Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
File: tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft (raw, json)
Hash identifier: wtB+vGPggZtbEEoqXYS29PDHUsSz+msfz/Pk4Hp5h2A=
Subject key identifier: 55:DE:6D:41:21:F0:FB:28:E4:C5:92:E2:89:01:05:A1:B0:86:7F:27
Authority key identifier: B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
Certificate issuer: /CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Certificate serial: 019D38D38F75213DD41F068B63D3AE241903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
Manifest number: 052E
Signing time: Sun 29 Mar 2026 09:01:22 +0000
Manifest this update: Sun 29 Mar 2026 09:01:22 +0000
Manifest next update: Mon 30 Mar 2026 09:01:22 +0000
Files and hashes: 1: JaJgHNZlSAbtuKvLA3-BudJJTlo.roa (hash: uT77HGoSLR7ak2tNmSlHYY46dhCnEltA+vTWyDTCj6Q=)
2: tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl (hash: At4yyB9TtgMqp95/GD6FAx2jZ2BGDcFIRkzoGmka+hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:8f:75:21:3d:d4:1f:06:8b:63:d3:ae:24:19:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Validity
Not Before: Mar 29 09:01:22 2026 GMT
Not After : Mar 30 09:01:22 2026 GMT
Subject: CN=55de6d4121f0fb28e4c592e2890105a1b0867f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:34:e1:0b:a5:29:af:02:9b:d9:59:52:21:b6:
71:04:87:c8:8a:f5:e9:26:bc:7e:85:04:fb:fc:c6:
9d:cf:c6:1a:ac:3c:60:d4:18:44:07:19:f8:be:73:
b0:74:47:92:5c:5e:b0:a0:69:37:4b:0c:04:f9:d5:
af:e1:ba:93:43:5c:d0:7b:5d:aa:4a:d9:b8:e4:9e:
50:99:ac:4f:36:68:04:4e:e5:3f:60:da:61:08:57:
84:5d:2d:bd:b1:e4:f3:c5:fc:1a:dd:0a:eb:ab:28:
70:b1:ec:4b:29:1a:37:b7:56:8d:6d:76:46:2f:50:
f6:6b:c7:df:4b:49:57:f4:17:3e:65:1c:cd:72:b3:
21:2e:43:3a:0c:19:ea:31:af:2b:9e:c6:92:22:dc:
05:8f:06:96:ed:f3:46:06:2e:09:02:29:63:74:9d:
9e:ad:a9:41:89:20:09:cc:ca:f8:a0:97:3f:e5:19:
b3:28:fd:c9:d9:d4:aa:7f:24:4c:6a:c0:ce:e4:0c:
bb:d6:a0:f2:44:29:47:51:9e:bb:64:f2:d6:07:69:
0f:a7:aa:6d:4e:8b:84:e1:f8:47:a7:cd:79:11:1a:
fc:61:81:1c:57:6a:3a:17:e3:0e:56:0f:05:94:54:
cb:80:f9:53:77:f4:ca:7f:76:5c:a4:ba:1b:6b:45:
8d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DE:6D:41:21:F0:FB:28:E4:C5:92:E2:89:01:05:A1:B0:86:7F:27
X509v3 Authority Key Identifier:
keyid:B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:06:71:f2:ec:f0:69:c3:05:1d:cc:d2:40:ef:d5:07:45:36:
76:04:f3:07:11:8e:8a:ad:85:77:3e:2e:e3:1c:d2:e6:33:2c:
7f:26:21:b2:f8:83:41:d3:44:0d:51:25:09:89:6b:ba:fc:36:
16:48:d9:ce:d6:fc:7f:b0:56:fd:0f:d7:0a:65:f7:f1:89:a5:
8b:7b:5b:15:c0:20:e3:6c:21:d8:7d:4d:53:87:a4:12:5d:21:
cb:64:6e:3c:84:fc:91:44:08:b7:32:70:67:d4:4f:fc:18:97:
aa:d2:bc:7b:a7:37:ee:a0:71:b4:32:e8:7f:eb:74:dc:e8:5a:
c9:15:d5:73:36:75:1e:a6:fa:8c:35:7d:c8:a1:5d:71:0e:89:
63:eb:9a:38:fe:32:ee:76:16:42:fc:05:f4:2d:08:eb:46:5c:
7e:89:5b:70:af:7f:54:9c:c8:22:70:47:e0:99:0d:38:3b:72:
ce:9e:96:24:c5:a3:93:fc:54:f0:0f:0e:7f:f8:7d:fb:72:cc:
77:d2:f5:37:5f:54:67:43:b8:57:72:b6:4d:c6:4a:09:8c:bf:
29:19:e7:10:88:2c:fb:f2:5d:1e:80:8c:7e:3d:9f:aa:3f:85:
19:a2:98:26:7e:5c:52:1e:cd:af:16:d2:0e:4e:68:1a:c0:99:
4f:c8:9f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:53 2026 by rpki-client