Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
File: tI8GPSnpEPAzvstlbouZAfaeyXQ.mft (raw, json)
Hash identifier: 7vsbdcW2CVO4bXgn1f4mw2VU9YDIGnxdThUiEec/8Xo=
Subject key identifier: 40:33:1B:77:65:E0:62:9E:5F:B1:45:20:35:0B:9F:FB:D5:4C:26:5D
Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974
Certificate serial: 019D390A576747D970F28B44A9ED8F8C35DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
Manifest number: 118E
Signing time: Sun 29 Mar 2026 10:01:12 +0000
Manifest this update: Sun 29 Mar 2026 10:01:12 +0000
Manifest next update: Mon 30 Mar 2026 10:01:12 +0000
Files and hashes: 1: YrqYNM1Pym45hQFacw7cbC8M_eA.roa (hash: o7i0wNONs0dKHmOQelWnN9IgkyF6F7BCOkRiYH+yl44=)
2: oxlX37hwRfJw6rYvD_DlOds6oAM.roa (hash: NBmTSUZkwjvyNiisqMltw+Cq5Ss6K9JzeUmdp5uxYs4=)
3: tI8GPSnpEPAzvstlbouZAfaeyXQ.crl (hash: xHsyLi48MoMs6p8L3kqVdwokI2dH8ZUjoXxxSPyY6jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:57:67:47:d9:70:f2:8b:44:a9:ed:8f:8c:35:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974
Validity
Not Before: Mar 29 10:01:12 2026 GMT
Not After : Mar 30 10:01:12 2026 GMT
Subject: CN=40331b7765e0629e5fb14520350b9ffbd54c265d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:dc:a1:79:66:b4:34:70:61:d7:b6:f6:bc:
78:c8:80:8c:2d:65:ff:2a:bd:bc:84:5a:ae:12:84:
97:71:5d:e5:f2:a6:86:25:d5:a4:57:0a:a7:46:2e:
89:8b:cc:69:9a:cf:71:6c:40:d6:fc:75:cb:b5:c4:
7b:12:79:20:3e:79:82:67:42:4b:79:10:ce:41:9e:
87:6a:d4:98:b5:e4:aa:20:8f:6e:17:8b:21:60:a6:
0a:31:11:ed:9c:77:75:fa:5d:2d:22:da:69:af:c1:
58:e7:4e:e6:9b:9e:15:14:16:e2:b9:7c:8f:13:b8:
8f:a9:ef:d6:2c:b3:f0:f4:6e:9c:29:6e:9f:c9:68:
08:21:4f:a9:b6:ed:47:a9:e9:cb:84:bf:92:8d:f3:
30:cb:c9:33:db:6d:8c:a4:f0:de:70:6e:66:c0:ff:
e7:7b:d2:54:80:44:e8:17:8c:34:b9:80:53:71:4f:
31:59:e7:19:13:64:73:d9:52:d3:41:bb:fc:ef:e5:
e0:b2:b6:53:6b:9e:a8:f5:51:c0:73:c2:3b:0f:7f:
ed:5d:2a:4c:df:0c:94:2a:6a:9b:4f:01:a8:32:a1:
5f:a7:ec:65:62:16:d8:5b:9b:64:ed:93:32:0a:dc:
73:35:df:52:91:9a:00:30:ce:58:f1:02:0b:23:ba:
9a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:33:1B:77:65:E0:62:9E:5F:B1:45:20:35:0B:9F:FB:D5:4C:26:5D
X509v3 Authority Key Identifier:
keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b0:59:99:4a:c9:ce:df:91:d7:0c:46:f3:34:5b:5b:1e:fe:
1e:8e:31:b8:d2:29:ec:fb:cd:21:83:00:58:da:46:59:f6:38:
6a:17:ab:a3:ac:0e:e3:c4:e6:46:b6:3b:0b:8c:78:30:f0:79:
55:38:54:58:08:7d:2d:e1:2a:a5:7f:eb:c4:49:61:4d:43:0f:
b0:55:dc:d4:41:96:fc:6f:6a:fb:49:66:f6:77:e0:db:0c:c6:
ec:65:35:20:e5:0d:c0:14:79:bd:e7:c4:ad:76:62:42:5f:62:
21:fe:2e:de:d7:ea:2b:b9:aa:7b:4e:10:17:64:d0:15:13:b3:
c0:ee:ad:b6:de:a7:86:63:13:e0:c6:f8:41:3e:b8:ef:10:2e:
bd:4a:81:2a:6d:de:af:e8:f8:26:14:0d:44:cd:35:9d:d8:5e:
25:52:69:b2:7c:4d:42:ce:cb:62:76:7b:40:72:38:cb:73:0a:
a5:86:1d:2c:cc:c8:e2:d0:28:29:d7:b2:96:cd:d9:11:42:bf:
1a:a6:31:80:19:4d:d7:43:dd:f8:95:5c:62:64:4d:fc:2d:bb:
fd:59:e1:05:52:19:01:0d:63:50:37:24:43:c9:d9:02:7f:67:
3c:93:5a:e9:9e:14:c2:78:b5:d0:37:10:41:68:bf:0a:2c:c0:
3b:7b:9e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:56 2026 by rpki-client