Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
File: tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft (raw, json)
Hash identifier: 7ffhn0/jB9bm6Pe0LVexZiwbVvrLA2f+vopczEMlB5I=
Subject key identifier: 6F:03:94:9F:55:0F:3B:BB:04:BF:D1:94:D9:D2:64:1A:DF:23:28:DF
Authority key identifier: B5:2F:5A:41:0B:15:77:59:1A:78:0C:DB:3E:AC:C2:6D:A2:DF:FD:F1
Certificate issuer: /CN=b52f5a410b1577591a780cdb3eacc26da2dffdf1
Certificate serial: 019D0553AADB09EC86540B96D03DB423A1A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
Manifest number: 53
Signing time: Thu 19 Mar 2026 09:01:02 +0000
Manifest this update: Thu 19 Mar 2026 09:01:02 +0000
Manifest next update: Fri 20 Mar 2026 09:01:02 +0000
Files and hashes: 1: BXFdN1Z5TwgsjoWnWzPCB_vcA-o.roa (hash: 4V056W0njPwGeLmfiU9boZW/Yf0SKKmhujbcJt/lGHw=)
2: lbvJdX8vGOpaTahOJAPiEyACl7w.roa (hash: 0orYn9G5IVROjCboDVwfjh8n823lF/daaJTT0RRwFeA=)
3: tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl (hash: rG2lzRkPtbqoLfr9BQE7Raz57Mh/Aik/p4fJI03Ma/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:53:aa:db:09:ec:86:54:0b:96:d0:3d:b4:23:a1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b52f5a410b1577591a780cdb3eacc26da2dffdf1
Validity
Not Before: Mar 19 09:01:02 2026 GMT
Not After : Mar 20 09:01:02 2026 GMT
Subject: CN=6f03949f550f3bbb04bfd194d9d2641adf2328df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:56:7b:d8:7e:48:3e:8e:c5:b0:60:79:cc:81:
c4:4b:28:7c:4a:90:d6:6a:80:c8:de:0b:ec:ea:65:
63:c4:bc:3e:ef:9c:2a:7a:e8:c0:bc:db:b8:92:e4:
78:27:d3:48:a8:64:b3:c5:e4:7d:00:8b:3e:e5:16:
75:e7:83:dc:4e:6b:66:4c:d9:f1:65:c6:f5:ab:b5:
a2:a4:14:ab:75:07:7e:06:c1:70:70:07:4d:39:eb:
b3:d6:71:f7:7d:db:dd:2f:d6:b9:42:9f:e3:44:d4:
5a:b3:f6:34:2c:99:49:ef:d5:22:8a:c4:87:67:9a:
46:8b:88:3d:dc:46:26:3b:cf:cb:2c:70:83:40:3a:
3c:f0:f8:f0:3b:99:7d:f5:92:e0:de:2d:df:ad:96:
0a:6b:51:eb:d0:92:8d:64:67:09:10:12:c0:9b:d6:
76:ef:b4:95:cc:70:3c:fc:b7:86:57:fa:c1:17:5f:
49:52:2a:cd:1f:b7:47:b2:41:49:e6:f6:e1:65:5f:
ef:aa:bb:d8:2d:0a:6c:31:2e:60:bd:04:9a:22:3d:
d9:3f:2d:11:0e:c0:da:ef:3f:0f:1f:a1:5c:cf:ec:
6a:1c:e3:64:5b:f1:62:4b:aa:19:5a:4d:5b:4a:24:
fa:06:71:c3:38:88:b0:2a:8b:04:8f:f6:8a:bd:71:
8f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:03:94:9F:55:0F:3B:BB:04:BF:D1:94:D9:D2:64:1A:DF:23:28:DF
X509v3 Authority Key Identifier:
keyid:B5:2F:5A:41:0B:15:77:59:1A:78:0C:DB:3E:AC:C2:6D:A2:DF:FD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:80:93:fc:c5:16:7d:32:e0:da:88:7b:52:a9:87:01:05:c5:
6b:f6:a1:f1:6b:e0:ed:e7:62:ba:a0:d8:a9:e6:60:c2:38:54:
8a:79:cc:6f:b3:14:73:65:a2:4a:ce:b1:33:00:30:52:0b:ce:
77:86:90:47:1e:58:13:dd:f5:a2:27:14:d3:36:e2:3d:02:3e:
35:2b:cb:e8:d3:c7:91:23:e0:09:e5:5b:db:03:44:26:e5:12:
50:98:d5:69:a5:ee:eb:01:2e:65:1f:3e:16:92:f8:b6:4d:e2:
6d:5f:cd:80:89:cf:6e:28:48:ba:c5:8d:ae:0d:2b:11:81:bf:
ee:68:89:27:45:ac:7a:8e:a0:3e:fb:6e:8d:f0:14:11:24:3c:
b4:5d:76:ac:d2:3e:a9:d6:67:6b:75:39:f4:a4:a2:34:28:41:
08:80:53:f9:42:cd:7b:af:ad:38:2e:3d:c7:75:d2:d5:2d:c2:
46:dd:f1:4e:d9:a3:db:b8:77:c7:08:34:53:af:2e:97:77:e6:
f4:da:11:0b:cc:85:ae:a8:14:e6:5c:62:60:f3:69:da:cf:55:
f8:63:0d:24:e3:aa:00:03:0c:b6:79:de:56:b1:16:45:5f:3a:
8a:a8:a8:f9:76:de:64:5f:8c:15:cd:d6:39:76:cf:ec:cf:7b:
48:53:46:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:58:21 2026 by rpki-client