Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
File: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json)
Hash identifier: nvvCZEIpVSZvq/xBzu2s+2EcbZesKZcycKX63mf4fzI=
Subject key identifier: BC:E6:B5:9B:62:DF:01:B9:A3:64:79:78:84:6A:E4:98:A8:FD:11:86
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial: 019D3752CC5E71E250601973E0276EF136D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
Manifest number: 0BE9
Signing time: Sun 29 Mar 2026 02:01:06 +0000
Manifest this update: Sun 29 Mar 2026 02:01:06 +0000
Manifest next update: Mon 30 Mar 2026 02:01:06 +0000
Files and hashes: 1: BOgwaBfeVQSIIpapc527zkUmHqU.roa (hash: nrw7ZZfH7PdSf3N6nWnSJG5fTiZauLCGIT/x1kU9vbo=)
2: iMohY32XGfMe49GauUZuk8wSe_o.roa (hash: g/W9WUEJtZqHaB3GKVuuSkkBsgjFZgj3NGrp3JQbfpw=)
3: taAXT03F3M3JAGdGzCZ9PUX6syw.roa (hash: fgpH3fuH0sJY/Yp9V/TwIQ+R+Yd9bAUVli6dhikUJko=)
4: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: 0PZOZuEKvbgxIUu8zFsvnGfXll4ebP8AImMr9afZacw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:cc:5e:71:e2:50:60:19:73:e0:27:6e:f1:36:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Validity
Not Before: Mar 29 02:01:06 2026 GMT
Not After : Mar 30 02:01:06 2026 GMT
Subject: CN=bce6b59b62df01b9a3647978846ae498a8fd1186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:67:79:ba:39:25:d6:0c:ab:27:21:f0:22:81:
d7:b5:43:4a:d2:6e:d8:4c:b9:b9:6b:2a:da:e6:74:
8a:12:d6:55:8b:bd:3d:3b:b2:be:04:33:be:b9:3e:
ea:ec:8e:d6:5d:de:41:a7:81:38:29:55:60:85:ef:
4f:99:5a:f7:cc:c5:cb:a8:7a:b6:c9:b4:aa:6b:ed:
fd:60:95:34:58:5a:6f:12:a2:cf:d7:27:26:27:c5:
3e:9c:52:1b:f7:dd:fb:b5:ae:38:f5:d1:e1:16:ae:
5c:da:3c:73:95:d0:c7:c5:91:55:94:ac:93:1d:18:
28:f7:50:85:49:31:9c:20:8a:2a:9a:dd:c5:74:f9:
6d:f4:9b:79:78:85:ca:e3:f6:92:72:15:61:bd:da:
cf:f1:31:3e:4a:37:d6:d9:67:9a:80:0c:e4:46:52:
16:73:fe:3b:ef:ae:8c:fc:65:23:3b:49:ae:d8:ab:
d2:13:ac:c7:40:71:5a:92:7b:ba:34:70:ef:9c:d9:
70:7e:a3:f1:f1:d9:7a:e2:b3:da:6b:c9:22:d4:0e:
33:be:ad:9e:43:a7:4f:b2:20:8f:2b:ae:4b:1c:14:
27:c6:0d:fe:a8:c1:dd:f8:f1:d2:0f:1c:85:ea:a4:
2c:23:da:63:1c:af:cc:98:12:69:16:ee:3b:d5:61:
f7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E6:B5:9B:62:DF:01:B9:A3:64:79:78:84:6A:E4:98:A8:FD:11:86
X509v3 Authority Key Identifier:
keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:30:bc:98:1c:bc:53:9e:9a:06:fe:13:54:dc:75:f3:67:7b:
e0:4f:aa:71:d2:bd:47:3b:d5:5d:75:f1:89:ce:23:9a:83:fa:
36:f8:2e:b6:97:8c:e0:f6:ff:e8:22:8f:bc:6e:d9:e0:93:1a:
38:51:28:92:53:dc:b0:0b:68:87:1e:ec:2e:bf:1b:70:28:1a:
65:ba:95:3b:e6:14:48:69:65:9b:b4:b2:ee:43:86:18:98:51:
c7:2c:29:9d:4f:41:c6:c1:c6:e3:aa:5e:4f:12:80:70:ed:f7:
f1:b0:7f:71:15:c9:6f:df:79:80:0f:05:49:21:59:76:bb:7b:
7a:77:b0:72:1c:6b:9e:4c:65:02:fd:05:18:4c:63:7f:37:81:
ae:7b:93:dc:59:b2:6b:6a:63:52:0b:5c:3f:0b:df:34:18:15:
ec:7d:9f:57:b1:b4:f6:b8:1b:bc:8a:72:09:89:f3:71:d5:9d:
8a:b5:24:a7:ca:ba:30:35:e8:a9:4f:46:6a:83:2a:f8:86:9c:
c9:11:83:22:b4:c1:3a:9a:35:9b:26:4d:69:34:af:c1:a3:c1:
0e:4b:66:11:d0:47:54:86:09:42:a5:5f:43:0a:00:d8:8c:ad:
6d:95:70:9f:a1:a9:30:e7:12:b3:10:9a:ba:38:d1:fe:82:0d:
79:96:0d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:48 2026 by rpki-client