Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
File: tFrdzVeWSPw_YSTlWEee8LB_AYw.mft (raw, json)
Hash identifier: YgjhFo4zmqLsLTLx0pTB7Z0e/MhVIc1iqFZvNp4S280=
Subject key identifier: 89:70:CE:0E:19:67:32:36:B9:50:CE:EF:DF:35:92:C6:28:52:57:53
Authority key identifier: B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C
Certificate issuer: /CN=b45addcd579648fc3f6124e558479ef0b07f018c
Certificate serial: 019E295DAC241647994E5CC11DE5B381A0D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
Manifest number: 0687
Signing time: Fri 15 May 2026 02:01:05 +0000
Manifest this update: Fri 15 May 2026 02:01:05 +0000
Manifest next update: Sat 16 May 2026 02:01:05 +0000
Files and hashes: 1: KtKgrqLsZRkrGS4es-oGTIqwVlw.roa (hash: UPj/hJOC1lHG60eBQqDh4t+3G4IYr9OwL7yonWIDfi0=)
2: aawE-pz8srrT5MJYzHNLBXRsTIo.roa (hash: q6aO+UEvoLi+uji805zaER2sJ0t42VLw5m+o0+yFdgw=)
3: qh7UtXFS8GM0jt3hkapz3mDCQ5Y.roa (hash: bK/ZSD9IopAichABUi1qk65QlYFISbXCl3LiF+vq1SQ=)
4: tFrdzVeWSPw_YSTlWEee8LB_AYw.crl (hash: hbc1B8GxtQE51q/7KdrqAebF6fz2KymP0Oy2f2XEprs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5d:ac:24:16:47:99:4e:5c:c1:1d:e5:b3:81:a0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45addcd579648fc3f6124e558479ef0b07f018c
Validity
Not Before: May 15 02:01:05 2026 GMT
Not After : May 16 02:01:05 2026 GMT
Subject: CN=8970ce0e19673236b950ceefdf3592c628525753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:5f:0e:14:44:34:dd:ab:3c:70:6b:ca:d5:
7e:13:cb:55:ba:d1:34:b6:ad:02:26:31:66:9a:63:
84:b1:a4:34:d6:37:40:55:b1:37:de:76:63:4f:c8:
44:95:46:0f:f4:84:a1:24:09:a9:36:69:5c:39:12:
d4:cf:e9:d1:a2:e8:85:1a:85:1f:31:09:fa:2e:62:
1d:72:69:4c:e5:03:ff:ef:35:0f:f1:8d:88:56:c1:
a1:18:31:62:93:ca:e7:a4:c9:1d:58:17:8c:81:10:
07:0f:3f:4b:cb:93:d1:68:60:b5:43:af:47:8f:47:
e3:f6:13:19:e3:1f:cc:09:d4:73:18:34:9b:30:ed:
42:60:26:45:9b:6f:05:c6:fc:1c:de:67:a0:44:32:
4a:44:0c:9a:ee:85:11:e8:16:0b:ba:69:db:88:a5:
ef:f9:27:23:59:02:f8:79:68:99:d7:67:35:63:0d:
64:84:01:ce:f4:dc:ec:d2:2d:1e:91:c6:f1:b4:1a:
5d:a9:62:6f:f1:d8:a8:4c:31:31:8a:40:77:89:6b:
fb:0c:c4:92:1a:26:9e:bb:b6:69:75:22:8b:c5:4f:
98:00:c0:3c:7d:ed:e1:14:7b:ce:ad:99:10:a6:7f:
03:aa:cd:dc:f6:ec:bd:11:5b:b4:13:f0:d2:96:2e:
64:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:70:CE:0E:19:67:32:36:B9:50:CE:EF:DF:35:92:C6:28:52:57:53
X509v3 Authority Key Identifier:
keyid:B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f9:23:0d:c9:5e:ce:4d:d7:b6:d2:50:4f:bc:ab:1b:e8:11:
f7:d9:10:5a:85:f1:8e:dc:f5:7f:54:10:15:57:48:f1:cc:8f:
eb:74:68:5e:54:36:8e:b2:40:0a:bd:05:72:da:71:fd:43:20:
d6:0e:9c:20:64:1a:24:df:f4:9a:aa:62:ae:3f:0a:7c:fd:a2:
c0:39:4b:6b:3b:5b:82:7c:4f:df:5d:00:7c:91:89:99:0f:af:
44:47:e0:a1:db:8b:2d:7a:89:df:9d:b6:98:75:35:14:c0:5e:
3d:bf:1c:97:22:5b:c1:4a:80:2d:df:b7:29:03:3e:48:4c:4f:
c9:fe:e1:1a:09:b3:56:6f:ec:1f:50:7b:71:42:86:ce:27:68:
02:16:1f:fd:04:cf:2f:db:81:ca:be:a3:fa:c6:a1:ea:87:fb:
d5:b6:d4:77:3f:52:65:f3:aa:f5:e8:82:d4:28:cf:e2:72:f7:
ec:35:37:14:1a:40:a3:9c:3c:5c:9d:6d:17:d2:78:7b:4d:46:
43:81:b9:e4:2f:4d:68:ff:ec:4d:f4:92:d9:b8:dc:65:9b:eb:
a0:f4:62:41:c5:49:89:9c:0a:66:fd:05:39:e1:0e:1f:fc:a0:
91:b7:ed:28:93:b9:84:8b:e0:27:f8:ba:ca:e9:99:47:6e:57:
73:b2:8c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:51:43 2026 by rpki-client