Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
File: tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft (raw, json)
Hash identifier: 14AMZ6d+zs9Gk9rt2kaqhKR/zqtunTVVVhAyg9Jo0Jg=
Subject key identifier: 8C:3E:13:0B:FF:6F:02:42:8F:A7:6F:5C:FB:48:CE:53:49:18:27:D0
Authority key identifier: B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
Certificate issuer: /CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Certificate serial: 019D389BAA20BAA686DA958CB0E42558C69E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:00:18 +0000
Manifest this update: Sun 29 Mar 2026 08:00:18 +0000
Manifest next update: Mon 30 Mar 2026 08:00:18 +0000
Files and hashes: 1: 0_bDufbDC749XM6FeQZedL-kk0k.roa (hash: g27LLjmMTEPKwmdpRxcxsvyxvSaT85tGJMHzBXS0Bvg=)
2: Et_E8L3JnyGGi7EORm0tAklWkLY.roa (hash: SpPpnnc6LbJxToXLzGDYpTEBRnHYaBTsGIvm0GxadyE=)
3: tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl (hash: 6isgeyPKyIJYrN6bmBwsAYY6/Iky35GeQOKfS060aWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:aa:20:ba:a6:86:da:95:8c:b0:e4:25:58:c6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Validity
Not Before: Mar 29 08:00:18 2026 GMT
Not After : Mar 30 08:00:18 2026 GMT
Subject: CN=8c3e130bff6f02428fa76f5cfb48ce53491827d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:56:87:c9:e6:a1:a4:76:6a:93:02:00:3a:
c7:4d:eb:6e:b5:b5:14:57:04:81:a0:f6:a8:7a:99:
ae:53:07:19:02:dd:ac:b0:95:2a:c4:fb:8e:6e:3c:
80:b9:30:bb:c2:86:d8:69:23:07:54:5f:23:fb:74:
7f:72:0c:2d:21:80:b6:87:53:6f:b7:84:84:36:40:
bd:2a:ec:86:b8:58:a5:46:a0:bd:9c:7e:2e:19:d5:
db:eb:0d:4f:a9:e3:11:f2:5b:a5:48:c1:de:0a:9f:
d9:ab:b8:ad:62:34:b9:22:00:d6:7d:8f:76:47:e8:
81:a0:cb:90:6c:5e:bb:66:04:39:ad:d9:c9:fb:1d:
c7:e9:42:5a:b0:42:0c:47:f0:e5:9f:5d:c0:bd:09:
87:b2:3e:07:88:f7:8f:e9:90:5f:60:3a:8c:d2:58:
48:3a:87:c4:f9:6b:23:55:a2:2c:e4:32:dc:2f:32:
ac:80:f9:a7:45:ee:84:61:8b:5a:a3:d6:58:3e:33:
fb:a3:d4:a1:53:d3:14:a6:a4:92:f9:26:ea:2c:d0:
ab:a7:f5:06:3e:68:cc:a8:f3:e9:ae:05:4c:23:99:
06:5d:65:77:8d:ac:a8:f9:4b:12:8a:a7:5a:5a:b7:
15:d3:28:8f:5a:f3:8e:ee:69:0c:90:a0:57:f0:0b:
c2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3E:13:0B:FF:6F:02:42:8F:A7:6F:5C:FB:48:CE:53:49:18:27:D0
X509v3 Authority Key Identifier:
keyid:B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:81:84:b7:06:dd:90:e6:7d:4a:42:3b:d7:ed:38:29:28:eb:
d0:ae:90:fa:56:b3:15:bc:9f:28:d1:97:77:cf:05:5d:74:59:
37:6a:80:2f:05:7d:10:94:cf:17:07:03:d2:53:6b:c0:0c:88:
19:d4:67:e3:1e:25:38:e2:17:5d:e5:fd:aa:54:fc:93:db:81:
56:3c:dc:4a:33:80:40:79:40:bb:09:fb:c8:e2:31:4f:eb:8b:
33:8d:74:62:14:cb:8e:c4:f2:15:b4:72:a6:3d:d7:78:4b:52:
6f:42:8d:bf:dc:bd:a1:49:b6:41:2d:aa:74:33:79:68:00:fb:
17:9e:0f:51:53:df:c2:a4:8e:d5:70:7f:73:54:6a:69:64:1d:
00:48:77:9c:52:c9:49:38:4a:82:8e:6d:f0:ef:72:d6:1b:0a:
74:1e:73:ee:9f:d4:d1:4f:34:27:77:e9:f0:f7:8d:61:c5:6f:
4b:2d:70:60:41:a9:3a:40:8d:6f:93:62:33:1a:7d:62:c8:b6:
f5:d7:b9:5d:a7:e9:60:20:c9:02:f4:d9:74:b8:96:aa:ba:dd:
2f:6b:b9:08:c5:c3:81:33:8c:79:69:48:a9:a9:f6:32:76:36:
ee:38:a1:9a:d3:a6:d7:f3:e0:36:16:95:47:47:11:19:05:0a:
f3:ed:4d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:58 2026 by rpki-client