Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.mft
File: tSU8JVLUQD9DuDwl52IjjfEtroE.mft (raw, json)
Hash identifier: k0i7MiF3iArmxV0NUNFuVS1ZI0d/ua6EKprMs57gGjs=
Subject key identifier: 55:25:5F:69:8C:C2:0E:60:29:09:89:EF:F9:7B:B8:94:85:5E:34:86
Authority key identifier: B5:25:3C:25:52:D4:40:3F:43:B8:3C:25:E7:62:23:8D:F1:2D:AE:81
Certificate issuer: /CN=b5253c2552d4403f43b83c25e762238df12dae81
Certificate serial: 019D38D344628B349E003939A02970D3340C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSU8JVLUQD9DuDwl52IjjfEtroE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.mft
Manifest number: 0973
Signing time: Sun 29 Mar 2026 09:01:02 +0000
Manifest this update: Sun 29 Mar 2026 09:01:02 +0000
Manifest next update: Mon 30 Mar 2026 09:01:02 +0000
Files and hashes: 1: A7blUAR8M2twO1WZriuysPCl_Ns.roa (hash: LBRnuKsEeUakJqD77ZNf+zyWsZ1gWUpfDWeWrVr+1Oc=)
2: tSU8JVLUQD9DuDwl52IjjfEtroE.crl (hash: gQR/MrmW3uWzErn71DfNf4QXZdHDfjdNNLCe3+l981I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSU8JVLUQD9DuDwl52IjjfEtroE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:44:62:8b:34:9e:00:39:39:a0:29:70:d3:34:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5253c2552d4403f43b83c25e762238df12dae81
Validity
Not Before: Mar 29 09:01:02 2026 GMT
Not After : Mar 30 09:01:02 2026 GMT
Subject: CN=55255f698cc20e60290989eff97bb894855e3486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e4:d4:e6:73:96:26:39:80:8f:b0:b8:89:aa:
14:9c:f7:57:da:d1:f4:cd:8f:fa:35:6d:d0:0f:8f:
60:5b:9f:f1:65:57:05:71:32:80:34:70:8d:aa:f5:
e5:bd:fe:71:12:74:26:1e:74:ac:3b:7b:f0:da:00:
71:24:de:e4:3c:60:87:7c:b8:16:90:82:3b:4e:a5:
37:56:a4:52:a1:de:5c:40:e6:c9:93:77:fa:d5:8b:
32:f4:37:80:eb:23:28:16:da:12:70:62:b7:4c:83:
fb:2e:87:8d:46:9a:5e:12:af:8e:dd:43:3a:c9:00:
b1:f8:7c:62:55:c6:8a:aa:ee:2e:39:78:e6:64:c5:
53:f9:f5:9b:78:cf:46:25:90:50:42:9f:88:05:17:
4e:a1:53:8a:aa:80:46:22:c5:9b:79:03:e0:bf:51:
0e:47:3e:37:26:d8:37:6e:22:07:38:93:68:07:82:
44:87:55:20:47:36:41:e3:9c:3a:88:fc:e4:de:a5:
d4:2a:31:c4:72:0a:5a:78:c4:26:e3:c0:7c:26:f8:
3c:7d:44:7c:57:3e:2c:2e:ef:2c:d8:73:7e:cd:29:
7c:f9:0b:a4:73:d7:24:5d:40:4d:ce:eb:88:b6:86:
92:a4:d8:5a:19:73:28:21:39:11:09:83:b8:19:e7:
01:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:25:5F:69:8C:C2:0E:60:29:09:89:EF:F9:7B:B8:94:85:5E:34:86
X509v3 Authority Key Identifier:
keyid:B5:25:3C:25:52:D4:40:3F:43:B8:3C:25:E7:62:23:8D:F1:2D:AE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSU8JVLUQD9DuDwl52IjjfEtroE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c8:6a:ea:91:20:46:3e:17:d2:45:0c:80:42:61:1c:59:74:
3f:80:b2:a8:1e:ad:fa:01:08:3d:aa:b5:c7:56:ff:c6:0f:57:
87:fc:79:18:0f:a2:93:79:45:40:91:d5:6c:f0:a3:7a:f8:2f:
f5:a9:a3:19:f1:90:5b:b3:14:19:f8:69:ca:01:be:9e:4a:c3:
83:ba:ce:ce:0e:ce:26:f8:ae:86:79:13:1e:01:bd:50:d8:34:
c0:83:32:d0:20:44:28:81:58:f3:95:de:a7:01:f2:51:7a:91:
57:85:0b:88:03:69:54:25:eb:85:28:9b:b7:38:98:29:d0:b4:
52:14:69:8a:de:f4:08:b1:4f:85:0f:b6:e7:30:88:8a:0f:65:
11:c1:79:64:fd:19:b0:b6:12:71:7e:ca:33:e4:a1:be:71:29:
cf:5c:b5:70:50:f7:93:5f:22:e1:05:94:1c:03:f3:74:32:11:
c1:f1:f4:98:27:c3:f6:1a:c3:ef:92:10:f1:1a:b8:52:a0:52:
0c:4e:f5:59:ea:29:08:b1:4a:3b:22:84:bc:9e:37:fd:7a:4a:
7f:5c:b3:ae:93:5a:e0:0d:5a:2e:d7:1d:b2:9e:d0:b3:ea:86:
33:b1:a0:0d:17:7b:76:01:a1:7a:18:16:3a:8b:54:10:fd:77:
9a:a1:0f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:21 2026 by rpki-client