Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
File: tiuWfFIUXmeksyBrHKSShTyg34Q.mft (raw, json)
Hash identifier: LKdSIkGE/Y7Uacu7opz8wX7VSsFmLWbBUhmuNm0F2f8=
Subject key identifier: D2:A9:F9:18:87:37:DA:E4:57:59:E1:5E:88:28:0B:55:69:A1:76:5A
Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Certificate serial: 019D390A3D534BA93F7C032F507D83BBA9AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 10:01:05 +0000
Manifest this update: Sun 29 Mar 2026 10:01:05 +0000
Manifest next update: Mon 30 Mar 2026 10:01:05 +0000
Files and hashes: 1: A6OsoYIYGh2Z_D1_x4aYKOVS478.roa (hash: R4DsSDCiEh+974EKIZS8RQ1BClrbE9cHjb1aIFSzJGw=)
2: _dnntVUjWH4EUr4UpgbEErzH-do.asa (hash: vI/4RAPzURUhd78xQi/Y6eBRsyDpScnrAtCWF0EcTGY=)
3: tiuWfFIUXmeksyBrHKSShTyg34Q.crl (hash: VHWy542upWF5JlNCK0+PF+8m1Uux1Y0rAOrNHlgood0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:3d:53:4b:a9:3f:7c:03:2f:50:7d:83:bb:a9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Validity
Not Before: Mar 29 10:01:05 2026 GMT
Not After : Mar 30 10:01:05 2026 GMT
Subject: CN=d2a9f9188737dae45759e15e88280b5569a1765a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:72:d9:dc:f6:86:d4:af:c5:ef:f1:51:4d:24:
18:66:26:74:43:4b:43:a8:83:b7:54:50:83:06:bc:
d6:48:8c:7c:0e:7a:7a:5b:44:7d:14:e8:bc:13:ca:
62:d2:85:a5:7a:45:d3:a1:9b:72:eb:fd:0b:16:eb:
91:99:3f:ca:da:01:90:fe:d3:a4:75:89:f1:92:15:
8e:3f:12:bd:1a:23:d4:f9:d0:cd:39:fe:96:01:6f:
b8:93:50:de:96:ed:8b:55:80:f6:e6:b7:72:4e:58:
bf:1f:64:76:f2:15:03:cd:84:6b:16:a1:6f:9e:5a:
b9:09:ae:7b:ff:3e:4f:61:fa:82:04:48:3c:1a:d4:
72:e9:d8:b1:70:58:c2:bf:c4:20:1d:37:b6:37:bc:
69:2f:67:6c:b6:3d:fd:7e:2f:fb:83:68:c5:7e:2c:
f8:f3:c5:df:61:0e:ba:04:4f:06:57:c2:ba:75:5f:
eb:51:e6:9c:9d:ab:b9:b9:b2:6a:60:bc:91:99:ae:
18:74:19:6a:93:7a:b1:c5:0d:f2:78:18:20:f3:f5:
9a:39:9a:c8:51:e1:ce:44:9c:71:17:e1:2e:94:08:
5d:05:1c:22:e5:9f:6b:3b:b6:e5:b6:aa:4a:cb:4d:
3e:a7:64:a8:0c:ec:0e:32:87:6f:b0:ce:b8:cf:3b:
4e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A9:F9:18:87:37:DA:E4:57:59:E1:5E:88:28:0B:55:69:A1:76:5A
X509v3 Authority Key Identifier:
keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:39:c8:08:42:40:b6:c0:23:f1:f9:d1:b4:70:e4:21:50:4c:
47:a9:28:04:be:dd:6d:41:40:6e:59:cb:36:d3:5e:18:04:a0:
24:37:0a:91:97:32:5b:9a:c5:36:7d:dc:aa:dc:d6:8f:9c:2e:
7c:85:02:db:17:82:32:9a:aa:9d:3d:b2:c2:48:22:66:65:c6:
c7:ae:45:75:a8:e4:a0:44:dd:a1:c2:4c:ef:94:58:1e:40:6f:
6a:0f:63:6f:22:31:07:d9:ec:54:88:ba:a2:8f:ea:eb:1a:72:
22:e8:cf:c9:96:dc:92:39:0b:94:1b:da:f9:59:1a:9f:c1:61:
de:f9:07:a8:79:9c:e5:7c:31:c5:bd:ef:99:b6:a1:03:f8:e4:
03:ec:e6:be:c8:d3:6f:98:e5:7b:81:c8:98:ce:92:28:ad:82:
02:4f:5a:0d:1b:e8:30:ab:79:ae:1c:06:fe:87:a9:e0:09:ee:
d2:77:39:c9:5a:64:07:50:b3:c4:9e:8b:b9:b8:3d:3f:1e:fd:
50:8c:0f:e5:b7:27:f2:b4:77:23:c1:a4:ee:89:b6:cb:ae:f9:
15:51:13:58:e4:03:ff:8a:8d:0b:0c:60:15:87:e2:01:30:ee:
52:99:88:64:82:64:de:77:47:01:0d:96:2f:ed:c1:90:e7:cb:
e6:59:5e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:09 2026 by rpki-client