Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File: tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier: XdMtjQMS7IOKmkRTHmWnou0XxNgBsxTXzsIPjRN564I=
Subject key identifier: 1E:64:D3:0C:6A:30:20:1D:11:36:B5:DF:F1:5E:86:D1:6D:82:52:E2
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial: 019D051DB82E69546F55B55AEA9D40FBC8BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number: 1875
Signing time: Thu 19 Mar 2026 08:02:06 +0000
Manifest this update: Thu 19 Mar 2026 08:02:06 +0000
Manifest next update: Fri 20 Mar 2026 08:02:06 +0000
Files and hashes: 1: FCOqF_sQRgQBJURZwz5LSyaOjJ8.roa (hash: 6lS73JUDNo7BbYfLMWtS8VyH4+hvb7PzpHKXOKKSc8o=)
2: S_kn4DkQroHqq7HAquDXguodEnE.roa (hash: 9xxNTgjpkgjoYZUn/S2u9DKQyLLVAn0QlTy3a/LjFvI=)
3: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: /dyV4m0ihYHeaduurqQWMPYTU+RyMHb93WjqT49Km0I=)
4: wkBj6meKGNLkzfK8dNJpio292qU.roa (hash: fCT5GXsj0OqKgF2zl8rl9o29Q7I6qVhp6IsQiy2sl9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:1d:b8:2e:69:54:6f:55:b5:5a:ea:9d:40:fb:c8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Validity
Not Before: Mar 19 08:02:06 2026 GMT
Not After : Mar 20 08:02:06 2026 GMT
Subject: CN=1e64d30c6a30201d1136b5dff15e86d16d8252e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b2:36:0f:54:03:53:ab:85:01:35:4d:bc:b8:
bb:37:a6:14:38:d6:29:26:7c:cd:d3:45:d9:16:49:
00:a9:8d:db:6e:b5:aa:81:cd:34:83:23:93:81:cf:
40:7e:b5:2e:f0:a7:c8:1b:64:2a:23:ba:9f:45:b5:
09:63:bb:65:0e:62:d0:b5:3d:11:86:4a:b3:82:1d:
ff:d0:e8:d5:aa:f9:8b:e2:02:24:69:8a:59:44:4a:
c3:4c:34:ca:2c:0f:2a:80:82:2f:8e:70:c2:0e:b5:
88:ed:a7:d5:f8:71:f9:71:de:66:4c:6f:e6:73:78:
d4:c2:46:d0:a0:46:42:66:0d:02:dc:4d:46:aa:df:
28:6e:2f:12:28:be:ad:84:a2:bc:6f:3b:76:dc:fb:
37:f8:d7:98:3e:d5:4b:5c:29:bf:dd:91:b9:da:65:
22:39:23:23:32:8f:b5:8a:bd:8e:2e:a6:d0:7f:81:
61:8c:aa:ff:99:84:70:2b:1e:f1:c5:29:de:ca:5c:
e8:44:0f:26:2a:0e:ce:06:4d:f4:a7:ab:d8:8d:81:
2b:6e:59:64:da:f8:1d:89:09:ab:9c:12:80:f0:72:
f2:8b:fc:cd:4d:82:b4:db:c0:e0:99:4c:80:55:b4:
bd:87:84:b4:b9:05:bd:e7:15:2e:9c:d5:ad:77:47:
df:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:64:D3:0C:6A:30:20:1D:11:36:B5:DF:F1:5E:86:D1:6D:82:52:E2
X509v3 Authority Key Identifier:
keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d8:56:d8:15:58:71:cf:04:75:2c:2e:2a:e5:cd:88:b1:cd:
0e:d5:16:b7:21:6c:d2:69:ef:36:23:2a:42:0a:b1:4f:90:5b:
a0:f2:d0:0e:91:fd:3e:19:51:a0:38:e2:8f:b1:8c:ac:7e:06:
0e:da:8f:cc:2a:67:bd:6c:86:86:3e:6c:4b:c6:f1:e1:0f:55:
07:03:21:91:53:84:5b:a5:0f:99:07:5e:73:db:44:8b:ac:1d:
6d:cd:1e:49:3d:51:05:3c:b4:c6:90:be:97:ff:30:11:9e:7d:
fd:4f:65:41:bb:47:cd:72:61:26:93:ac:ee:bc:6a:cf:bb:3a:
8d:00:91:5b:00:3d:84:cf:c5:43:54:cf:32:59:ee:da:cc:76:
27:b0:09:f4:06:60:23:bc:bd:ed:ea:c3:12:5d:0a:e2:ec:57:
ae:63:eb:cf:59:1f:0f:3c:ba:c8:7c:ca:94:2b:fb:81:55:7c:
87:8f:4b:f7:55:75:97:46:a5:f9:54:22:09:63:c2:33:4f:0f:
09:46:53:b8:ea:9b:ad:fe:d2:47:23:24:b7:8b:bf:73:d2:73:
94:6e:df:b7:ed:75:d7:4f:55:8b:50:95:ec:10:13:52:fb:02:
01:31:7e:6e:43:ab:3c:df:20:25:bf:05:84:33:02:ee:9c:55:
87:97:55:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:47:53 2026 by rpki-client