Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
File: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft (raw, json)
Hash identifier: iCCgftTI898FwnVLVnXtvTucUP5JdppHsOLSmwMFI9g=
Subject key identifier: 70:D8:4C:B6:17:EB:C5:DF:17:AC:24:EF:C3:36:BB:F7:32:0A:6A:13
Authority key identifier: B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
Certificate issuer: /CN=b48184549e12e9934bffb7615bca3d0c25681360
Certificate serial: 019D378966FC0037DF84060CED7B9CC456AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 03:00:44 +0000
Manifest this update: Sun 29 Mar 2026 03:00:44 +0000
Manifest next update: Mon 30 Mar 2026 03:00:44 +0000
Files and hashes: 1: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl (hash: lKKM8g27Ko2QVTGPB/pxrPai/eRxUWUeUbDctppgafg=)
2: tuDCv4lvmfDzJRQ3OOYakiJXpLk.roa (hash: B9WwSI4TdVDoQmekvK0lWtI32JXbnkCFS/fzwW4JyBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:66:fc:00:37:df:84:06:0c:ed:7b:9c:c4:56:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48184549e12e9934bffb7615bca3d0c25681360
Validity
Not Before: Mar 29 03:00:44 2026 GMT
Not After : Mar 30 03:00:44 2026 GMT
Subject: CN=70d84cb617ebc5df17ac24efc336bbf7320a6a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:58:fd:97:f2:9c:df:6b:41:7b:fc:96:75:b8:
4a:ec:c9:20:c7:29:83:90:55:6f:0f:d4:2c:d6:57:
70:bb:69:45:25:29:e3:32:58:23:cb:7e:f0:4d:55:
e1:72:ec:1b:80:3f:27:e9:13:62:a7:c0:e7:73:9a:
7e:ad:58:7e:72:cd:18:03:a4:78:df:41:07:75:38:
42:56:b6:1c:ee:a4:09:6c:d4:48:51:14:6f:d6:8e:
4d:79:f6:47:e0:23:0e:70:e0:e2:89:32:88:24:fb:
7c:58:d3:a8:e7:c8:b9:be:7d:22:53:99:64:f3:4e:
2a:4c:b0:82:0b:24:61:ae:98:b2:3f:fb:ee:a2:de:
05:31:ee:0b:74:93:32:30:46:2e:06:c5:db:ee:46:
55:fa:94:1d:5a:3c:be:38:f7:5f:58:98:6a:50:98:
1f:46:89:f5:8d:7d:37:14:14:38:e8:f5:92:16:9d:
f8:cc:bc:ed:61:df:4b:29:5b:09:bb:f6:9a:55:61:
cc:17:6b:c4:11:14:04:6b:2d:19:01:8f:4e:4d:72:
16:23:fe:c8:b1:60:ab:03:08:c5:8e:0f:ad:3e:03:
ba:af:be:ee:7c:59:3a:0e:00:90:43:4d:7f:35:6c:
8b:24:ba:ba:91:64:fa:eb:b2:64:48:5a:39:db:04:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D8:4C:B6:17:EB:C5:DF:17:AC:24:EF:C3:36:BB:F7:32:0A:6A:13
X509v3 Authority Key Identifier:
keyid:B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b3:d5:6d:5b:30:96:43:4b:dc:f8:b0:8c:33:22:9d:40:ff:
27:4a:7e:3b:83:cd:3c:92:a2:92:57:94:73:3d:e8:5f:60:e5:
46:e4:77:00:c5:da:f6:66:f6:14:9e:9a:db:f3:05:8e:ff:47:
f9:9d:10:a0:70:dd:57:02:b9:4f:4d:10:85:d4:a6:c8:4f:4b:
64:c5:f4:87:cc:ae:01:76:6d:4c:ce:82:59:db:cc:1f:14:66:
3f:27:2a:9f:ce:b9:df:ec:68:b2:2a:f4:11:bf:d4:ba:3e:d2:
56:75:9a:3e:66:d1:96:cb:ca:d0:f2:fa:7e:65:99:8b:99:ad:
05:59:32:ec:45:f4:c7:16:f9:f0:cb:bb:a4:a6:d2:e5:60:10:
d9:85:27:fa:28:0b:88:0d:c0:d9:29:fb:ba:87:0c:7f:ed:fe:
a5:0d:d5:9e:83:2c:38:47:d7:36:d6:bf:07:36:f6:94:75:4f:
5b:3c:69:60:49:9c:ed:17:45:32:5a:73:db:12:f6:43:b4:e8:
be:b7:32:20:7d:aa:5b:46:2f:bd:03:0e:51:70:ed:3e:64:2f:
a5:e9:39:e1:32:2d:be:fa:3d:be:34:3f:d1:f0:d5:5f:a1:66:
9a:20:18:6b:d4:b3:28:00:7a:0e:33:f4:c6:d1:f5:dd:7b:94:
bd:a5:41:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:21 2026 by rpki-client