Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft
File: txC5vh4ts3SC4fjyWzX9pTgNMsY.mft (raw, json)
Hash identifier: b8u8JlaEYo8OKzj0qYG6heGnl3igTcb/adgdxdEWh4w=
Subject key identifier: E3:AC:08:9E:1B:4D:A8:5F:AA:5E:4E:76:FB:39:E2:C8:2C:7D:6B:75
Authority key identifier: B7:10:B9:BE:1E:2D:B3:74:82:E1:F8:F2:5B:35:FD:A5:38:0D:32:C6
Certificate issuer: /CN=b710b9be1e2db37482e1f8f25b35fda5380d32c6
Certificate serial: 019D3977E10B634CBC306675598EABAFF42E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txC5vh4ts3SC4fjyWzX9pTgNMsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft
Manifest number: 155A
Signing time: Sun 29 Mar 2026 12:00:50 +0000
Manifest this update: Sun 29 Mar 2026 12:00:50 +0000
Manifest next update: Mon 30 Mar 2026 12:00:50 +0000
Files and hashes: 1: Nqvx372xUmimo9ZdUTyVh5yr2QM.roa (hash: 9UD1Q1TZiTOZORrcHimyQBc+ib1NndvdcOScKV3bLr4=)
2: txC5vh4ts3SC4fjyWzX9pTgNMsY.crl (hash: udjQS5BmJqAhxVr+iu8ct4dXvEXBYAmX9lXn7IlxAxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/txC5vh4ts3SC4fjyWzX9pTgNMsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:e1:0b:63:4c:bc:30:66:75:59:8e:ab:af:f4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b710b9be1e2db37482e1f8f25b35fda5380d32c6
Validity
Not Before: Mar 29 12:00:50 2026 GMT
Not After : Mar 30 12:00:50 2026 GMT
Subject: CN=e3ac089e1b4da85faa5e4e76fb39e2c82c7d6b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:64:c5:84:c2:8d:9e:af:99:8e:50:16:8a:7a:
3a:d1:cb:42:09:05:55:9a:fb:6f:d4:5f:69:f4:e5:
05:0b:42:69:a8:3d:9f:5d:cf:9e:b3:1f:43:42:78:
a3:0f:be:25:99:e1:83:4a:27:ee:de:bd:26:16:de:
d7:59:2c:62:fc:76:aa:85:90:cc:d6:be:23:52:54:
36:b8:d6:6b:8d:04:26:77:0c:16:fb:b0:aa:82:d3:
19:00:98:50:67:c8:b0:c8:2a:d2:f2:11:ef:7e:e8:
d8:da:12:91:04:2d:50:b3:e3:02:2c:d1:5c:d5:03:
f8:8d:0d:e7:68:8d:85:ae:91:93:1b:eb:72:3f:e9:
0b:46:4a:03:a7:75:02:d7:97:28:4e:0f:17:53:9a:
c7:81:fb:6c:a0:c6:03:67:d2:dd:7f:64:a7:77:08:
b5:11:f1:89:ee:20:4b:b9:6e:de:48:94:24:94:b2:
b3:3b:22:15:eb:57:08:3c:10:40:29:23:be:94:5e:
24:1d:67:85:00:5b:37:f3:8d:f6:f9:23:21:9a:57:
4a:9a:78:38:1b:03:77:cc:a6:c7:f4:29:04:dd:aa:
8b:e6:22:dc:82:b0:40:3d:91:17:c9:68:03:ae:02:
28:6f:e3:ce:7d:0c:0d:c4:62:9d:67:4e:bb:fb:80:
49:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AC:08:9E:1B:4D:A8:5F:AA:5E:4E:76:FB:39:E2:C8:2C:7D:6B:75
X509v3 Authority Key Identifier:
keyid:B7:10:B9:BE:1E:2D:B3:74:82:E1:F8:F2:5B:35:FD:A5:38:0D:32:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txC5vh4ts3SC4fjyWzX9pTgNMsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:ee:b3:2c:da:05:7b:d6:54:51:49:2a:3b:52:a6:de:41:c6:
01:19:44:75:66:c3:9c:b3:08:bb:5b:49:f7:0e:85:8f:3f:9c:
e8:bd:7b:1b:c7:bb:a9:1f:96:40:76:f2:4a:6b:5f:f3:1c:14:
06:42:05:cf:6c:e3:87:83:3e:7d:1a:b2:80:de:80:25:2e:d8:
d6:8d:5e:e5:2f:f9:7a:cc:2b:30:f7:8c:a0:b9:5b:77:21:38:
c6:c6:9e:52:1a:a8:1c:19:15:4f:c7:ca:63:bf:9a:4a:0d:93:
9e:f8:ce:4d:c6:f7:08:57:ec:c5:97:eb:b5:b8:a9:80:cc:5d:
f6:58:9b:44:ea:5b:6e:b4:aa:38:42:cd:49:a6:33:b2:2e:58:
59:f6:73:b3:f8:06:c1:2b:d6:fc:be:bd:72:34:b0:34:43:00:
65:25:f2:3c:b1:6c:a6:00:01:49:93:12:8d:d0:74:e8:0c:41:
b8:9e:bc:29:7a:2a:69:36:61:60:bf:69:9d:9e:df:cc:c0:1f:
e6:79:7b:31:91:92:8c:0d:54:c7:54:72:48:c7:e8:e0:30:38:
26:f9:5c:60:92:e2:82:8b:ae:12:3a:de:51:ec:e5:e5:cc:4c:
5a:cc:a1:80:87:60:10:bd:e1:92:b4:63:8b:f4:19:a0:2a:60:
88:0d:83:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:19 2026 by rpki-client