Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
File: tVG7qYKf51krGwLo1xyP18ziGrE.mft (raw, json)
Hash identifier: gW9T4fQnSZoUgDMEqK/sT4dLw6RtjXXuu01PjJg0ePg=
Subject key identifier: 8C:C5:19:00:45:C9:9E:DC:23:33:41:E8:B4:65:F0:60:02:A1:D2:6B
Authority key identifier: B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1
Certificate issuer: /CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1
Certificate serial: 019D12D8B6000CCBE0AC5017F6AD2254A17F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
Manifest number: 0261
Signing time: Sun 22 Mar 2026 00:01:25 +0000
Manifest this update: Sun 22 Mar 2026 00:01:25 +0000
Manifest next update: Mon 23 Mar 2026 00:01:25 +0000
Files and hashes: 1: iMHns26Twh_iKXADF620qDAnTy0.roa (hash: GWSmHWITFYygfJHovjbtsHzKxtolOYsM+f2kV7+EZnY=)
2: tVG7qYKf51krGwLo1xyP18ziGrE.crl (hash: kn7wh+NclUlUpxV0vkPyaaZEHGHboiSagxuekPs+PNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:12:d8:b6:00:0c:cb:e0:ac:50:17:f6:ad:22:54:a1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1
Validity
Not Before: Mar 22 00:01:25 2026 GMT
Not After : Mar 23 00:01:25 2026 GMT
Subject: CN=8cc5190045c99edc233341e8b465f06002a1d26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cf:17:e6:08:96:5e:fc:de:ef:44:e1:54:e0:
2e:b9:77:b5:ef:9d:ff:20:f5:6e:ae:49:51:34:f8:
28:2f:11:cc:7b:c1:11:44:dc:45:d1:99:73:4a:1e:
be:94:71:fa:87:40:ad:7d:b8:73:1e:0c:d1:20:0b:
0a:c8:bb:1c:af:4a:32:b4:3f:de:ed:4b:67:a0:80:
90:77:45:04:5b:94:e8:db:fc:57:47:ba:44:75:e2:
76:7e:cf:9f:fe:02:6f:82:6c:77:f9:e0:70:3b:51:
38:3b:b7:b9:29:ed:39:7c:a3:89:e8:fe:b3:1c:8f:
04:ad:32:74:ad:e9:76:aa:ac:6a:81:c6:ba:f2:c9:
26:d6:5a:50:0b:88:85:cd:3b:ce:d7:08:20:2a:e4:
32:cc:16:1b:c4:0a:6b:a6:1c:a3:4f:a4:05:84:09:
e6:95:b8:7d:6f:af:9c:29:f3:d3:2e:9b:96:a1:25:
14:67:d3:5e:0c:24:6c:e9:4b:eb:fa:77:38:73:20:
73:98:e8:64:3e:35:74:64:f2:c4:9e:98:ca:e0:e1:
79:54:09:e4:09:e6:05:3a:9a:40:04:63:17:4e:8a:
f8:3a:95:58:d9:ea:db:c4:e5:fb:a6:73:db:09:57:
cb:f4:be:e3:e3:1f:1b:d8:3e:a6:57:68:56:b7:bd:
b9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C5:19:00:45:C9:9E:DC:23:33:41:E8:B4:65:F0:60:02:A1:D2:6B
X509v3 Authority Key Identifier:
keyid:B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f4:f5:5d:ad:9b:5c:ad:11:25:db:e0:9c:be:8e:a3:ee:69:
14:1d:07:b4:13:b9:fb:ad:55:a0:94:a2:4d:a7:c7:be:bf:4a:
55:b3:88:82:71:85:1f:02:28:41:0f:45:6c:bc:bf:ff:a2:db:
3e:16:7c:e2:07:92:28:41:9c:2f:bf:2a:1d:4a:79:35:60:c7:
5d:2a:80:a0:bf:42:ac:01:f3:55:3e:97:f2:b8:ad:79:53:9e:
ae:f8:61:84:8c:25:4e:9c:3b:7d:44:11:89:38:53:9e:e4:dc:
f0:96:09:4b:89:b2:26:60:09:b0:2f:78:6a:d1:6b:de:d6:f9:
60:fe:09:7b:a1:2c:40:5e:9f:dc:f4:17:e7:6b:8f:59:80:e5:
2b:78:3e:81:f2:8c:96:e9:34:1d:07:c9:f6:95:d7:3a:ee:62:
09:6e:8a:a7:8f:8d:1d:39:cc:07:77:3a:f0:fe:53:70:95:34:
a0:cf:04:53:bd:b1:ee:39:dc:03:97:00:c8:fe:01:da:85:9b:
f8:bd:08:f0:33:d5:15:72:02:7a:7a:cc:cc:39:78:ae:2a:74:
ec:f6:93:5e:58:9b:34:5a:1a:5a:b7:68:5a:94:8f:43:62:0c:
92:89:ca:23:91:91:79:53:e6:55:58:3f:d7:1d:ba:ab:98:bd:
e1:31:65:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 05:51:25 2026 by rpki-client