Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/92d1fe-93a1-47cb-aec7-20424bba0cd0/1/tYV2mGjjnEWl9RJNIyVtd48hawE.mft
File: tYV2mGjjnEWl9RJNIyVtd48hawE.mft (raw, json)
Hash identifier: DD7MWOegz+YWW87kg8IBZUKnkd6FTam+HSIonBY+UM4=
Subject key identifier: 82:B2:AD:31:35:6E:2A:13:1B:A7:5E:D6:95:BF:55:0B:62:B1:64:E2
Authority key identifier: B5:85:76:98:68:E3:9C:45:A5:F5:12:4D:23:25:6D:77:8F:21:6B:01
Certificate issuer: /CN=b585769868e39c45a5f5124d23256d778f216b01
Certificate serial: 019D37F783EBB632682F922CA16D99DEE61A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYV2mGjjnEWl9RJNIyVtd48hawE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/92d1fe-93a1-47cb-aec7-20424bba0cd0/1/tYV2mGjjnEWl9RJNIyVtd48hawE.mft
Manifest number: 2F
Signing time: Sun 29 Mar 2026 05:01:01 +0000
Manifest this update: Sun 29 Mar 2026 05:01:01 +0000
Manifest next update: Mon 30 Mar 2026 05:01:01 +0000
Files and hashes: 1: tYV2mGjjnEWl9RJNIyVtd48hawE.crl (hash: lCY6qb4/FsfW9Q+KOcSLjc2FkFqW+adPlxnHsX2ikig=)
2: uU8ossy2p7V8NUr-yE6SGQbVl1A.roa (hash: d8UVhRXFfrSP4F8iKcPdZK8V4ewW5P0RPFn5tLTH2VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/92d1fe-93a1-47cb-aec7-20424bba0cd0/1/tYV2mGjjnEWl9RJNIyVtd48hawE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/92d1fe-93a1-47cb-aec7-20424bba0cd0/1/tYV2mGjjnEWl9RJNIyVtd48hawE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYV2mGjjnEWl9RJNIyVtd48hawE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:83:eb:b6:32:68:2f:92:2c:a1:6d:99:de:e6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b585769868e39c45a5f5124d23256d778f216b01
Validity
Not Before: Mar 29 05:01:01 2026 GMT
Not After : Mar 30 05:01:01 2026 GMT
Subject: CN=82b2ad31356e2a131ba75ed695bf550b62b164e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:58:2a:d1:17:98:7f:b1:92:4b:f8:61:86:
61:c7:fc:11:fa:b2:63:5c:20:3d:d7:7a:ba:b5:56:
a2:60:1a:78:d6:65:fb:9c:e8:86:7d:fa:39:96:19:
dc:2b:53:ac:91:f7:80:c9:14:80:c6:7f:e0:b1:59:
10:cf:30:e1:79:b0:df:9d:f7:8f:54:b7:a1:91:b6:
af:b3:ae:97:2f:4d:ac:86:6c:77:fb:f6:f1:3f:86:
c5:1b:f7:ff:f7:ae:57:65:14:df:bb:78:9b:00:98:
48:9a:45:46:c4:6e:16:82:59:cd:51:4e:87:04:ff:
8c:51:01:07:89:60:f1:e2:d1:33:f1:9c:a9:58:ef:
cc:18:00:3b:bb:39:7a:4f:71:f2:a4:a6:07:27:95:
7c:7f:24:0d:e4:a9:73:34:8a:6f:2b:9b:02:a8:09:
ec:b1:d9:6f:20:58:bf:80:c5:07:9a:31:cd:be:32:
c4:e1:c2:48:72:38:08:dc:82:bc:1d:c2:e1:bc:18:
1f:71:9a:5e:10:b3:2a:7d:98:c2:0b:5a:29:6e:0b:
18:41:b4:55:c8:3e:2e:99:03:2c:95:a0:0d:4f:30:
17:62:fb:2d:e0:a4:81:28:59:d2:93:ce:11:9e:fe:
30:93:d0:ad:e2:43:f7:cf:87:9f:de:49:03:e1:62:
6d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B2:AD:31:35:6E:2A:13:1B:A7:5E:D6:95:BF:55:0B:62:B1:64:E2
X509v3 Authority Key Identifier:
keyid:B5:85:76:98:68:E3:9C:45:A5:F5:12:4D:23:25:6D:77:8F:21:6B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYV2mGjjnEWl9RJNIyVtd48hawE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/92d1fe-93a1-47cb-aec7-20424bba0cd0/1/tYV2mGjjnEWl9RJNIyVtd48hawE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/92d1fe-93a1-47cb-aec7-20424bba0cd0/1/tYV2mGjjnEWl9RJNIyVtd48hawE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a8:34:b6:d0:af:22:f3:95:fa:f4:aa:86:53:94:53:69:b6:
cf:6c:88:97:ea:16:20:54:76:52:84:00:42:fa:62:1a:47:46:
74:3d:37:a8:6b:5c:07:a5:96:27:00:bb:d6:6e:7e:d2:07:0a:
37:bf:11:1f:2f:c5:c9:03:60:be:93:72:71:1b:79:65:6f:b1:
84:44:01:7d:98:c0:43:dd:cc:4c:4d:fa:20:7b:80:40:41:5a:
6f:66:29:0d:0d:68:9b:6b:48:83:3f:b2:af:d2:a0:2d:ce:e6:
93:59:cd:fd:c8:83:c7:e5:6f:8f:c1:87:66:4a:c9:5a:f3:5c:
cc:2f:9f:41:26:96:77:bb:45:c0:58:d6:13:a3:f7:ea:6e:1d:
31:20:22:06:d4:93:6d:0c:26:76:6d:e3:99:88:47:c1:18:a9:
82:1e:b1:c0:12:be:5d:bf:70:87:d9:48:3b:7a:29:c4:67:c3:
0a:f9:89:3f:c0:7c:6a:72:d6:ba:0f:97:0d:62:26:ba:87:3b:
0e:14:79:e8:b1:b9:81:48:8c:79:47:7d:db:8d:52:c8:82:20:
00:b0:5b:30:3e:d8:d9:0c:04:02:1b:e1:a9:ba:55:af:da:19:
99:77:91:e3:31:dd:9a:64:ab:ab:5b:4e:3f:93:23:da:6e:5a:
fa:eb:6d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:38:54 2026 by rpki-client