Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
File: t9yTan9rpQeCJPgBc2_esNroqfs.mft (raw, json)
Hash identifier: PZo1qjVwQwN9OYDgMKJ3Ibum88086bQFgIeqaEAS2cY=
Subject key identifier: 7F:08:5E:E4:03:14:90:7D:F7:A9:38:36:3F:22:E4:03:F9:A8:E5:36
Authority key identifier: B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
Certificate issuer: /CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Certificate serial: 019D382E451363CCB39B6744529DF37D1CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 06:00:49 +0000
Manifest this update: Sun 29 Mar 2026 06:00:49 +0000
Manifest next update: Mon 30 Mar 2026 06:00:49 +0000
Files and hashes: 1: E5S268Ffch1NsUXm5XeEp1Xy-Jw.roa (hash: uZyNbiAwY6QAC7VVWqEYh3JF/qKdTnkMJgQyPmYloS4=)
2: H_uDKBlLLYWjSkRrdAcK39eeDV0.roa (hash: sLa+J14Ys0E4r0lAG5B4hthFqhO6LkphRctxzt1Vj/U=)
3: t9yTan9rpQeCJPgBc2_esNroqfs.crl (hash: yLMgPEvINRSEiL1A9gqU890BmZJnipNyvD/8vEM3Gl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:45:13:63:cc:b3:9b:67:44:52:9d:f3:7d:1c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Validity
Not Before: Mar 29 06:00:49 2026 GMT
Not After : Mar 30 06:00:49 2026 GMT
Subject: CN=7f085ee40314907df7a938363f22e403f9a8e536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5c:53:ea:5d:60:59:8d:c7:06:5e:98:20:0e:
71:31:1b:2c:f8:d7:08:18:f4:e8:ae:95:0e:e4:b4:
9f:46:e9:ef:be:10:3b:70:c5:32:80:dc:23:92:81:
d9:95:ed:c7:ab:e5:4d:ac:5a:37:d7:a1:92:28:67:
df:64:a0:d8:f9:15:61:55:b6:fa:c4:0e:78:b5:63:
92:a4:b8:58:f6:31:cc:50:91:ed:dc:9d:ee:15:0d:
46:d6:dd:df:fb:8a:cf:0b:5e:7e:73:2a:c0:9e:d3:
05:fe:a3:d9:e4:2e:79:77:7e:41:07:62:94:dc:01:
d4:54:e3:d7:bc:f3:95:f8:d6:80:61:1d:f5:e6:ba:
52:80:72:b0:d1:81:0f:37:fd:b4:23:67:5c:8d:3f:
85:14:64:a1:0e:39:36:7c:22:03:f4:9e:e7:d2:a1:
45:4a:6a:f6:25:2a:ab:be:72:65:6e:61:b3:4a:7c:
a1:aa:bc:78:29:28:f4:7d:82:22:be:53:8a:ba:a5:
10:a5:42:bb:b6:13:d4:cb:2b:82:9e:f2:07:3c:6d:
e6:12:7f:98:ca:06:46:c9:bc:5c:2e:68:0b:ab:a5:
25:cb:08:03:2f:50:d5:fc:d8:83:f9:39:09:a1:b1:
fd:2b:c0:dd:e0:16:82:6b:e5:3f:28:c8:bf:2a:ff:
8c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:08:5E:E4:03:14:90:7D:F7:A9:38:36:3F:22:E4:03:F9:A8:E5:36
X509v3 Authority Key Identifier:
keyid:B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:1b:4c:e7:dc:f5:f1:1c:df:27:d5:1c:6d:c9:7f:59:6f:cc:
da:42:db:ab:67:21:1b:2f:eb:fb:a0:d3:85:09:dc:33:57:17:
f9:fc:1c:79:3d:fd:e6:48:86:31:9a:55:d8:48:e1:8c:ea:5e:
40:66:10:00:41:b7:3c:60:c3:bd:99:53:4f:87:0c:fd:17:58:
a9:9c:89:80:fc:ab:d6:b3:67:51:c5:9f:58:c4:b4:f7:10:81:
33:47:cb:d6:90:07:67:25:a0:a1:0b:c6:4d:fa:89:b0:82:f2:
08:ff:dc:48:04:ef:10:98:29:14:4c:32:12:f4:7e:b1:43:a6:
dc:c7:e2:de:89:a3:f0:29:94:d9:6e:72:f0:1a:20:a6:5a:84:
b4:fd:fc:4f:6c:9e:43:24:e1:9b:ca:0f:74:36:d2:ad:7c:c9:
3a:42:bd:08:60:af:0a:75:76:d5:89:1a:97:e9:30:10:c7:36:
80:40:01:bb:5f:7d:57:c2:6a:09:ac:02:57:dc:f4:3c:ac:0d:
a0:cc:18:7a:f2:c3:db:f2:c8:ac:05:1e:d9:a2:76:e8:17:54:
67:ae:05:07:83:c3:13:e0:b6:0a:bc:6d:5c:e3:db:5d:7a:fa:
ef:1a:cc:ef:b7:a8:15:ef:6a:fa:98:a1:05:ac:b7:8e:da:b3:
d9:3d:f4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:08 2026 by rpki-client