Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
File: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft (raw, json)
Hash identifier: dwnv4WY+q9ymevI1XueOaXRwLt/X4gKAidUqjmwlyxU=
Subject key identifier: 57:FB:6B:FE:EA:2E:49:3E:96:8A:4A:A5:B2:65:BF:2B:F9:6E:AB:50
Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53
Certificate serial: 019D3A54A7DE96E2F5846965819A739D5229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
Manifest number: 15F8
Signing time: Sun 29 Mar 2026 16:01:59 +0000
Manifest this update: Sun 29 Mar 2026 16:01:59 +0000
Manifest next update: Mon 30 Mar 2026 16:01:59 +0000
Files and hashes: 1: YeKtEsYaTNZoSHj3N6MlBsotJrQ.roa (hash: twTw0giPhGzIQ/V/HMZrgKRp++mkr21dxckWNhdSudg=)
2: ielQr4EC94tydWptb7Zy7oQJTlg.roa (hash: IK1qVKo+95L3ssLme0pcM7macPsa/yBGCJukgetUuXk=)
3: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl (hash: CzDUDgbmayIF/8cIZrhIt4YzfG0neywD4/TDbDVitAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:a7:de:96:e2:f5:84:69:65:81:9a:73:9d:52:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53
Validity
Not Before: Mar 29 16:01:59 2026 GMT
Not After : Mar 30 16:01:59 2026 GMT
Subject: CN=57fb6bfeea2e493e968a4aa5b265bf2bf96eab50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:b6:9c:d1:db:6a:95:3e:04:2e:28:e5:2e:
25:03:9f:cc:b9:25:10:11:ed:23:f0:d5:36:42:e2:
68:e7:75:6e:c7:fb:48:d6:3d:87:9b:cd:ae:17:ba:
3f:96:7b:e3:b0:78:f9:29:f2:85:35:77:52:ca:31:
20:0e:4f:f0:1e:67:14:40:1f:9b:6c:de:9b:1f:99:
6c:ed:ba:a8:12:6a:8c:7e:33:eb:52:2d:60:94:a7:
3a:79:67:9f:cf:93:e1:89:5a:81:e9:85:88:96:f9:
7c:54:7d:96:1e:37:55:a5:78:0c:01:84:2d:03:e4:
8c:ca:f0:78:16:0e:7e:12:21:7e:13:34:aa:f6:ba:
7d:2b:21:32:65:1f:67:2e:34:c7:cf:71:d0:8a:94:
e1:c0:cb:83:fb:d9:63:87:85:de:a3:3d:49:ab:6e:
a0:d2:ad:41:f9:54:b5:3b:6e:9b:08:4a:21:d3:fb:
d7:aa:df:95:9f:e6:dd:c6:61:a9:23:58:66:1e:05:
37:da:16:97:f8:c1:9a:e7:1f:1f:a2:46:38:74:56:
ca:30:9d:c8:c3:27:b0:f4:4a:f8:9d:f6:32:a1:a3:
8d:74:8f:5c:5f:43:ae:81:d9:64:b4:6f:a5:67:1f:
f0:39:5e:3d:e1:ae:fe:5f:69:d9:6e:e6:7d:9b:50:
a5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FB:6B:FE:EA:2E:49:3E:96:8A:4A:A5:B2:65:BF:2B:F9:6E:AB:50
X509v3 Authority Key Identifier:
keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9a:7f:14:4a:48:e2:f6:b0:2c:2c:44:98:c1:7b:26:e3:63:
4d:66:68:92:fe:b4:28:33:c2:6a:0f:ab:45:e4:b9:e4:f6:7f:
9d:8e:f4:9b:1d:25:27:f9:4f:7d:b2:8c:84:00:6f:b6:78:ae:
65:b1:b2:c0:d2:09:f9:df:36:04:58:74:cf:d8:20:01:e6:81:
ca:6f:d9:e6:84:46:37:4f:9a:a4:c9:7a:ee:0e:55:76:68:7f:
a5:25:b2:f0:22:91:20:e0:33:10:64:34:19:d4:d0:23:f8:db:
74:0d:c1:43:c5:62:26:40:80:38:db:06:7c:1b:ae:08:7f:2b:
19:9b:64:7c:68:bd:fc:94:6a:3d:77:c9:86:26:42:66:e1:ae:
8c:03:cb:26:0a:dd:0a:99:bf:eb:f5:6f:78:74:f2:a5:08:7d:
a1:32:2e:9c:4b:0d:fe:c2:91:e9:2a:d4:8f:0a:9c:97:4a:7b:
f4:b1:e1:6d:d2:a3:f6:6c:ae:c7:d7:48:55:c8:93:a8:1c:47:
fa:0b:e6:09:1a:2e:2e:39:e1:03:5e:74:f4:9c:2e:87:bd:90:
46:a8:6d:8a:90:70:37:e8:7c:04:ff:fa:cb:b5:63:44:f6:fd:
53:d4:df:8c:85:c9:6d:f1:b8:f9:f3:7f:84:ae:c5:02:c3:9c:
e0:74:92:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:35 2026 by rpki-client