Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
File: tTZGbQNoUuL3N2reE4BGFDuZTMM.mft (raw, json)
Hash identifier: Vk511+AiqVd+c3PvLwm15XQShcEZ6celzG6Lp+DVwyg=
Subject key identifier: 66:3D:D5:B1:6A:51:F3:9F:10:93:F2:5B:E4:24:1E:3A:83:D7:C3:D7
Authority key identifier: B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3
Certificate issuer: /CN=b536466d036852e2f7376ade138046143b994cc3
Certificate serial: 019D38D2C8335ADA56557674C41F6AE14F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:30 +0000
Manifest this update: Sun 29 Mar 2026 09:00:30 +0000
Manifest next update: Mon 30 Mar 2026 09:00:30 +0000
Files and hashes: 1: jvm0Jb2t-rhkSp6peUmj4YlckCw.roa (hash: HiAafUtSRh0L7KEZV70WFw7qC8V7XryLQINqzFQNUHA=)
2: tTZGbQNoUuL3N2reE4BGFDuZTMM.crl (hash: FvppzAB3gSaJUEhMnFfHNav7nTBlShGzalmQQ5nPAYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c8:33:5a:da:56:55:76:74:c4:1f:6a:e1:4f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b536466d036852e2f7376ade138046143b994cc3
Validity
Not Before: Mar 29 09:00:30 2026 GMT
Not After : Mar 30 09:00:30 2026 GMT
Subject: CN=663dd5b16a51f39f1093f25be4241e3a83d7c3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:88:31:9e:2b:7b:0f:00:1d:d3:d0:4e:49:
20:82:65:07:38:6c:e9:aa:8b:2f:dc:82:6a:8d:04:
b0:71:1b:10:8c:37:93:17:df:cb:64:70:e3:44:f5:
c2:9f:54:61:f5:bb:44:07:e8:f4:c8:08:b0:5f:98:
63:c4:5b:04:fc:4c:8c:fd:cb:4c:83:29:2b:af:43:
de:ae:19:40:28:56:b3:67:d0:cb:35:60:1e:9e:10:
b0:03:58:6f:93:86:0d:81:4b:ca:1f:8a:02:a4:6c:
50:1f:91:54:2b:4c:18:ea:51:18:1e:ee:55:31:5b:
c6:91:38:1b:2d:c8:13:9d:94:c2:ce:f6:5b:3b:be:
53:13:36:52:37:6b:d0:bd:b0:39:d6:c7:fd:1b:f7:
00:e1:f0:fb:7e:4a:90:2c:d0:08:d2:ce:b6:82:ff:
02:da:ce:43:9e:3f:25:ec:b5:da:63:68:a1:e5:db:
66:4e:a4:97:80:8f:8f:92:23:d8:cf:9a:2d:be:d3:
5a:fd:06:39:32:e0:ce:71:13:3b:03:db:01:1c:94:
49:8f:91:0c:a0:9f:03:64:90:47:c0:ca:22:85:a1:
9c:48:87:6d:87:4e:c2:25:2f:cc:bd:ca:20:90:4e:
15:fd:d4:af:12:47:b2:95:45:03:f7:4e:03:db:9c:
0c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3D:D5:B1:6A:51:F3:9F:10:93:F2:5B:E4:24:1E:3A:83:D7:C3:D7
X509v3 Authority Key Identifier:
keyid:B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6f:37:23:d6:84:4c:3a:a7:c7:49:a4:e3:d7:4f:3c:34:41:
0b:96:6f:52:c2:87:bc:06:00:e4:4d:bd:93:a0:a0:b8:8d:69:
00:97:d6:da:f4:4f:10:74:85:21:46:09:dd:e4:7f:9b:b6:d9:
6a:1d:9a:50:59:02:31:bf:4e:c0:03:c9:d6:42:48:54:aa:eb:
32:0f:74:2b:53:4e:4f:25:ca:6e:b7:1c:56:09:67:9e:28:51:
36:c5:bf:e9:70:10:50:c7:4c:bf:65:b4:49:a9:fb:57:f0:67:
2b:a0:99:68:f0:09:0c:71:71:2d:af:8d:d5:4b:23:0f:a3:e0:
3a:0e:68:da:51:60:e7:32:4c:40:83:c7:2e:1b:50:76:ba:e7:
92:8a:5d:e7:d6:bb:a3:38:26:bc:c6:4a:6f:47:d0:e7:3b:ff:
c2:d1:23:9b:df:78:0f:f3:2d:85:cd:2a:89:4a:4e:c2:ed:5e:
85:46:a2:c0:67:5f:f3:58:d6:d5:4b:42:b0:61:67:34:67:83:
92:02:77:70:31:7b:8b:f1:26:ff:37:ae:67:bd:90:74:35:5a:
bb:7d:db:0c:e4:4d:a7:86:f7:f8:f0:ba:75:69:49:1f:a0:27:
5e:27:e5:1c:e0:96:e8:2c:f3:12:ec:58:4c:ed:ff:06:c8:60:
16:a6:da:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:03 2026 by rpki-client