Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
File: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft (raw, json)
Hash identifier: 6+/UvXHlsYOJg4qASREuD5KWaBQXr/EyW/TQi6cbSBk=
Subject key identifier: 04:29:20:CF:F7:10:75:11:33:C7:8E:47:6B:0F:82:4C:43:90:2C:85
Authority key identifier: B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F
Certificate issuer: /CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
Certificate serial: 019CE6DA9B43904E24601BE97169527DE044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 11:00:12 +0000
Manifest this update: Fri 13 Mar 2026 11:00:12 +0000
Manifest next update: Sat 14 Mar 2026 11:00:12 +0000
Files and hashes: 1: 4uSa1k9qPhTt7gCV8bgatCnF4QE.roa (hash: AebIBoqTns7X5qm7Et95omb7FUrUebB3Fnzu8mpT4eM=)
2: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl (hash: l+LWBHjHkuaOlxfstvwUf7IZ8LAIKuU6qVwb+ugXpiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:da:9b:43:90:4e:24:60:1b:e9:71:69:52:7d:e0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
Validity
Not Before: Mar 13 11:00:12 2026 GMT
Not After : Mar 14 11:00:12 2026 GMT
Subject: CN=042920cff710751133c78e476b0f824c43902c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:58:8b:b8:69:9a:23:d4:62:47:a8:c1:2e:
0c:82:09:20:95:59:7a:8f:23:98:39:44:de:5e:86:
aa:50:78:53:46:aa:13:37:14:9e:f8:34:0b:30:b5:
77:3b:e8:07:96:4c:73:f6:0b:d8:be:b9:e2:68:6b:
3b:d2:c1:b1:ba:64:60:3a:4b:77:84:d5:36:0d:aa:
7c:5f:b2:54:fa:64:ae:d4:c5:a4:aa:f6:62:f5:45:
fd:23:46:38:c3:84:c6:96:30:f4:2e:3f:25:34:59:
f7:c1:82:0f:63:47:c3:58:5f:12:72:ef:88:f2:9d:
c4:88:f5:91:0c:52:31:19:d8:f6:2f:e8:c0:90:06:
f6:8b:9f:99:ba:6b:24:2e:3d:a8:23:29:e5:23:29:
2f:fb:56:0f:36:47:6f:aa:f2:02:1a:81:08:87:b0:
e3:ee:eb:fc:e3:1f:84:19:fa:aa:26:6d:be:76:8c:
bb:48:50:58:b2:02:0b:4e:05:db:fb:27:74:75:14:
c1:1f:8b:4b:4e:c1:88:24:a1:a8:65:e5:78:b7:39:
fc:de:69:8b:a9:4f:ca:5f:1c:d7:6d:fe:d0:bc:6a:
ee:b7:d9:c1:5a:48:b2:78:de:3f:8e:59:53:5f:dd:
6a:48:a2:bc:8f:7d:5d:71:a2:96:19:46:2b:18:49:
b8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:29:20:CF:F7:10:75:11:33:C7:8E:47:6B:0F:82:4C:43:90:2C:85
X509v3 Authority Key Identifier:
keyid:B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:3f:c3:4c:09:dc:0a:39:62:7e:c9:e7:4a:ed:7f:66:d2:d0:
18:36:94:36:f3:7f:ac:28:23:b0:b1:9b:ac:02:14:13:30:7b:
69:f3:ab:b3:51:68:9f:7e:6a:dc:f6:5f:a8:b4:6e:4d:5b:08:
6c:f0:59:c6:d9:d3:8f:ff:54:49:2d:4e:27:f2:4c:b5:06:89:
ce:11:f8:49:f3:e4:f1:1f:c6:d5:15:ee:44:d9:60:7e:3f:4c:
52:c7:40:ff:57:46:81:57:57:93:49:c4:2f:bf:bd:0e:09:e6:
d3:23:ef:1b:a1:8a:2e:b9:22:a6:7d:42:31:12:6b:ff:77:b1:
98:a5:14:6a:10:ef:95:84:0a:dd:74:8f:f6:a0:cc:39:25:ce:
d6:85:3b:89:b0:fc:6d:38:77:66:06:43:04:e3:4c:9b:14:5e:
dd:0f:f2:24:38:ba:44:60:19:ed:48:a0:89:69:09:ed:da:84:
66:f0:55:67:d3:5f:cb:3a:30:bc:c0:41:46:76:ae:d2:c1:d0:
c0:8f:20:88:13:a0:17:06:9b:59:5c:ec:08:e7:ef:c7:9a:16:
3e:90:b4:0b:96:cd:03:bd:c3:f9:55:12:53:b1:83:a9:49:db:
28:ba:20:9f:55:10:94:46:22:df:bd:62:8f:98:e7:ce:64:c1:
6b:c1:3b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:00:27 2026 by rpki-client