9:
4a:4e:fb:74:57:94:c0:c5:12:b5:ad:9e:b2:29:f8:40:8d:0c:
ae:8b:be:df:36:4b:0b:5a:92:4f:4e:15:b1:31:af:9d:8f:f9:
53:8a:c3:1c:02:51:14:b8:04:0a:55:d5:ac:e5:65:8d:91:5f:
93:c1:a3:7f:a4:53:9b:0b:93:d1:5e:de:2d:9a:e7:00:85:52:
c3:ab:6e:bf:77:8d:a1:a8:5b:1d:2f:01:a1:c4:c2:56:4e:16:
b9:9f:79:b2:be:20:c1:18:dc:f8:0d:40:32:72:bc:a9:fa:ee:
1f:5f:05:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:01 2026 by rpki-client