Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: 91isCBFsy3Wo2oaVKVza5JxtiCzqOvcI3Itfum+r1Pc=
Subject key identifier: 4A:DC:AC:AB:61:DE:1D:1C:44:DB:D1:C1:6A:C5:F0:1F:8F:ED:9F:54
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 019E31BBC5A7A79B58EF75590CC36960FE3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 17:00:49 +0000
Manifest this update: Sat 16 May 2026 17:00:49 +0000
Manifest next update: Sun 17 May 2026 17:00:49 +0000
Files and hashes: 1: 1-XW1Sz2PaZ2CH23FH35lEDI1Dvg.roa (hash: OwzM/XrJoESuDpIjRWGFQ9kHnBpSBVpQxsgx+bma9vw=)
2: t8HbGCUUFDZ79HOoIDzniW_5CjE.roa (hash: bURUeHYTHQjo9pWgWM8FHgpTvl8hZ3bV5mZnZQ6g4Cs=)
3: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: S74+1qEZxjnARig3awsYl8U1RT1rzlqyMqfGGBaYsKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bb:c5:a7:a7:9b:58:ef:75:59:0c:c3:69:60:fe:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: May 16 17:00:49 2026 GMT
Not After : May 17 17:00:49 2026 GMT
Subject: CN=4adcacab61de1d1c44dbd1c16ac5f01f8fed9f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a6:f2:06:e0:71:3f:09:90:ec:6c:d3:c2:5b:
bb:96:e1:1e:72:3f:b4:7c:26:a7:c7:f4:75:93:e7:
1f:b5:01:85:a4:ac:80:22:a8:25:71:23:07:f9:bf:
1a:37:64:96:db:9e:57:03:00:21:33:44:d8:b2:e0:
ce:75:a3:8d:a2:8b:b6:4e:56:ff:30:bd:39:95:98:
20:2d:c1:49:8f:db:60:e9:72:be:15:43:de:e7:cf:
1f:68:03:b8:35:93:3f:c2:18:69:b9:73:d4:2e:a1:
4d:db:fb:42:c6:5d:8d:77:89:89:f7:46:b3:86:10:
e9:fe:c9:ce:11:b6:38:2a:1d:96:be:65:bf:d7:47:
23:08:79:1f:2c:4b:5f:54:4c:50:b8:2d:87:85:7d:
d0:96:e6:64:70:bc:66:25:d3:c3:4f:b4:c8:04:cc:
67:db:30:a6:07:26:01:f4:8b:ce:c8:d0:1f:44:c1:
25:5e:cd:0a:2a:c3:40:de:cb:e3:85:58:be:3e:88:
44:c0:a3:13:e8:68:67:b1:3a:60:cd:4b:a5:2f:1d:
da:78:2d:09:cf:5f:0a:f9:4f:bb:42:d8:7c:48:9b:
f3:f2:47:c5:93:d8:62:48:fd:8f:f9:29:c5:c8:2d:
09:4e:f7:e5:be:d9:20:e2:38:9b:89:b4:81:8f:01:
2c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DC:AC:AB:61:DE:1D:1C:44:DB:D1:C1:6A:C5:F0:1F:8F:ED:9F:54
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a0:e5:7e:f0:d5:0a:e3:ca:d1:fd:9a:86:75:63:cb:93:6b:
bf:63:0c:fe:8a:9d:4f:db:2b:3b:be:d2:8b:a4:1a:57:3c:4c:
fd:5a:f7:d5:4e:90:4b:5c:41:61:c3:5b:a1:e3:fe:de:eb:7f:
98:a9:b2:13:de:73:95:3f:6a:49:73:e0:a5:05:86:93:3c:13:
6c:5c:c8:28:a3:be:7c:e0:0a:26:1c:b3:8b:59:d4:66:8c:90:
80:7d:72:a5:3c:2d:c9:22:81:19:78:7d:75:df:99:a4:a9:6a:
c5:4c:7b:67:32:c7:b4:98:cf:86:2f:33:36:c6:9b:93:7d:b3:
a0:41:ef:06:af:bd:61:84:8b:40:fd:c8:7a:50:6c:b2:10:fc:
0b:6c:4d:35:04:bb:ff:e9:de:bb:cc:11:a5:9d:b3:23:83:df:
9d:e9:a1:b5:ed:5b:2b:a2:bf:69:97:5e:f3:ee:90:9d:e7:e3:
46:1d:7d:11:65:b8:87:70:8c:5b:bd:4b:21:24:7a:c9:01:02:
90:e8:78:d8:8e:30:ce:41:df:22:af:21:c8:bc:e8:0d:76:4a:
ae:13:44:33:ae:bb:7b:df:f2:10:ef:07:08:50:14:16:c7:50:
96:23:d1:f8:92:ec:65:6d:99:84:66:ce:88:97:33:33:2b:7d:
df:bc:b1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:31 2026 by rpki-client