Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
File: tGasCkklUoPNUwZpcc17Pf4qPOg.mft (raw, json)
Hash identifier: /nN/mO8spAFI6yoFKrq9nS0HX0izyKyGXBpTUAuGFUY=
Subject key identifier: B1:B1:23:2B:BF:A5:A7:AF:35:F5:8F:AD:AF:20:EC:AC:4B:6A:80:49
Authority key identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
Certificate issuer: /CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Certificate serial: 019CE893444C39E166F5D447AE7AFD2F00C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
Manifest number: 17B1
Signing time: Fri 13 Mar 2026 19:01:31 +0000
Manifest this update: Fri 13 Mar 2026 19:01:31 +0000
Manifest next update: Sat 14 Mar 2026 19:01:31 +0000
Files and hashes: 1: tGasCkklUoPNUwZpcc17Pf4qPOg.crl (hash: StFJZtRCv6Qp6pcv7FYZRJWcj1VctakoZv5e3wigBIY=)
2: wb6Alx2jI_wyy2l0j2ScP2iF5LA.roa (hash: ARjWpiCOD9NdvmXB4t9x9aVktqPhjrZ66+Av5qsEbOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:93:44:4c:39:e1:66:f5:d4:47:ae:7a:fd:2f:00:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Validity
Not Before: Mar 13 19:01:31 2026 GMT
Not After : Mar 14 19:01:31 2026 GMT
Subject: CN=b1b1232bbfa5a7af35f58fadaf20ecac4b6a8049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:47:96:33:0b:51:61:59:fa:6c:4b:f9:05:
8a:fb:21:fe:c5:de:f3:c7:4e:ed:4b:b9:aa:27:c2:
ec:c8:22:57:13:03:6c:7c:81:34:da:28:73:2f:51:
9e:0c:a3:30:d9:59:e2:0c:3a:a3:eb:1a:c3:c1:43:
ef:6d:28:1f:ef:81:00:c5:bd:0c:a3:1d:3c:78:d4:
4c:27:7a:82:9c:a2:8d:98:64:e0:3f:c0:b4:3c:8b:
db:35:57:fb:56:27:75:63:07:7d:94:8a:be:c9:5d:
2d:d1:73:ba:3c:8e:8d:89:e2:cb:80:10:17:e6:67:
b8:bc:b9:0c:01:88:e8:0f:45:04:75:95:2d:b8:ec:
ad:db:64:b4:f0:5d:2f:42:ae:61:ee:d8:32:b7:43:
e9:4a:87:d1:0c:2c:9c:34:bb:ad:50:b4:12:2a:df:
60:b3:1b:0c:f3:10:dd:84:81:ff:bf:32:3c:76:68:
61:a2:b7:d7:5f:5d:79:4b:a1:44:a1:21:cb:0c:fd:
ec:a1:96:54:94:cf:c5:52:20:c6:fc:bb:87:6c:c9:
d2:8a:16:97:0f:54:6f:b6:5c:fc:f5:cf:96:97:d9:
12:ba:67:c2:e9:5b:ea:60:0e:9b:55:a8:22:6e:52:
75:ff:26:7f:c0:a3:e9:56:e7:e1:f4:98:be:70:06:
f9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B1:23:2B:BF:A5:A7:AF:35:F5:8F:AD:AF:20:EC:AC:4B:6A:80:49
X509v3 Authority Key Identifier:
keyid:B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:d5:8d:80:65:97:b4:5a:12:b7:9a:2b:e8:45:56:c8:f3:46:
0b:a1:ce:78:1c:1c:4f:d9:ad:e0:ec:86:9f:38:62:88:28:4e:
04:ec:42:ac:70:51:5c:23:79:35:cd:74:48:ae:19:36:f5:7e:
5b:7d:96:6d:08:b4:0b:bb:04:26:c6:a9:bf:19:ea:61:d8:ab:
84:eb:2a:62:e2:5e:7b:6d:3c:9c:07:57:89:dd:e1:cc:e9:e2:
59:85:e4:1e:fa:52:3c:99:6e:0c:cf:25:51:6d:5e:74:b4:ce:
9b:1d:9e:4e:2a:7d:bc:8c:13:0c:e6:9f:78:da:dd:a8:68:cf:
e9:c9:9d:8b:0d:b7:65:34:92:1f:58:be:a6:fb:17:ae:e4:95:
f6:cc:57:c6:a8:7d:53:d4:2f:8d:9c:94:1f:b4:50:ed:6b:7f:
b9:3b:0a:4e:b2:f4:c5:97:22:17:c9:cc:88:fa:0e:ce:8d:df:
5f:5e:93:4b:cd:54:b9:dc:6e:fe:b7:e9:91:27:0b:53:5d:ba:
c8:19:c6:ef:00:b7:c7:f0:e3:58:6b:9a:fb:95:97:37:78:2d:
72:2c:d7:d8:72:b3:47:88:57:ca:9f:d2:23:40:b1:5e:46:12:
ff:7a:f7:4d:bb:e6:f1:e3:d4:88:02:d0:89:47:58:3f:15:bd:
ac:2b:de:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 00:15:53 2026 by rpki-client