Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
File: tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json)
Hash identifier: rfO81tienl93MqFhYuGA3tEE00q8lmPmA3losVcLzCQ=
Subject key identifier: A8:3B:30:11:AF:04:5E:E3:03:F0:1A:42:BE:78:97:B0:4C:E7:5F:0E
Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
Certificate issuer: /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Certificate serial: 019CF46002D0E3303C2B5622F86270156140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
Manifest number: 186B
Signing time: Mon 16 Mar 2026 02:00:58 +0000
Manifest this update: Mon 16 Mar 2026 02:00:58 +0000
Manifest next update: Tue 17 Mar 2026 02:00:58 +0000
Files and hashes: 1: bXgR8m5zIy_GMOS_a3seOOEoPYQ.roa (hash: dQET79lWM3bPQ1IRR0iZoVaViZjUeP97gYh31kK/K0E=)
2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: /MCfDcgjun4k3BGzcqL94YP6XaF8N+opx5cohK8ZIf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f4:60:02:d0:e3:30:3c:2b:56:22:f8:62:70:15:61:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Validity
Not Before: Mar 16 02:00:58 2026 GMT
Not After : Mar 17 02:00:58 2026 GMT
Subject: CN=a83b3011af045ee303f01a42be7897b04ce75f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:3e:1f:3d:40:11:96:f9:c6:d1:fa:15:7c:
be:91:43:e1:3b:88:46:93:9e:2a:5a:0f:90:39:2c:
05:af:8c:42:37:03:5e:e3:17:90:64:b6:71:18:d0:
bc:f8:66:4c:fb:c3:ad:b1:58:2b:14:99:34:58:bc:
74:71:47:6f:54:8b:6a:3a:5b:6d:bc:d7:b0:a0:1e:
e5:ef:cd:3e:c5:5e:a6:77:64:7d:26:b1:9c:6b:7f:
6f:d6:ab:93:eb:4f:01:b2:12:83:06:3e:b7:f8:e4:
85:16:75:8f:3e:94:07:f4:69:24:80:60:e6:62:ba:
70:74:8f:1f:0a:32:d8:f5:98:30:f9:ba:39:46:c2:
c5:4b:40:49:36:9c:7c:ae:72:96:85:6d:85:de:e4:
d2:50:a5:55:0f:8b:b8:6f:2e:6c:0a:b5:b4:a5:48:
53:dc:3c:43:c5:cd:5f:1a:b1:21:bb:f9:eb:dc:2b:
7c:78:01:d5:3a:d2:e9:ec:30:b0:77:3c:6f:f6:b4:
74:01:c1:42:c3:e9:ba:06:75:f2:14:e7:95:12:3f:
77:91:4d:9d:6d:4e:e1:02:97:1c:bd:79:8a:b8:5d:
54:61:a8:c0:fc:89:02:a0:0e:f1:2f:0f:8b:6d:60:
e5:26:9c:80:24:d4:fd:56:0a:09:0d:03:67:e1:8c:
b9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3B:30:11:AF:04:5E:E3:03:F0:1A:42:BE:78:97:B0:4C:E7:5F:0E
X509v3 Authority Key Identifier:
keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c0:f7:4a:9c:24:96:72:a2:c2:b7:93:a7:ad:98:ee:a2:e0:
f4:7a:c5:d1:ad:44:f0:4b:47:10:bc:a7:b8:6e:4b:57:0b:d0:
36:60:28:18:59:c2:41:cf:21:78:ad:35:fb:30:af:3b:e9:d9:
93:f3:9f:f2:09:6e:14:f5:01:a7:2f:8b:0a:a9:3c:b4:52:32:
2b:39:c9:9f:8c:97:60:fe:28:d5:bb:aa:f7:e0:cf:08:8c:8f:
ba:bc:94:1b:0a:c2:1f:38:85:05:1e:b3:cd:16:85:11:a4:5f:
f6:7e:61:e3:bc:72:2d:25:43:2f:6e:e6:31:4f:4b:5f:af:1f:
b3:e2:78:49:4e:a3:cc:3d:5d:be:37:de:8e:42:1a:91:35:37:
be:f9:0b:95:77:64:c4:cb:b3:5b:77:86:22:99:aa:18:29:c3:
2b:21:10:bc:41:8b:17:32:42:68:aa:36:ad:9a:dc:18:b9:e0:
3b:10:d8:2d:15:62:21:30:5c:fa:20:c1:12:9a:e2:a9:51:22:
33:52:72:0f:c8:ae:cb:21:34:8b:0c:e1:69:ba:f9:8a:d6:0e:
80:18:cf:23:77:93:29:cb:87:c3:c5:e7:62:bb:f0:71:76:95:
2e:f0:b9:38:45:e6:d9:cc:01:aa:01:6f:02:c7:5a:c7:4f:97:
8e:a9:3f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 09:33:13 2026 by rpki-client