Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
File: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft (raw, json)
Hash identifier: JGAcinRmhlSVWw6F6M1OdKtlR1jWCPmP/8Ld0pqcNjk=
Subject key identifier: CE:8D:6E:E6:85:D7:89:ED:61:A7:1A:40:93:81:66:52:28:69:8D:56
Authority key identifier: B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
Certificate issuer: /CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Certificate serial: 019D38D2A0C282F0BAB090CF822B60AB1672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:00:20 +0000
Manifest this update: Sun 29 Mar 2026 09:00:20 +0000
Manifest next update: Mon 30 Mar 2026 09:00:20 +0000
Files and hashes: 1: UqqJVc2LmDSoG37tyF_Y4rZTJNo.roa (hash: 3t/K9ONoo6YmeusIuo36eGNhkP5aHMKXreL77QnBjxI=)
2: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl (hash: s1QjkUtJKEt5809Rj/vdyFNUtzJlLIU14A7gdtAnzuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a0:c2:82:f0:ba:b0:90:cf:82:2b:60:ab:16:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Validity
Not Before: Mar 29 09:00:20 2026 GMT
Not After : Mar 30 09:00:20 2026 GMT
Subject: CN=ce8d6ee685d789ed61a71a409381665228698d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5b:82:c2:89:ba:ce:cb:7e:e8:d5:e2:7b:24:
fd:4c:9c:bf:49:10:89:0c:a3:20:95:36:df:b2:ec:
1b:c2:2b:ba:7d:70:f4:f0:fe:ad:e9:b5:31:49:ec:
00:e3:10:87:02:3c:f3:f6:fb:30:ee:fc:15:a1:da:
c9:2f:66:35:d7:47:12:78:28:9c:bd:22:0c:ab:9d:
b9:73:6b:d0:87:44:e5:cc:a6:91:b1:d1:be:ba:6e:
87:dc:94:c5:c6:6d:9a:02:15:23:f5:ad:e1:02:ad:
1e:01:8d:28:ba:a7:cc:37:78:37:74:cc:35:49:0f:
67:89:8f:8a:7f:fa:90:ea:82:ed:c2:81:08:5b:8b:
d1:c7:c9:ff:a0:74:0a:bb:03:c3:f2:35:89:d7:7d:
61:b4:35:f9:1d:c3:2c:fe:72:30:c9:af:27:07:ae:
41:8f:ce:17:4f:53:72:cc:b8:b3:34:39:d6:1c:96:
3f:ed:db:20:c3:8f:63:c0:74:9a:cf:89:9e:de:a0:
b8:df:40:ae:09:63:fe:bd:e7:a5:15:a4:aa:fa:0e:
18:1b:b5:47:2c:ef:07:7c:82:34:1d:6e:e7:5f:ad:
68:8f:20:b7:2d:5e:d4:50:c6:19:59:29:7b:ad:7d:
3d:44:1c:b3:8b:7a:da:14:04:48:a1:f5:70:1d:ef:
41:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8D:6E:E6:85:D7:89:ED:61:A7:1A:40:93:81:66:52:28:69:8D:56
X509v3 Authority Key Identifier:
keyid:B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7b:3b:57:2e:7c:04:ed:d4:8c:5b:07:a4:aa:3e:8a:3e:bb:
e0:05:ba:77:9d:95:83:bf:5b:ba:b0:4f:63:d8:8a:22:b3:7d:
5a:74:9d:b7:f8:c3:33:71:f5:e0:a7:37:81:cf:77:97:52:34:
f1:ca:fd:27:5e:d6:84:a5:ed:66:e1:b6:12:83:b7:51:8c:ef:
ec:b8:51:d4:20:b9:d9:22:a9:e3:17:e8:91:55:0c:d3:39:b6:
f3:00:a0:8a:a1:99:9f:f2:9c:f9:41:15:df:c0:0b:19:5b:7a:
b6:4c:8a:48:f6:ea:74:4b:ba:7f:b1:ee:e6:17:7e:25:3d:c0:
8c:5c:46:42:03:9c:77:c5:e6:36:6c:0b:a1:8f:42:03:eb:a5:
44:26:91:ab:5e:a9:55:94:f2:70:c2:75:e1:28:69:7b:72:3c:
e0:fa:ce:71:9c:3e:cd:e1:9b:2e:e7:b6:c8:78:f9:7d:96:11:
49:44:8c:1e:47:f9:e5:7d:3e:38:a7:43:b4:01:a5:b8:dd:c6:
bd:99:d7:3a:6d:6f:0a:2a:c7:0c:f2:93:3f:1d:4b:4c:74:49:
39:60:3b:b5:7e:7d:49:f0:36:10:22:05:1e:a5:71:36:29:73:
c0:5a:4a:07:ec:28:e9:cf:65:37:97:17:ba:d5:4d:df:4e:63:
6e:23:6e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:57 2026 by rpki-client