Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
File: tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft (raw, json)
Hash identifier: P9LOcCcZawPBZG02piTz9y/douFWfehCGWl+HWRZT5w=
Subject key identifier: FA:0C:AD:E7:EC:D5:7A:35:64:E0:74:E3:68:B8:8B:91:D1:97:50:51
Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
Certificate issuer: /CN=b573d2dda93e420409163da59e7414ee91a2eef2
Certificate serial: 019CE1EBE8BBD7F171811846FC4C6FCE4C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
Manifest number: 0300
Signing time: Thu 12 Mar 2026 12:00:59 +0000
Manifest this update: Thu 12 Mar 2026 12:00:59 +0000
Manifest next update: Fri 13 Mar 2026 12:00:59 +0000
Files and hashes: 1: 0mP1ztpahebUSVqYXstfQVo6lU8.roa (hash: ROTZ3HoBIhGjMRa1VghM4xscpCElB4RFAaHFDBzcBcc=)
2: tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl (hash: /ZhWd/exVaww/Jh0wPS9fgmCH4zzdPyfiNNZCP9CXRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:eb:e8:bb:d7:f1:71:81:18:46:fc:4c:6f:ce:4c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2
Validity
Not Before: Mar 12 12:00:59 2026 GMT
Not After : Mar 13 12:00:59 2026 GMT
Subject: CN=fa0cade7ecd57a3564e074e368b88b91d1975051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ff:4c:0b:1f:8e:d5:63:e4:f8:97:2d:da:b1:
d3:24:24:4e:3f:cd:79:27:cb:1d:dd:85:79:34:5a:
0b:86:e0:73:bf:2c:e2:5e:df:be:9e:74:36:08:a3:
50:fc:c8:d3:c0:4f:1a:36:26:3e:aa:ac:b6:7b:5e:
a7:1b:00:54:e8:c2:62:27:d0:af:2d:85:9e:8e:95:
1b:fa:2c:a0:bb:f2:fd:45:14:17:ca:45:2d:e1:bf:
c2:cc:e3:ba:1d:2f:9e:fe:ec:cd:df:65:28:81:e4:
2b:64:25:a5:5a:6e:e9:e7:3b:4a:ef:42:69:6c:ba:
98:ff:f6:35:88:85:46:78:06:5f:cd:aa:ea:a4:69:
fb:c7:e1:90:12:c6:e2:7b:b3:9c:5a:9b:74:10:1c:
76:04:43:38:99:07:7a:89:a7:07:d4:8b:fb:ca:b5:
13:30:c2:d5:8a:a9:36:98:e1:ec:6e:18:0d:f8:a0:
59:b1:6d:1b:6b:3e:f4:58:37:f7:ad:7a:85:80:ce:
70:47:42:fb:e9:22:52:8b:e6:ca:1f:7e:e3:ce:0e:
d3:44:c7:5d:39:81:10:3e:97:ae:0f:7a:b1:f7:ef:
68:92:5f:ae:88:e5:e2:be:24:7b:9f:76:43:0c:4e:
f7:37:6f:22:75:c9:bb:13:b1:93:f0:d2:bf:7e:fb:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0C:AD:E7:EC:D5:7A:35:64:E0:74:E3:68:B8:8B:91:D1:97:50:51
X509v3 Authority Key Identifier:
keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4a:e8:2c:19:20:35:3d:a9:2e:34:4f:fd:9f:9e:cc:bb:80:
a5:43:2f:4d:ca:e5:8b:5a:ae:37:f3:d8:fe:3a:05:09:36:19:
ce:01:d2:0a:2b:65:ce:fb:ac:f8:69:96:e8:ac:67:c7:56:14:
ac:14:ee:55:5f:1b:73:30:09:7b:35:48:ba:10:76:5f:5e:b8:
67:ac:3c:48:ce:56:3a:81:bf:17:45:e3:d9:ed:9d:8b:ed:d9:
f2:eb:09:25:fe:76:20:f4:67:f6:a0:25:af:d4:7e:a6:89:af:
ad:9c:74:1e:b1:2a:12:39:66:a9:2d:ff:83:14:36:5a:64:cf:
3a:fa:36:b8:95:3d:ef:72:ba:7a:6d:62:36:0f:7e:cf:41:74:
80:c0:4c:0e:48:07:be:b0:58:f9:fb:68:21:40:3e:a0:96:56:
be:dd:33:ff:7f:e0:48:3a:ba:f9:8a:a0:22:b3:24:fa:4b:fa:
e0:56:d7:99:c8:9a:e3:e0:6d:03:e5:33:82:54:a4:9a:0e:d7:
e3:8a:63:e7:d7:cd:52:4c:cb:4e:e3:4f:a0:ec:05:3d:1b:f0:
39:9d:40:f5:54:07:cc:a7:3e:31:a2:e9:14:78:b6:89:15:d4:
35:91:e7:93:a8:36:ca:a2:1b:8d:b1:32:38:91:31:76:f7:c9:
c7:67:0e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 16:34:18 2026 by rpki-client