Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
File: t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft (raw, json)
Hash identifier: fizpjoyAdB06YbAgOXwiSTXJcz7H0vxKB0mphQrSs4I=
Subject key identifier: CC:8A:19:05:8D:25:B0:7F:0E:8D:2D:33:FA:F9:B1:BC:9D:55:19:6E
Authority key identifier: B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4
Certificate issuer: /CN=b780b3b9e096221629fe47e102ac522da03979c4
Certificate serial: 019D3940DC7EAFDA6E62D249A6AC353A29D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 11:00:45 +0000
Manifest this update: Sun 29 Mar 2026 11:00:45 +0000
Manifest next update: Mon 30 Mar 2026 11:00:45 +0000
Files and hashes: 1: mXR1vwAsCEfZCQ6KKfou_FufsHg.roa (hash: MguOaTrNnHUp4FVql5i5MlGMRxd61G72ChYyyrskpls=)
2: t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl (hash: gTjAVQ2kj5ENwTELTakFUclkXMf1rTKVYbAI1DZKqW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:dc:7e:af:da:6e:62:d2:49:a6:ac:35:3a:29:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b780b3b9e096221629fe47e102ac522da03979c4
Validity
Not Before: Mar 29 11:00:45 2026 GMT
Not After : Mar 30 11:00:45 2026 GMT
Subject: CN=cc8a19058d25b07f0e8d2d33faf9b1bc9d55196e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8a:22:c1:9e:ff:27:73:a1:44:02:e9:0e:29:
0a:1d:45:bc:18:18:79:8e:95:42:d4:3b:1d:d3:d9:
93:7c:c4:6b:c9:7e:b0:bb:77:02:e7:a2:71:7d:db:
d0:5c:71:bf:a9:57:6f:ac:a3:c0:ca:bb:de:e7:96:
c7:c5:1c:6f:f6:95:0c:26:fc:a6:d6:e0:f9:5c:5d:
87:b0:d9:ac:74:7f:39:d0:de:e1:f6:0b:40:ae:5b:
a7:88:8d:61:66:67:a3:7e:3f:d8:15:e8:d2:01:c8:
c5:a7:25:a4:44:d2:bd:16:e8:87:b5:fe:36:1a:31:
5a:78:a4:99:b1:c6:0f:38:8d:51:77:32:e8:ac:f5:
a2:46:b6:fe:2c:d7:fa:f9:ae:ef:95:fb:37:d9:04:
3e:75:e9:de:72:d9:a4:cb:c3:8e:99:19:e9:9d:9c:
8c:43:3d:01:2b:8c:73:55:47:85:d2:32:28:74:48:
14:4f:a1:9c:95:6c:9e:e2:36:51:a4:d8:ce:30:9c:
cb:09:dc:95:b5:07:87:74:be:3d:5e:49:b9:58:8a:
d2:5b:db:36:bd:91:a6:95:51:b0:cd:cf:84:a4:76:
fd:bb:d7:7b:5b:74:e6:7b:be:e7:ad:30:43:9c:80:
e1:6e:f1:07:ab:67:71:e4:a7:a2:f8:3a:62:6d:8b:
39:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8A:19:05:8D:25:B0:7F:0E:8D:2D:33:FA:F9:B1:BC:9D:55:19:6E
X509v3 Authority Key Identifier:
keyid:B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1b:a3:6d:11:37:37:f1:42:5e:82:59:bb:5f:27:49:9a:d7:
44:ce:82:be:cd:eb:23:2f:4a:93:f6:6e:b8:8b:47:da:a6:ae:
a8:de:d9:98:d0:a6:3e:d5:9a:b7:cc:b6:0c:a4:15:fd:90:c4:
cf:b7:81:8e:09:3a:71:2c:15:42:ff:14:0e:6e:dc:84:44:b7:
6d:2b:59:8f:10:13:b9:48:86:f2:a3:7c:93:f5:81:60:6f:20:
3f:ed:76:7d:18:df:ae:2c:38:79:54:db:b9:0f:1c:a1:4c:2d:
9b:1c:2f:20:66:37:1e:72:59:dc:01:bc:a0:61:8a:70:ea:c1:
ba:9f:6a:3d:13:70:1b:2b:31:66:2f:c6:20:dc:b7:6f:ce:df:
03:ca:58:c9:7d:98:0f:63:d8:02:ff:54:98:fd:09:11:33:37:
93:6b:ab:52:44:36:5f:7a:ed:6e:4b:15:5f:d7:08:bf:28:95:
8c:d0:fd:97:dc:f3:16:7d:00:ff:29:e4:54:9c:8e:c9:c3:61:
bd:76:8f:77:fd:b3:23:12:ae:fe:71:b2:bd:28:1c:90:5b:15:
3c:61:41:cc:13:2e:b8:e4:0b:0e:47:d1:52:0e:2f:a6:9a:7a:
bc:99:8e:f2:06:eb:e2:3a:71:97:a8:56:27:f8:6a:10:f5:ae:
a3:50:46:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:04 2026 by rpki-client