Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
File: tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json)
Hash identifier: mmo1IvKB9bzYC3PObjWywckREpv6CKXDxVXO2TlOkJY=
Subject key identifier: 0D:15:F5:8B:7F:03:62:43:5C:A4:88:56:91:71:AA:01:D0:66:F5:B3
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 019CE33542B38735CE9D6252A3F7A305F34E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
Manifest number: 088C
Signing time: Thu 12 Mar 2026 18:00:44 +0000
Manifest this update: Thu 12 Mar 2026 18:00:44 +0000
Manifest next update: Fri 13 Mar 2026 18:00:44 +0000
Files and hashes: 1: Bl3sRdVXNfJpY6b4S8cUpd5mA1I.roa (hash: Tra0gJRg7Sdu8UJqi6AHrAI7bigGVXmLkWidwg3C4tQ=)
2: PKNrfh3XImYcJKqE7W0yYI6OiUY.roa (hash: sziy6P9qjmgMh/Wjufdq7yg5DrB3okhv2h8JK1TFDTU=)
3: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: TWaWEbiCyD3qL52U80vdfREI3jfCcIGqhF/u66zvsQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:35:42:b3:87:35:ce:9d:62:52:a3:f7:a3:05:f3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: Mar 12 18:00:44 2026 GMT
Not After : Mar 13 18:00:44 2026 GMT
Subject: CN=0d15f58b7f0362435ca488569171aa01d066f5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:99:d5:fd:b1:77:9f:53:02:46:b8:39:1d:e4:
2b:0b:8f:31:6f:9a:5c:a3:06:05:5f:69:fd:24:a5:
79:d0:9d:ba:b7:e1:e5:68:dd:c5:ef:ee:89:07:b0:
9b:81:93:37:17:c8:05:c0:c7:fc:34:1f:a9:4b:0f:
50:3e:db:53:03:53:e0:48:e4:8c:4e:f0:92:8e:c8:
18:3b:9c:b1:f9:4d:05:3f:46:f5:5f:0e:76:b1:6d:
1a:94:05:05:d6:8a:a1:3a:9a:68:fb:64:01:07:a6:
80:ad:d5:5f:76:0f:bc:be:8d:9e:f4:3d:68:fa:ef:
f4:37:f0:e5:7f:d5:fe:75:83:17:e0:21:e7:d0:1b:
8f:94:6e:54:fc:15:d0:b6:2c:f7:33:d0:17:c9:e1:
7e:e0:ef:bf:e8:9f:9f:95:de:c1:d0:84:30:3a:54:
24:0a:e5:67:e7:27:13:af:e5:00:96:c6:d9:a6:30:
b8:00:40:fe:1b:e0:dc:44:f4:a0:6f:6f:32:eb:b9:
36:56:8b:45:af:bb:89:f4:aa:86:91:28:07:0b:f7:
d0:b5:56:15:85:b0:80:25:54:5d:f3:8b:f7:49:57:
25:68:9e:3a:ed:5b:b9:e3:91:29:c1:e6:b9:2b:62:
b1:17:e6:b4:af:46:0d:76:68:ca:36:df:77:b6:e1:
3c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:15:F5:8B:7F:03:62:43:5C:A4:88:56:91:71:AA:01:D0:66:F5:B3
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:48:3a:64:8e:f8:3c:1e:60:8f:e5:49:e9:9d:e8:a6:4a:98:
77:11:87:d1:84:49:c1:2e:9a:05:83:e8:6c:17:21:4d:16:cc:
17:26:fa:6d:ec:e9:7b:5c:50:ae:e9:4c:f1:cb:3d:e6:f2:17:
96:0d:1e:81:e6:3f:47:4f:a2:ad:39:58:c6:d5:91:18:b7:e1:
81:35:ff:bf:a0:e1:f4:0f:e6:b9:f3:f7:09:cb:d0:9c:06:5f:
9a:b3:d0:1c:b4:93:17:f9:bd:68:5b:0b:d0:3c:3d:6d:fa:4f:
1e:ff:fe:f8:03:78:1e:ab:d4:44:7c:34:28:70:98:c2:a4:01:
e2:8d:7b:44:5b:d6:6f:e6:12:52:75:a3:11:48:6e:83:af:d6:
8e:e9:9c:74:ce:fa:6a:77:10:63:c8:0a:8d:9a:f5:d1:f6:5f:
b5:51:b6:dd:6b:84:bc:1e:e9:58:25:6f:a2:7d:d3:3b:7a:32:
45:02:be:0a:c0:3d:d3:a4:67:70:4d:16:a5:68:d8:78:4c:d2:
04:b6:bd:17:3c:db:80:fd:5d:a4:b8:99:3d:56:73:9a:7b:09:
b4:1c:18:15:13:b5:06:e4:97:40:40:6f:5d:a7:93:ee:0e:45:
61:a4:5a:86:19:24:ff:0f:00:b6:97:24:12:0e:9b:94:2d:f3:
51:6d:f5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:03:33 2026 by rpki-client