Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
File: tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft (raw, json)
Hash identifier: srCRQBNzt10tf242I0gIjZqzRD7jkZtu2NlzhemQxXg=
Subject key identifier: C7:83:A5:9A:70:89:AC:D5:9C:4A:1A:3C:D6:F6:D0:66:0C:77:A2:03
Authority key identifier: B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
Certificate issuer: /CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Certificate serial: 019CEF397EB9C5118F1D2631F1DB3FAA2C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
Manifest number: 186B
Signing time: Sun 15 Mar 2026 02:00:48 +0000
Manifest this update: Sun 15 Mar 2026 02:00:48 +0000
Manifest next update: Mon 16 Mar 2026 02:00:48 +0000
Files and hashes: 1: JAq5IJt_YzdoY2C_mteXzLVmKq8.roa (hash: EJI1PbxAdj1+ZoLCqp8KLxjEKCW9Bl8uIJ8QELUabNQ=)
2: sudPoVqFg1PQZP7-xy4v565d_SM.roa (hash: tABC2SMeyK75v3oh2kumS0Pn8iv5DPrW8wlj3JIpyAM=)
3: tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl (hash: adHXFnQm7iWcsPT62lv6a/vvbgjplo5PKiA/VvE6q+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ef:39:7e:b9:c5:11:8f:1d:26:31:f1:db:3f:aa:2c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Validity
Not Before: Mar 15 02:00:48 2026 GMT
Not After : Mar 16 02:00:48 2026 GMT
Subject: CN=c783a59a7089acd59c4a1a3cd6f6d0660c77a203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:9f:7d:52:d6:db:ad:52:32:84:a8:96:33:
89:90:4e:ee:96:ac:e5:8d:78:75:d8:0b:78:d8:72:
a5:71:11:b8:45:8f:66:f9:75:a2:fc:c9:2e:75:f8:
b6:18:af:70:5b:11:17:40:4c:03:01:21:0b:9c:7b:
27:e8:f7:bc:9e:26:56:cf:b5:b3:06:1b:50:17:b8:
fa:a9:45:b2:88:4d:57:27:0f:65:77:2f:90:7d:78:
40:3d:70:2c:c6:58:60:c5:c5:81:1f:30:5c:06:89:
7e:cd:5b:00:56:20:cc:7f:ed:72:5f:99:92:2d:ff:
22:64:ac:f8:f3:d7:74:78:51:a8:bc:ff:88:c5:e6:
e5:68:b0:0b:47:1d:57:de:2b:af:bb:79:fa:08:ba:
61:ee:81:2c:24:95:27:33:68:bd:c7:d3:eb:b6:10:
4b:a2:9b:f7:1c:d8:c2:5f:fa:88:41:ec:3a:fe:2d:
83:39:d7:5a:19:aa:aa:d4:90:ec:3f:26:2e:ee:c4:
a4:45:fc:31:cf:64:49:8a:60:ab:13:26:3f:e4:f3:
f2:c3:26:05:89:45:16:24:8b:85:4a:07:62:3c:7d:
22:98:86:da:f0:57:a6:15:db:d8:b5:f9:a0:3c:85:
39:d8:8f:7d:8d:e4:6b:93:d1:7e:53:f1:0c:1f:59:
0b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:83:A5:9A:70:89:AC:D5:9C:4A:1A:3C:D6:F6:D0:66:0C:77:A2:03
X509v3 Authority Key Identifier:
keyid:B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6e:65:8f:ea:a3:ea:fb:ec:46:8e:f6:fa:59:55:e9:78:fa:
a5:b8:23:1b:a1:82:8c:35:51:11:ab:3f:b2:e2:69:11:8e:0b:
1e:8c:c5:6f:bc:14:24:d1:b4:74:e5:4d:d2:08:1b:dc:1c:41:
64:02:aa:f1:be:96:47:fd:b9:7b:bb:8b:2f:95:b3:f1:5e:a0:
87:22:08:8f:a0:1e:e4:f0:e2:fe:83:f4:ce:cd:27:b9:db:2f:
49:1d:a1:73:7e:ff:c1:16:11:f5:e2:d6:d1:19:bf:92:90:a8:
bb:71:eb:39:18:b4:3d:8c:e6:5a:51:48:3a:6d:34:09:26:d5:
ca:6d:b7:83:10:71:62:eb:c2:49:e1:5f:94:9d:68:9d:e0:09:
a2:fe:71:8b:8d:d5:08:27:d3:d8:4a:d8:a1:75:23:f2:b7:97:
d9:7c:01:d8:d7:57:c1:8e:6d:30:36:6b:95:5f:d6:43:90:1e:
5f:2f:06:72:f7:67:ef:95:bf:e6:64:1c:7d:46:36:b7:84:28:
96:f8:a5:aa:93:37:db:b6:b1:81:6e:4d:a2:e3:81:36:82:e0:
40:1d:44:26:b7:fc:f8:6c:16:cd:b0:25:f9:84:e8:2b:75:da:
8c:4b:8c:43:dc:4e:5f:9f:51:db:d3:2d:76:d4:e3:57:5e:fe:
a5:8f:0b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 09:39:10 2026 by rpki-client