Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
File: tBErtZsGJ9ojr5DA8FhLcbUPd48.mft (raw, json)
Hash identifier: +29Rr+bIUiaMMMAMktmgM1NEoUjUSVlLWJbHueSptxU=
Subject key identifier: 9A:B9:36:B6:75:6A:21:8F:DC:71:E6:90:A1:2B:AD:F9:F8:A5:CA:36
Authority key identifier: B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
Certificate issuer: /CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Certificate serial: 019D389BB8ADAA81506CEFBCDC1914B9185E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 08:00:22 +0000
Manifest this update: Sun 29 Mar 2026 08:00:22 +0000
Manifest next update: Mon 30 Mar 2026 08:00:22 +0000
Files and hashes: 1: LYGy5EllLjLC7TGMDgwkX0_QvDU.roa (hash: xMfq4e5OlYkNcnNj+cpAE6tuZxSVsEy28YruLrqthqE=)
2: tBErtZsGJ9ojr5DA8FhLcbUPd48.crl (hash: n+Jh8vKraMCBQMFoABjh3KO87Fa4NSi/2VKDYpMUZA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b8:ad:aa:81:50:6c:ef:bc:dc:19:14:b9:18:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Validity
Not Before: Mar 29 08:00:22 2026 GMT
Not After : Mar 30 08:00:22 2026 GMT
Subject: CN=9ab936b6756a218fdc71e690a12badf9f8a5ca36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:9a:59:18:9d:84:77:89:0a:ff:ac:e4:a8:
33:97:51:ad:3c:46:8a:03:2d:a9:1b:7c:f1:5d:8a:
19:c5:90:52:76:35:62:e8:d6:66:0a:ba:7b:80:07:
23:0d:ed:84:d9:6f:02:b9:3c:fc:07:a7:a7:07:c2:
dd:e6:2d:41:c8:ca:13:58:15:1f:f2:60:2e:86:d2:
41:11:2a:88:3f:63:e6:6c:77:9e:87:8b:24:c4:d5:
08:1a:c9:bc:42:eb:9b:b5:9c:24:6f:5a:63:da:87:
6e:3c:03:bc:66:b9:41:aa:44:20:9c:62:82:84:6c:
07:2c:51:5f:6d:e9:06:b0:89:8e:e5:e7:29:a2:b1:
95:88:3b:93:69:b4:4a:6a:2f:ac:29:b7:50:8b:bf:
60:0f:54:49:ab:48:c8:d4:49:6b:7e:80:2e:9f:dc:
8f:44:6b:1d:29:22:42:cb:65:3b:5a:14:29:48:27:
54:3d:e1:93:ec:a6:5e:94:75:45:6c:1d:ae:b5:8b:
5f:f2:91:e5:9f:c8:ad:8f:e3:5b:5f:b9:da:e6:e1:
e9:b3:a5:29:c9:0e:49:54:44:c2:59:7e:02:07:a7:
4b:e6:46:8f:34:77:84:4e:75:ed:62:0a:13:e5:68:
5f:a5:55:4e:bf:a8:6b:29:38:0c:04:f3:5c:00:4c:
7d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B9:36:B6:75:6A:21:8F:DC:71:E6:90:A1:2B:AD:F9:F8:A5:CA:36
X509v3 Authority Key Identifier:
keyid:B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4e:8d:b5:1d:65:38:c0:0e:d6:c8:8e:f2:40:93:3d:69:a0:
91:85:f7:d6:cb:76:fe:80:03:d8:3c:e4:b7:ce:f3:fc:0b:74:
cc:99:6d:64:34:f6:e8:4b:7b:f9:51:c4:c8:8b:2f:ff:be:e3:
69:d3:1a:92:f7:d2:87:38:18:64:0b:78:a4:cb:13:49:56:ef:
6c:87:aa:80:a5:8e:b2:08:ad:24:8b:09:fe:51:87:92:95:d1:
32:a4:3d:2b:04:f4:00:0d:bc:16:9b:af:60:bc:68:88:19:c6:
0e:ff:03:9c:cd:bf:0c:00:9a:f0:78:57:f1:e7:f5:76:d8:74:
e4:e0:df:02:e9:e3:7e:c0:b3:60:9f:92:50:05:f6:e8:7c:ba:
c0:6a:5b:e7:28:7c:3a:39:db:6a:ee:f2:a6:35:55:1c:3e:2e:
cc:37:46:b2:fc:16:07:62:f2:b3:4b:a6:25:8c:fd:7d:aa:da:
65:c2:60:c1:a7:be:52:16:8e:42:a2:aa:5f:98:82:b3:b9:f3:
d9:f4:d5:17:c8:e0:64:f8:1f:6a:c7:4b:52:41:dd:ed:9a:e3:
10:78:a6:ed:da:60:1b:d2:29:b1:9a:ff:31:b3:83:84:c3:1d:
fc:9c:84:69:7d:20:78:27:c4:16:e4:45:79:e4:6c:f1:dd:c9:
0d:e2:0a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:24 2026 by rpki-client