Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
File: tkB0qoRJgw2psgs6-waC08Ay-f4.mft (raw, json)
Hash identifier: /31D+qtLI9eehVy0QVWdxff7zZQe2mgZfTUjQLsmn3g=
Subject key identifier: 20:1E:02:E5:71:81:18:0D:5F:54:10:85:C5:BB:3B:1C:05:DE:2D:EB
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial: 019D37F73EDCC1EDED58DDA406D2CECD1716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 05:00:43 +0000
Manifest this update: Sun 29 Mar 2026 05:00:43 +0000
Manifest next update: Mon 30 Mar 2026 05:00:43 +0000
Files and hashes: 1: fK9aO2I8AtgF0c0rdh_GX4O4_G4.roa (hash: u0RKyLKqUhdTzKSmpaGBlbuO8M5rtJXGLGs1u6N9C1g=)
2: nUmXXOPkWjccJgN8O22tzPhWVlA.roa (hash: UqKB7riKgf3jbIKMj8rldXeyuF7eaO+XqFxWCXQioCw=)
3: tkB0qoRJgw2psgs6-waC08Ay-f4.crl (hash: tSQPFENRKvCVtSoTcf0a1ue3Olq2wS97tTfa2SI3PoQ=)
4: xYSs50B2xtsvWdJxMD0UuyzwnRE.roa (hash: wUK1v8a3MmWnPSffQ5f8oxAVVqstmvh7KosqvxbaO78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:3e:dc:c1:ed:ed:58:dd:a4:06:d2:ce:cd:17:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Validity
Not Before: Mar 29 05:00:43 2026 GMT
Not After : Mar 30 05:00:43 2026 GMT
Subject: CN=201e02e57181180d5f541085c5bb3b1c05de2deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:d2:2b:df:88:7d:85:e4:af:f7:4f:e8:25:
e1:25:d6:34:66:58:b2:bf:1f:1d:70:0b:9a:9a:d5:
bb:87:93:9c:f3:9a:5d:47:df:88:86:5e:07:1b:8c:
22:40:1a:ba:d6:23:ce:33:b9:77:84:9b:08:04:60:
41:c5:00:4e:f1:95:35:6c:83:1f:65:ce:8d:70:0a:
4b:bc:b8:0f:fa:6c:37:47:28:f6:78:cf:fa:5f:18:
1d:49:38:e0:c3:3e:4c:a1:f6:3b:6c:36:98:b3:eb:
89:bd:ac:15:2b:d7:ba:8f:bd:49:00:80:1d:b9:59:
33:a7:28:6d:94:04:43:58:7d:f5:b9:0d:a3:55:b6:
88:d1:59:1e:14:16:54:7e:dc:21:a8:99:51:e9:05:
1a:bf:24:a6:35:dd:61:64:39:ff:90:12:e2:f1:b7:
67:57:63:b7:0d:9e:f7:63:ba:c1:2a:25:14:dc:e8:
0d:34:ec:e2:45:74:b6:e9:cb:a2:d5:c2:07:8a:13:
d7:83:c2:95:83:b2:4c:7a:0e:2e:f7:ed:75:a1:1e:
75:6b:e1:1a:a9:72:fa:40:3f:69:71:03:c3:5d:d1:
b4:5c:2d:7a:d7:1f:c5:cb:73:30:db:85:e8:fb:c5:
7e:bd:03:bf:e4:b8:27:6f:a5:15:70:f2:20:06:d2:
da:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1E:02:E5:71:81:18:0D:5F:54:10:85:C5:BB:3B:1C:05:DE:2D:EB
X509v3 Authority Key Identifier:
keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a9:d5:3f:3e:c0:96:82:82:53:c0:06:bc:66:94:0f:d7:15:
e0:ec:aa:44:d0:59:33:51:e4:77:3b:50:a6:e6:7b:18:a5:9a:
c3:d2:d1:ea:18:00:1c:9e:62:3e:41:e3:0b:bb:e0:b9:e9:d1:
f2:04:42:14:a0:87:b8:c9:bf:80:e9:f9:38:d6:a7:2b:1d:c3:
85:e6:e6:03:1f:9d:bd:26:74:f9:4e:cd:f3:05:c6:ba:c2:8a:
79:65:d7:a3:7a:6e:c2:22:78:7b:a5:66:e0:19:1a:89:89:fd:
44:64:c9:97:16:de:61:3e:c7:c0:4f:22:dd:6e:8f:21:09:69:
1f:a4:17:ef:69:93:16:d4:17:fe:27:55:8d:19:2d:b3:81:b5:
a5:ec:83:6f:32:66:77:b2:c6:94:a5:88:23:33:ff:66:be:fa:
0b:34:28:33:f8:f4:0b:61:33:a1:44:94:61:c5:c6:1e:c3:29:
a5:9d:c1:d5:e6:39:34:30:90:5b:87:27:27:92:81:7a:be:19:
f1:1f:c8:89:31:3a:e8:67:66:be:68:5a:b6:fe:1b:b1:23:22:
cc:c1:73:11:00:3c:1a:c8:01:9d:c8:bf:63:44:55:9f:c0:71:
bb:29:bd:47:bb:1c:2e:1f:e9:b0:e3:a6:ac:40:68:f5:ca:a3:
d5:8e:76:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:27 2026 by rpki-client