Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
File: tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json)
Hash identifier: gEksIrN4+tI7BWQwbthGd9LW2/E2TPDghN/gqTJaORw=
Subject key identifier: 6F:BD:E9:38:F3:F9:6E:03:2A:F5:E7:53:C6:7F:E2:9A:9E:E7:8D:73
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial: 019D37C013DCB9F5A4A1695807E1B8FC92CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:00:27 +0000
Manifest this update: Sun 29 Mar 2026 04:00:27 +0000
Manifest next update: Mon 30 Mar 2026 04:00:27 +0000
Files and hashes: 1: 1-GyqlA5KmcLfrL7pM3klE299nlw.roa (hash: J/BXL3XYbhHb/gfys6Z72uUSQjUFONh9EZ4ff4040ZQ=)
2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: 3ipXDTI8h4i0J0u5N6w8EpOSz0ocPUtnzdvA69QHih4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:13:dc:b9:f5:a4:a1:69:58:07:e1:b8:fc:92:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Validity
Not Before: Mar 29 04:00:27 2026 GMT
Not After : Mar 30 04:00:27 2026 GMT
Subject: CN=6fbde938f3f96e032af5e753c67fe29a9ee78d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0a:18:c2:56:f7:4b:78:ce:7e:64:83:44:77:
c6:57:37:0e:f7:de:10:4f:e4:74:d5:e6:b8:40:5f:
43:d2:b3:ae:c0:e6:a5:b3:cd:70:88:44:0a:34:d2:
b1:ef:04:3a:9a:0a:c0:2f:fb:af:ef:03:61:70:1d:
8e:a8:29:e7:e4:bc:41:fc:4e:a8:61:a8:8a:ca:5a:
1d:2b:b4:11:15:b8:3b:13:bf:3f:d8:51:af:f4:a3:
d0:a7:99:b5:98:0b:b5:70:00:c6:0f:75:21:98:06:
0e:2d:39:fa:08:41:62:6b:a2:4d:18:63:b9:47:4c:
4d:aa:db:11:bf:dd:99:12:6a:c6:bc:12:60:c3:7b:
07:33:f9:3d:b0:3c:6f:37:92:de:3d:86:38:51:c4:
75:1d:7b:e9:3b:0a:a8:c5:41:bf:b2:34:94:b4:21:
68:1e:7e:0d:18:a0:09:37:e9:dd:82:68:8a:6d:f7:
a7:15:d4:a2:ba:95:fb:17:4e:31:be:5d:b0:04:74:
1f:15:ab:bb:3c:81:12:0e:7e:68:7d:9a:14:b5:34:
da:7e:00:6c:0d:da:f5:23:55:55:ff:ab:b8:4c:6f:
81:c0:d9:8b:0a:62:41:fe:38:e2:01:86:9f:7c:b6:
eb:1e:48:7f:76:b5:ec:ac:d3:5d:a0:c7:23:7c:b2:
66:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BD:E9:38:F3:F9:6E:03:2A:F5:E7:53:C6:7F:E2:9A:9E:E7:8D:73
X509v3 Authority Key Identifier:
keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:cf:4e:bc:62:d7:12:94:22:2c:ed:4e:c7:84:59:1a:62:ec:
df:e9:97:07:4b:29:f2:fb:75:77:3b:87:c1:b4:9c:43:90:26:
0e:df:6b:ff:af:b6:40:d5:d5:f7:8a:37:2d:a8:8c:5c:0e:83:
21:2b:c0:f5:bb:70:b8:f6:c9:35:55:1e:2a:48:32:3a:f4:a2:
f5:ea:07:8f:26:b3:21:94:63:49:94:1b:d2:6d:52:71:33:b6:
dd:df:ea:af:60:91:25:ac:7a:da:81:bd:9e:77:33:58:04:0e:
83:92:90:b6:8c:56:78:6e:79:15:55:82:70:ce:89:75:e1:3d:
b0:68:f6:6d:97:3c:23:e3:5d:f0:fa:f1:1e:75:95:9b:e4:8d:
e3:64:46:e0:a6:03:67:cb:93:26:dc:da:47:e8:6e:ed:82:ce:
89:e5:e0:28:f3:4d:93:e1:d1:40:b7:74:61:ba:9a:65:cd:06:
4d:8a:a6:61:4b:e7:a2:6f:6b:15:59:31:cd:b3:f2:91:90:c9:
7d:5d:a5:d7:c1:4d:96:54:11:7e:cf:af:d1:54:6e:83:f0:ac:
c2:6e:c4:32:6c:36:e7:5a:66:dc:8b:6c:d2:c9:ff:ce:6e:90:
fa:49:9f:28:6f:af:4b:1b:e7:fa:23:67:e5:67:37:fc:d9:ed:
c0:58:fb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:32 2026 by rpki-client