Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
File: tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json)
Hash identifier: Ubdbc8oYrSZn3naVjxX6AytPcBVkMY0/mJVEyIQ/fAo=
Subject key identifier: 90:AB:C5:3C:36:3A:14:8C:A9:35:95:94:8D:89:A2:62:BE:5F:30:90
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial: 019D38D308F2B62A008DBB0F0BAF8006DEB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
Manifest number: 149B
Signing time: Sun 29 Mar 2026 09:00:47 +0000
Manifest this update: Sun 29 Mar 2026 09:00:47 +0000
Manifest next update: Mon 30 Mar 2026 09:00:47 +0000
Files and hashes: 1: 07tUw4jtD4mf_hWsatPxJ_MIHL8.roa (hash: QrwrQX4QZucxWYaBIBlKAIfP7PxcTKwh9rMlp5A3Hx0=)
2: 1-QtHxqhDRc8Ad39doS8rj57e8O8.roa (hash: lx29AojPlQO1dFNnHX1vGuPHztiqJFCtnNtbhP7mv1A=)
3: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: uy/yZ0eM4MD6A/s/nxVnV5uFE+uZNuto997tbo39O08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:08:f2:b6:2a:00:8d:bb:0f:0b:af:80:06:de:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
Validity
Not Before: Mar 29 09:00:47 2026 GMT
Not After : Mar 30 09:00:47 2026 GMT
Subject: CN=90abc53c363a148ca93595948d89a262be5f3090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:99:4b:92:a1:5a:c3:ed:21:45:ca:1e:c1:
6a:86:95:c9:9a:1b:b6:f0:18:ec:0e:84:3c:b4:c4:
e5:36:e6:55:35:49:ef:43:c1:f0:53:42:9a:95:8c:
d9:d2:03:cb:d8:ba:99:27:2a:2a:12:f7:67:9f:f8:
17:ab:2f:ba:06:27:72:e1:01:d3:79:c8:f3:3d:80:
4b:53:3c:29:08:ea:e2:35:88:f7:e0:d8:53:2f:01:
7f:61:c6:ab:37:4e:b3:bc:8d:2a:93:2d:a7:b8:63:
3a:6b:b1:0f:39:ca:8d:3c:65:7d:06:a0:54:b0:60:
bf:a0:f2:68:8f:06:d3:7b:4e:5d:62:a4:5d:d1:ed:
f5:96:e8:75:cb:16:cb:c4:f8:8f:b3:2b:0e:2a:79:
95:5f:6b:9c:c7:96:d0:08:ef:fb:84:32:7e:a7:64:
1a:10:0c:d9:22:67:6f:63:44:57:0a:d2:9e:b0:32:
e6:de:89:82:e0:0c:57:28:e2:c5:0b:0a:f6:60:2a:
a1:ad:10:e2:db:99:3f:f8:6b:20:d0:4d:52:c4:86:
0d:f8:e0:49:2e:d8:2c:32:56:fa:a3:06:55:7d:1d:
55:89:c0:4b:4c:af:eb:a3:2e:3e:f2:04:ef:84:63:
6f:37:67:aa:10:99:eb:e6:e1:15:56:24:b9:7d:20:
63:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AB:C5:3C:36:3A:14:8C:A9:35:95:94:8D:89:A2:62:BE:5F:30:90
X509v3 Authority Key Identifier:
keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:9b:84:4e:a6:58:c1:a2:6a:a9:e3:e7:a0:29:fd:58:f0:8f:
48:6e:70:88:66:06:57:3b:bd:c2:03:b9:7c:05:5f:75:db:a9:
05:af:fd:e2:5f:6f:d8:a3:29:59:47:2c:c3:3d:1b:cb:4a:7c:
80:33:33:5c:d5:3d:95:9c:c6:a6:27:fd:16:21:84:6c:5e:a7:
8a:4d:b3:e3:1f:a5:f0:54:37:6f:5c:fc:74:39:f8:8e:a6:b5:
48:61:2b:53:87:5a:fa:a3:b4:2f:ad:88:6a:a0:80:b0:8d:05:
db:02:1e:94:05:42:33:bd:52:3c:b6:12:29:0e:e4:e2:36:10:
6c:31:b0:5c:a8:76:52:16:9e:34:ce:2e:29:54:2b:46:19:39:
da:04:f0:f9:e6:84:ea:0c:84:80:ae:73:d3:61:56:f3:fa:70:
d0:e8:0b:97:64:e3:f8:02:d4:e2:ee:01:75:c3:b3:24:5c:12:
5b:54:0c:de:00:5e:aa:ec:03:f6:94:fc:19:a2:dc:40:29:ef:
40:fd:15:fa:d3:62:f7:2c:07:61:55:7f:9f:f0:d4:b2:18:9f:
4f:86:c1:59:41:1c:79:c2:b4:cf:9d:f2:40:3c:0f:42:f5:79:
61:8b:37:95:62:58:40:f8:e6:f2:b0:f7:ac:6e:e8:a2:0c:c5:
8e:a2:08:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:36 2026 by rpki-client