Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
File: tsAN1rE41q2498hDjdCy2Fg9xWY.mft (raw, json)
Hash identifier: /RA06OgmSUr3uqeK9vBjb7TFFCQUidNcnXtdeovqtrQ=
Subject key identifier: 5B:9D:1D:ED:68:3E:AB:4E:87:79:44:3C:3E:C2:03:93:69:1F:EF:93
Authority key identifier: B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66
Certificate issuer: /CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
Certificate serial: 019CE4ECD9DD6B25B7D85E84DA9B51DDF9F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
Manifest number: 0109
Signing time: Fri 13 Mar 2026 02:00:53 +0000
Manifest this update: Fri 13 Mar 2026 02:00:53 +0000
Manifest next update: Sat 14 Mar 2026 02:00:53 +0000
Files and hashes: 1: 9h9e6R0rqbyhkdydEjqTZrkWQxM.asa (hash: L3iLuEzCPk6Gw29gfGqHU9jLoff62sEQn25lEVcMyvM=)
2: tsAN1rE41q2498hDjdCy2Fg9xWY.crl (hash: Y6/UPB1No9sYH774lWiXGf5GpindShBntGouT4jWMO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:d9:dd:6b:25:b7:d8:5e:84:da:9b:51:dd:f9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
Validity
Not Before: Mar 13 02:00:53 2026 GMT
Not After : Mar 14 02:00:53 2026 GMT
Subject: CN=5b9d1ded683eab4e8779443c3ec20393691fef93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:f6:37:79:09:e1:93:03:ab:25:95:64:2b:
15:c4:7e:4c:4a:cf:f9:09:bc:70:6f:47:df:08:0d:
36:9c:1f:e3:e2:54:85:3f:2a:2d:a2:74:f9:e0:05:
6c:71:f4:6e:c9:04:46:44:3d:5c:9a:9c:ed:8d:a1:
06:db:6d:6c:da:a7:26:60:07:2a:12:b5:28:30:c5:
c9:c7:fe:ba:f8:81:e5:17:d7:bd:bb:2a:b3:30:eb:
9e:2d:f5:ab:4c:c4:f6:0f:1f:c5:05:ed:cc:b4:6a:
dd:18:b3:6f:9b:35:87:60:94:7f:75:30:3c:d3:47:
4c:15:d8:23:4c:61:73:d8:90:15:06:2c:93:6f:31:
99:26:42:40:b6:08:fd:9c:12:82:3d:24:30:91:f5:
04:e0:d3:4a:e9:5a:1a:1b:9d:4b:5a:6a:1a:0c:89:
43:00:69:86:3b:28:b0:e3:96:6b:cf:f8:01:f7:0a:
47:1a:a7:11:45:56:7f:0e:61:69:24:7d:ed:56:ca:
9f:c8:86:ff:16:18:02:20:4e:d8:b4:b3:31:f1:df:
ef:ce:d3:98:f0:48:41:04:4f:9b:d1:14:bc:48:40:
fb:90:db:d4:f3:0a:e1:10:ec:67:f9:4d:a7:69:43:
2f:bf:7c:46:de:fd:2a:c5:d0:b0:66:d4:31:c6:67:
10:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9D:1D:ED:68:3E:AB:4E:87:79:44:3C:3E:C2:03:93:69:1F:EF:93
X509v3 Authority Key Identifier:
keyid:B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:76:e6:73:25:ce:60:f4:f7:87:78:4e:91:33:c4:bb:3e:3d:
00:5a:b9:ff:29:61:5f:bf:2f:f3:e7:3a:1d:56:0c:66:b9:19:
d4:e3:e0:c0:fd:b7:f1:c7:04:9c:4e:02:d4:88:bb:fc:4c:c9:
25:c5:be:4e:82:70:25:42:9c:e2:65:23:56:ac:1f:65:8f:71:
5c:c1:d5:3b:2c:a4:26:b8:75:74:44:eb:b5:34:89:bb:b4:be:
05:76:84:8e:0a:04:6b:36:58:d5:71:35:82:c4:e8:96:a8:48:
f5:44:d6:37:48:81:19:68:a8:93:1e:b0:49:bb:92:84:35:30:
f1:b3:58:2a:6a:a8:37:4f:0b:cf:84:ad:76:e4:a3:c4:f3:0e:
2e:6b:55:9e:ff:ff:3e:8d:64:59:17:a2:6b:db:98:34:3a:37:
2d:2b:84:3c:0d:6b:b6:f6:b9:82:b9:35:18:39:b7:26:90:72:
49:00:d6:99:17:44:33:a0:d0:4f:97:d2:ab:3b:76:de:13:81:
70:ca:b0:9d:f6:1a:00:a2:5c:9d:f4:34:97:83:f3:fd:8e:2a:
69:3c:bb:6d:aa:42:b5:3a:49:23:b3:b9:3c:6b:bf:12:bb:7e:
72:74:1b:65:52:f2:5d:0f:08:4a:f3:8e:9e:3c:71:85:47:c4:
a4:d5:b0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:27:16 2026 by rpki-client