Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json)
Hash identifier: HV+gH1dNTKwhM5pRt+kzxyTdkNaBFkOuyyPpSFfXjzM=
Subject key identifier: 67:11:32:D8:1C:55:25:47:D9:10:35:72:3C:E6:4D:24:DA:38:64:00
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 019CE2C7F23A14C16BDF3A79C0A403CC5932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
Manifest number: 1178
Signing time: Thu 12 Mar 2026 16:01:20 +0000
Manifest this update: Thu 12 Mar 2026 16:01:20 +0000
Manifest next update: Fri 13 Mar 2026 16:01:20 +0000
Files and hashes: 1: WMqwkkOCeJIiDGczokQt6OKgfpo.roa (hash: 6yCQ2yXVHO2BxnZqJR1Rvu8adOAClmHZ2J60vDEAoZw=)
2: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: vPoxy0Fa9Vxtas0j22ayhjygnj14bvR+ovMPZTF7A0w=)
3: ydyTTB3FHmlgmrUF4u_cEkdDzws.roa (hash: sm5RJb+IplkwipOY1e61+aLvM0eV38hivV05zuDbU50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:c7:f2:3a:14:c1:6b:df:3a:79:c0:a4:03:cc:59:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Mar 12 16:01:20 2026 GMT
Not After : Mar 13 16:01:20 2026 GMT
Subject: CN=671132d81c552547d91035723ce64d24da386400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:44:4f:d9:36:14:53:35:42:1f:8d:dd:8a:
8f:5a:6f:7b:03:a9:ef:1a:25:22:81:ca:2d:ac:0e:
0a:5d:31:01:f1:96:5e:f5:11:71:ba:47:d3:d3:ac:
fd:d2:30:06:23:e0:11:5f:6c:66:10:18:47:20:89:
91:f4:23:d2:4f:3a:76:71:60:92:54:43:60:6d:fa:
05:73:a2:d7:b3:bd:97:23:26:da:26:46:83:2d:2a:
1c:80:e8:c2:13:17:38:6e:35:57:7d:a3:90:6e:64:
4f:d2:4f:ff:c5:e2:b6:ce:77:dd:97:85:1a:75:3b:
dd:72:e2:81:5c:31:d6:45:07:44:26:c3:52:24:3b:
31:01:2b:db:69:e6:83:7b:72:1e:1a:22:49:5c:03:
89:f3:13:8b:b9:bc:27:bf:dd:d0:05:a1:cc:a2:c4:
8e:ca:7a:08:8e:67:9d:b9:7d:7e:07:b8:1c:00:42:
b5:b3:05:28:f2:a9:80:f1:55:f6:ac:4b:61:cd:b9:
01:99:80:7b:74:d6:70:07:d2:88:46:15:fc:57:0e:
6e:1f:78:1c:a4:c2:3a:b3:cb:3f:5a:3b:cc:16:cd:
62:b4:03:90:7a:ea:b9:73:bc:f4:97:78:74:e3:00:
8d:17:2d:b0:45:9b:0a:a1:58:ca:be:46:a8:a5:30:
05:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:11:32:D8:1C:55:25:47:D9:10:35:72:3C:E6:4D:24:DA:38:64:00
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ab:ec:05:a0:78:c5:9f:a6:0f:97:1d:73:d8:75:64:6d:e9:
3f:00:a2:c3:d0:a2:f4:84:55:1a:24:ac:ab:7f:82:37:32:1f:
ae:7f:46:7c:7b:ba:0c:f5:b4:92:10:7f:5f:35:e8:65:a4:e2:
b1:fc:a7:09:b7:2c:51:44:f1:3c:c3:19:d9:9e:4a:91:c7:7f:
6d:8e:cb:95:d1:c1:0a:d7:7b:20:d2:46:2a:54:0a:d1:d2:1a:
5b:ae:a1:d1:ec:02:fe:80:46:39:69:ea:d3:68:9c:a4:58:e6:
7c:c0:45:4a:46:91:94:ed:df:ab:f1:10:85:cb:4f:d3:cb:3f:
32:3d:6c:de:55:7b:b3:00:39:af:3c:6f:ee:ae:7f:e0:a6:75:
51:5e:93:6e:55:29:55:d6:ad:ff:3e:93:19:4b:d8:d0:2c:66:
da:93:72:7c:0b:f2:37:a2:d9:46:dc:bc:dd:3e:5a:bb:ad:74:
88:b0:39:ec:13:3b:43:99:a8:f6:cc:98:36:4e:1f:19:79:fd:
d2:50:3e:3c:79:96:b4:e3:82:4f:59:f9:b6:f9:70:0b:57:9d:
3d:97:f1:52:4b:ff:22:5e:fb:e8:8a:c8:3c:3d:5e:34:7c:9f:
8f:7c:e8:55:33:82:21:a1:b3:20:2f:da:f5:46:ee:4b:8d:a4:
00:4c:e8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:50:08 2026 by rpki-client