Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
File: tMQeWYNNphLYPKJBlPAsptdgJEg.mft (raw, json)
Hash identifier: Fpvn+zsOvjEHiHfWgUsMhs79Sr7luSo9Pq5l3kOkU00=
Subject key identifier: A8:00:B9:27:5B:0D:02:EF:7F:A6:A2:76:02:16:8F:F1:40:95:46:4B
Authority key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
Certificate issuer: /CN=b4c41e59834da612d83ca24194f02ca6d7602448
Certificate serial: 019D3940AE130ADB067B75B3FC9B15F2E66B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
Manifest number: 06B5
Signing time: Sun 29 Mar 2026 11:00:33 +0000
Manifest this update: Sun 29 Mar 2026 11:00:33 +0000
Manifest next update: Mon 30 Mar 2026 11:00:33 +0000
Files and hashes: 1: JNBeyrY-s5eopsp59vWk83HFU5c.roa (hash: gsrDZu7NeQ1/vZ7JzsrWfUrloQVAyva35jOSVpK+lhg=)
2: tMQeWYNNphLYPKJBlPAsptdgJEg.crl (hash: Rfhe9OXYaxjfQiDdvrEi0CL7ENNPrRT6hANOEOWaLg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ae:13:0a:db:06:7b:75:b3:fc:9b:15:f2:e6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c41e59834da612d83ca24194f02ca6d7602448
Validity
Not Before: Mar 29 11:00:33 2026 GMT
Not After : Mar 30 11:00:33 2026 GMT
Subject: CN=a800b9275b0d02ef7fa6a27602168ff14095464b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0a:70:92:27:87:f6:74:c6:ac:9b:2d:70:84:
9a:39:03:b8:f5:fc:3d:e5:ae:5b:02:20:d8:e4:fc:
73:75:58:91:06:bb:7b:87:94:e6:f9:f4:16:a5:f9:
c0:cb:c3:ba:15:88:74:73:06:97:ad:01:c8:cb:42:
47:84:68:2a:ca:ad:6d:9c:76:63:13:9e:f6:1e:ff:
80:97:f0:a3:b0:e1:bf:33:42:b1:c2:e3:cc:24:14:
bb:78:4c:88:72:21:44:c2:7b:46:d9:68:63:d8:3f:
f7:5d:e1:1d:07:62:9c:c4:77:90:00:e3:b7:4d:fd:
d1:29:87:7f:a1:84:f5:70:ab:c0:9b:a6:7b:c4:df:
a5:0a:a4:bf:85:cb:b7:92:63:eb:17:45:02:b8:a9:
92:4a:ad:35:c9:bd:64:b7:5e:f3:ce:1a:c1:ac:45:
d2:b4:3a:1d:bc:ba:2f:46:65:80:d5:78:22:f6:23:
a8:53:4a:3f:d7:92:29:f7:d0:db:c7:8d:57:8b:ad:
f9:e8:95:f2:ae:e4:2c:02:1a:c8:f1:fe:4f:b6:4e:
50:e9:3c:89:cd:f7:10:22:6a:95:86:51:65:54:2a:
cd:f8:d9:90:61:4d:17:bb:eb:41:c6:80:ef:09:b6:
90:cc:c9:07:30:a0:fa:e9:38:3b:a0:8e:88:da:0d:
43:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:00:B9:27:5B:0D:02:EF:7F:A6:A2:76:02:16:8F:F1:40:95:46:4B
X509v3 Authority Key Identifier:
keyid:B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a7:d7:ff:ff:2c:3d:22:ed:de:1d:4c:76:13:71:c3:e4:ea:
30:22:88:12:cd:da:a1:c1:ac:60:bd:25:7e:2a:9d:4e:c7:ad:
2b:e4:80:91:3f:1a:e7:a3:b6:61:7b:f3:a3:d8:05:8a:88:e5:
fb:18:13:b9:db:ed:8e:b7:a7:87:ce:96:dd:3b:b9:b3:8e:42:
e5:cb:d6:0f:4d:f3:03:93:81:b6:83:39:d2:07:d1:79:dd:52:
7d:08:17:58:eb:ea:ce:48:2d:18:44:d6:c7:d7:d5:4a:6b:95:
fb:65:66:4d:b0:e1:7b:5a:12:af:52:9c:41:17:5d:bc:54:ba:
8e:cd:1b:90:61:64:d1:8a:da:40:b8:61:88:41:13:df:6e:07:
75:a4:fa:b4:35:41:61:b9:93:87:08:59:d2:b0:5d:33:e8:8a:
c4:38:89:cd:76:cb:6d:35:d6:fe:d1:62:ca:a9:cb:e3:86:a9:
80:41:28:f4:dc:0e:4e:63:51:92:1c:56:eb:34:b1:c0:8b:27:
5a:ea:9a:ca:ef:27:7f:a6:4c:4d:22:3a:15:6d:1b:ea:17:24:
de:56:4a:6d:89:b5:ca:fd:f2:6f:fb:58:d3:b3:64:23:f3:03:
b8:f7:9d:31:e5:dc:93:a2:80:c7:33:c3:b2:20:ba:f0:b3:3a:
fe:4c:3b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:23 2026 by rpki-client