Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
File: tgcVWH7cyzJajXwPWkLY8EOHHbc.mft (raw, json)
Hash identifier: Ehqah6syBTD4lO4zs45qGW5x93dkgtuMlEA23N+p1fk=
Subject key identifier: ED:09:B4:65:69:82:2D:DF:83:20:A7:A5:62:AE:A7:C3:53:03:C3:BB
Authority key identifier: B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
Certificate issuer: /CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Certificate serial: 019D3909D5426C15A64144DC092E10A159CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
Manifest number: 03B5
Signing time: Sun 29 Mar 2026 10:00:38 +0000
Manifest this update: Sun 29 Mar 2026 10:00:38 +0000
Manifest next update: Mon 30 Mar 2026 10:00:38 +0000
Files and hashes: 1: eB4gEEpPyWFq6clsUK7vv51vvfQ.roa (hash: vOzaKzOf/nV2cWIeYZMZ7vTHjq9ov1FtZCm3hsoyh/8=)
2: tgcVWH7cyzJajXwPWkLY8EOHHbc.crl (hash: YsoX9ZdToGYvft0867rEXaxkun95EpHE8/OUxH8Ig3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d5:42:6c:15:a6:41:44:dc:09:2e:10:a1:59:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Validity
Not Before: Mar 29 10:00:38 2026 GMT
Not After : Mar 30 10:00:38 2026 GMT
Subject: CN=ed09b46569822ddf8320a7a562aea7c35303c3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3f:a4:38:bd:01:30:91:70:84:23:9b:3d:74:
fe:d8:06:d2:b7:d3:84:c2:3c:7a:0b:9a:3f:c3:96:
14:17:bf:73:2f:6d:18:2d:9c:d9:33:b7:49:a6:c4:
7d:95:ef:ad:5f:4e:32:3d:d3:ca:1b:03:25:0b:34:
92:09:3a:dc:a4:f4:78:25:de:2c:4a:d5:07:e0:d9:
72:b8:06:77:66:09:f4:17:17:5c:11:3c:fc:f2:f1:
43:4c:c9:45:04:8d:d9:a5:97:f0:60:fd:99:07:53:
64:5a:40:b7:87:4e:7f:70:e2:1b:e3:10:bb:77:bf:
c6:47:cb:c1:e3:55:e7:90:2d:d9:03:f5:06:01:cb:
fb:a7:94:58:f0:d0:cf:3b:13:4e:70:73:96:ac:60:
b5:93:83:23:51:12:3d:d5:cf:8f:cd:47:01:e4:cc:
ea:83:62:83:eb:e4:fc:fe:1d:39:bd:28:23:49:06:
33:fe:88:14:6b:83:6d:38:06:4c:f8:12:59:ec:85:
3c:95:c8:cd:96:b6:8c:52:8f:0e:eb:bb:26:02:80:
48:71:6f:ef:31:a3:5b:bd:1f:a3:4a:90:4e:5f:93:
aa:5f:8e:6a:f9:c7:0b:34:1c:62:12:d7:6f:46:b1:
96:7d:1a:4f:3a:0a:d9:d5:68:2b:b4:dd:b9:71:cc:
6c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:09:B4:65:69:82:2D:DF:83:20:A7:A5:62:AE:A7:C3:53:03:C3:BB
X509v3 Authority Key Identifier:
keyid:B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b5:69:ff:ed:34:3b:1a:12:7b:9b:85:40:66:f1:3d:42:7f:
f1:dd:d9:80:84:d2:1e:2e:b3:25:15:d9:ac:d8:9f:de:b4:f8:
a4:57:58:48:45:57:27:88:d7:b2:03:a6:3b:c3:03:b7:01:75:
bb:98:9e:25:ff:67:d3:8f:f1:bb:ab:83:23:c6:54:3f:9b:da:
da:02:d8:b4:53:0f:bb:d8:5c:75:c2:69:db:d0:0f:53:33:f1:
fc:56:61:43:7d:ce:b8:f1:cf:6a:2a:e3:a8:c5:c2:24:7f:db:
ec:06:fb:5f:7b:ec:2d:80:b5:6c:e4:af:f4:c2:98:c4:0f:28:
73:c6:1c:c0:1b:dd:25:4b:87:de:c0:36:4b:f5:b1:81:f4:82:
96:89:0c:61:a9:3d:8a:59:68:69:f8:e4:68:ad:dd:04:ac:2c:
40:11:85:42:86:6f:45:4e:1a:78:da:06:3b:08:74:20:0b:44:
83:38:e2:89:2a:39:6e:fe:5f:51:d5:38:09:0a:6b:f0:75:dd:
18:e1:75:55:63:bf:e4:a7:45:5b:ac:2a:dc:a4:3a:0f:d9:84:
35:20:5a:0a:ee:42:5b:19:09:02:11:b7:ff:b0:4f:fb:e0:cb:
c4:87:70:a6:da:20:0a:0f:f9:8d:db:ae:61:d5:a6:b2:5d:5a:
1a:25:c7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:48 2026 by rpki-client