Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
File: t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft (raw, json)
Hash identifier: zWFTXhHt1Wg23RAmgDVivQt9zrkmrMEsxFBMqXv0YoE=
Subject key identifier: 8F:CB:7D:50:CE:06:9D:C6:27:F1:60:C6:C4:9B:38:0D:3E:B0:35:07
Authority key identifier: B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
Certificate issuer: /CN=b754b22c5540508d9629a311ef1e83543657c4ee
Certificate serial: 019CE7EE4F7D17772A9B0079FF148DEA52B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
Manifest number: 0376
Signing time: Fri 13 Mar 2026 16:01:20 +0000
Manifest this update: Fri 13 Mar 2026 16:01:20 +0000
Manifest next update: Sat 14 Mar 2026 16:01:20 +0000
Files and hashes: 1: 1LsBmA-SbOfGa2eleJLL4F-PoS0.roa (hash: fOsQjw7Bt8zL6Bscj5Hp28N4r7Zpof4N2iXErdaa6yA=)
2: t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl (hash: 4PGDzAJOYH+IJSIP19ucmZCpB97VYy0Sp3OO2/wK51g=)
3: yUSfqsPPl1YTQhIE73fMTmMnfkE.roa (hash: yAZHs4HcwBg1li8wEtRge9Bo9Q1pztQUu5urOyY+7Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 16:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:ee:4f:7d:17:77:2a:9b:00:79:ff:14:8d:ea:52:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754b22c5540508d9629a311ef1e83543657c4ee
Validity
Not Before: Mar 13 16:01:20 2026 GMT
Not After : Mar 14 16:01:20 2026 GMT
Subject: CN=8fcb7d50ce069dc627f160c6c49b380d3eb03507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:25:a6:1a:25:da:5b:00:7a:85:c1:74:b6:8e:
3c:28:61:77:a3:ce:fa:fc:2c:97:d8:d0:32:99:d1:
d4:d1:16:64:57:ed:3c:7b:34:c4:73:68:a4:21:59:
68:a4:7c:9e:5e:4c:91:92:6c:10:54:00:69:92:5c:
f2:70:c9:55:f7:be:11:77:7d:f2:11:34:95:15:9a:
80:be:f6:4d:46:f2:4a:1d:5d:e7:db:ae:cf:49:33:
a1:07:76:60:6d:6d:a5:c4:20:07:7d:0a:49:3c:60:
5b:90:95:95:7f:7a:eb:2f:53:0f:3a:62:e1:3d:7f:
e8:6e:26:63:52:39:36:74:3e:11:e7:99:d1:46:54:
d7:7b:c5:21:14:90:bd:62:da:d6:43:da:b6:ac:2f:
8e:0d:48:a7:ef:9d:9e:bc:0a:3d:5b:eb:54:06:3b:
06:ca:3e:6e:25:5f:a5:c2:89:98:ec:2c:44:38:a9:
40:a7:e2:e1:43:40:f1:c9:94:c5:1c:21:eb:04:80:
85:30:e1:41:33:ff:7d:05:b9:dc:fe:30:55:c7:e8:
8f:35:30:c4:7d:c4:17:7f:4e:d8:ae:60:38:5d:27:
bd:23:5d:ac:eb:14:6b:be:6d:ef:ed:6e:4d:32:2f:
ba:c2:4c:ef:8a:14:04:86:1a:02:0e:cd:77:4a:a2:
c7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CB:7D:50:CE:06:9D:C6:27:F1:60:C6:C4:9B:38:0D:3E:B0:35:07
X509v3 Authority Key Identifier:
keyid:B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:db:cb:cf:47:69:40:01:b8:23:44:6b:49:3b:13:48:91:70:
32:07:e2:7c:53:66:9e:69:c2:8b:19:82:42:c4:f0:80:96:ca:
f3:73:30:a4:62:54:a8:3e:c7:09:14:9f:67:9a:11:30:31:a0:
8c:8a:67:0b:c5:6a:b8:e0:5a:25:2e:09:f3:38:97:e7:2b:0f:
e8:ab:7e:28:bb:32:6d:f0:31:56:fa:95:b3:10:72:0e:78:df:
79:e4:30:79:90:99:cb:a1:e3:57:ad:c3:5e:08:e8:1a:aa:a1:
c4:27:c1:c2:ea:92:77:d9:c7:0c:fc:1c:5c:a9:e3:57:6e:77:
34:f1:b9:8c:49:c9:cb:fb:82:32:f4:86:b7:cd:ef:2e:d5:e6:
1b:82:9e:a2:f0:5f:57:7f:65:fd:71:8a:62:77:d0:36:1f:36:
3a:26:66:5a:54:c5:74:65:9c:09:87:54:35:f6:d7:fd:5f:fb:
37:1a:13:76:1d:64:3e:a6:af:a6:84:f4:1b:0a:9d:b1:38:ee:
dd:c9:6e:c3:02:fb:e5:12:e3:bc:f6:d3:27:d7:8b:4c:67:ba:
5f:7b:41:49:6f:fd:e3:c5:0c:38:35:9d:da:7b:98:cb:ed:34:
f8:2c:0f:de:9f:c2:a4:50:53:ca:be:f3:19:74:2c:36:c2:07:
58:80:bb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 21:05:35 2026 by rpki-client