Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
File: tPgsjv3jS9meROrwcxtsUltFShk.mft (raw, json)
Hash identifier: pxIqHVsMXox2NL+cugwc+W7atyW07uN7hCvC+R8SDck=
Subject key identifier: 5A:2E:0A:6E:5C:C7:82:BA:FD:71:49:84:BF:8D:B0:7A:BA:1B:2B:02
Authority key identifier: B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
Certificate issuer: /CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Certificate serial: 019D3977C87734F703466D1765973236AFB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 12:00:44 +0000
Manifest this update: Sun 29 Mar 2026 12:00:44 +0000
Manifest next update: Mon 30 Mar 2026 12:00:44 +0000
Files and hashes: 1: ny4NdP1dzVwPNWBOTK06eWCj9ac.roa (hash: kKntqqKczGjvuxQUkXngXz6ktNgL1Vp59wjcfYKrynM=)
2: tPgsjv3jS9meROrwcxtsUltFShk.crl (hash: 3nCfmK7purXjaW4w+jNcV0syJznJmlY6K9TTuE0Bz+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:c8:77:34:f7:03:46:6d:17:65:97:32:36:af:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Validity
Not Before: Mar 29 12:00:44 2026 GMT
Not After : Mar 30 12:00:44 2026 GMT
Subject: CN=5a2e0a6e5cc782bafd714984bf8db07aba1b2b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:64:82:4a:10:e5:52:2d:5a:d3:26:d5:80:1b:
a5:8b:96:70:66:20:53:a7:e7:c6:80:46:d0:d6:32:
eb:73:81:d9:03:e3:f6:c3:f5:1f:d3:16:a1:58:6b:
37:aa:42:2e:ff:0f:7d:88:bd:c9:ab:fb:37:77:08:
ee:ff:28:6b:c9:e4:bf:8a:47:d4:cd:a0:d3:6d:8d:
f7:fa:6b:da:92:86:68:6b:2f:e3:9b:2b:e2:e8:ca:
39:a5:7b:b5:08:bd:79:20:26:20:0f:08:a1:35:78:
b3:c5:83:c7:e1:3a:7a:96:b6:04:fa:d9:8c:4c:9d:
58:e8:8a:d0:8f:1a:10:7e:8d:92:9d:05:0d:54:34:
5b:e3:26:52:67:af:b5:0b:9e:c9:ae:6d:bb:8f:65:
01:de:4e:02:d4:0b:48:c0:94:9d:19:06:bf:52:0c:
73:24:77:ab:93:90:9d:b4:cf:f6:4c:55:64:38:e4:
73:2b:72:56:fa:ce:88:da:84:45:1e:15:bd:6b:49:
fe:a7:cd:cd:d0:e7:f9:b8:22:2d:63:4e:7f:cb:fe:
34:4b:10:3e:79:4e:a7:96:1f:5e:5c:44:cf:51:a5:
4e:6d:ec:4e:dc:24:9c:84:87:84:08:cb:f5:e4:3b:
b0:7e:1e:ea:d1:7e:72:68:7c:86:bd:35:45:d3:34:
a4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2E:0A:6E:5C:C7:82:BA:FD:71:49:84:BF:8D:B0:7A:BA:1B:2B:02
X509v3 Authority Key Identifier:
keyid:B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f3:ec:9b:16:3d:c8:92:63:37:3e:d7:e9:45:14:e8:68:45:
92:e0:ed:82:4a:bd:c0:a8:44:d3:65:a3:f5:b4:7b:1a:7c:b2:
c4:70:99:d6:36:47:30:17:20:e5:6e:05:0d:6c:fa:9d:36:7c:
d5:0b:35:45:be:71:94:c0:68:7e:87:31:aa:49:9d:c5:ca:96:
8d:e5:77:96:d1:ef:c3:fc:ad:02:5c:c5:e5:f7:0e:9c:7a:82:
8c:16:19:0a:d8:04:74:97:fd:bc:dd:d4:90:df:a8:8b:42:fd:
47:6d:ad:62:dd:1e:1d:87:42:f5:9b:1f:f7:8d:20:6c:5c:63:
ed:0a:35:4f:e3:49:a7:c3:47:06:a6:c4:db:c7:66:76:06:5f:
9a:d4:aa:82:7c:ae:94:f0:34:88:1c:13:7f:04:ae:f0:9d:35:
dd:bf:97:2a:dd:72:10:9d:7f:c5:87:ab:ab:69:04:7e:0d:17:
f3:28:29:94:57:c9:c4:4a:a5:27:8b:3c:8c:0d:08:a4:02:4d:
07:32:04:5c:6c:d9:0a:d0:0c:e8:96:54:22:0b:7b:27:09:08:
d2:0e:64:0a:49:87:1c:22:ae:20:66:93:bb:4b:89:91:aa:e1:
a3:fa:64:1e:79:15:6f:8a:7d:0c:93:c8:d3:6a:e4:f6:f2:78:
f6:8b:59:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:10 2026 by rpki-client