Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
File: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft (raw, json)
Hash identifier: +D83wH/0pJFnKnr2haaRkz+fLKIsyKvQkWkzg9+ztng=
Subject key identifier: 04:AC:DE:45:B9:24:54:6F:23:29:F7:31:A5:E7:CD:1F:5F:AB:EA:88
Authority key identifier: B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
Certificate issuer: /CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Certificate serial: 019CE3D9AC6F01238049F2C6272124C0F3E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
Manifest number: 1550
Signing time: Thu 12 Mar 2026 21:00:19 +0000
Manifest this update: Thu 12 Mar 2026 21:00:19 +0000
Manifest next update: Fri 13 Mar 2026 21:00:19 +0000
Files and hashes: 1: PeFK_yeJmAggBubY51FT5ExR7yY.roa (hash: kZM9hfI1X20jdNyqPobjCTSrN0qe4fcSM/JWGaBh8YA=)
2: XiIDJMPchO2MVQJnr2v3LL6-fD0.roa (hash: +0DK4fXLVL2er4TUt0Ah7Mip7BfbX2JKpUWdTlpILkM=)
3: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl (hash: M55TbSilwMwqJwdlu1d5brR69cHyuv2JXAHWAu0w/Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:d9:ac:6f:01:23:80:49:f2:c6:27:21:24:c0:f3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Validity
Not Before: Mar 12 21:00:19 2026 GMT
Not After : Mar 13 21:00:19 2026 GMT
Subject: CN=04acde45b924546f2329f731a5e7cd1f5fabea88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:78:c1:aa:94:9c:da:82:fa:7f:97:84:5c:4b:
e5:46:03:41:ba:ba:88:34:33:55:f4:29:f4:95:98:
39:2e:df:b0:5e:cd:5a:49:9e:3f:4f:a5:7d:73:c2:
a0:e0:d9:9e:dc:44:37:12:09:98:ce:8b:4f:c1:d2:
3d:6e:24:e6:3a:a3:27:a9:91:cf:d3:4a:2b:9a:53:
bf:b3:b2:4a:90:b9:f8:5f:b2:48:ac:ea:a3:27:8b:
71:31:a8:32:ec:60:0e:f0:09:5f:de:cf:f8:c1:bc:
cc:c5:2d:f3:dc:87:00:96:ae:2e:05:1d:3f:88:18:
42:3c:fc:7f:f9:15:a2:2a:c7:6e:d3:2b:e3:87:d3:
4c:f4:9f:fb:35:b3:9d:58:f7:05:e7:3e:e2:18:3d:
7c:40:4f:0c:c8:2d:96:33:f2:65:e4:15:b9:e0:66:
3e:37:8e:dc:97:5a:ab:39:05:e9:81:d8:5b:3f:8d:
d3:67:fb:59:1c:fb:53:0a:5a:38:91:6f:9c:18:1c:
7b:64:47:8f:86:a0:61:5a:34:3d:70:18:dc:92:02:
6d:7a:87:6d:56:16:60:24:a7:1d:e9:70:94:55:14:
f2:b6:47:39:10:8c:2b:e0:27:eb:d4:06:4e:1b:a2:
46:69:55:5d:38:d3:a3:af:da:00:9c:f0:b8:b2:c9:
93:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AC:DE:45:B9:24:54:6F:23:29:F7:31:A5:E7:CD:1F:5F:AB:EA:88
X509v3 Authority Key Identifier:
keyid:B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:36:3d:65:79:1a:72:ce:70:44:b9:92:01:7d:14:0c:c9:ae:
5b:07:16:29:7e:02:d8:f2:2e:63:aa:41:81:c5:36:09:cc:8f:
b4:fd:05:30:8d:1e:7c:d1:d4:4c:43:1a:ad:38:cf:f4:7e:40:
6a:00:92:de:3d:10:c0:b8:7d:7e:26:d3:5c:55:13:33:e0:f3:
56:53:fb:ed:e8:f4:bf:d5:02:87:9a:d1:c4:5a:d8:fa:eb:bb:
f5:f6:f9:4f:8e:f8:eb:be:a9:10:9b:bf:e7:96:c4:7e:dd:e3:
11:66:19:ca:9d:70:e1:13:2d:3b:4b:1a:14:ea:d2:24:2e:8a:
92:99:69:71:d7:ed:b3:3a:b2:03:89:81:48:98:d4:25:f4:23:
38:d9:6a:0c:d5:a5:15:93:f8:a4:c4:70:98:28:20:21:9e:3d:
5f:4d:34:21:62:8d:ea:9b:ce:5a:f2:24:44:47:93:1e:32:1b:
d5:f5:94:48:7a:24:2e:3f:ae:84:8b:6d:c1:4c:f2:c8:9f:50:
b5:ed:42:2e:3f:d0:f7:9d:8a:bb:b7:80:a0:6d:84:11:df:f3:
eb:12:94:6d:39:e0:8d:e4:22:29:88:62:36:a6:2e:cc:f8:f6:
e6:1c:4c:23:09:19:7b:55:c8:5a:d9:38:25:e4:71:cd:e5:87:
2e:72:d0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 23:13:14 2026 by rpki-client