Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
File: t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft (raw, json)
Hash identifier: kHrNYBkYwfoeX1oiHJ5GhLJqT2Q/9JUj6vq3l0MwSYA=
Subject key identifier: 20:C7:05:75:D1:B4:84:36:9C:75:D2:43:38:A5:27:06:24:DF:A4:0E
Authority key identifier: B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
Certificate issuer: /CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Certificate serial: 019D382E824E231BA1A2AB7C8D131B264961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:01:05 +0000
Manifest this update: Sun 29 Mar 2026 06:01:05 +0000
Manifest next update: Mon 30 Mar 2026 06:01:05 +0000
Files and hashes: 1: MwSiI9GchKzKf7qBJz16eEvXh-o.roa (hash: Ya5VgXFHK7dGaRYg+cDCB5cxS5nYPyBDhXocUh/n9cI=)
2: fjMubu-qV26IszBH3XWThUEp1jQ.roa (hash: nM6/+tL+EeUavkkSwnU8Z5g0dAyeEyJMz2lMeFc9xyg=)
3: t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl (hash: I3ksF+ImUbY1E9BU8JGEBlwJxD+Wb+pmvdHBFpYs6Ys=)
4: zXLnfUczUBBQtu-uo6mCxhK1HNI.roa (hash: 5SgEpDYdRUOD9p+rClAHWfynMXe8ZAzFE3cf1BLha3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:82:4e:23:1b:a1:a2:ab:7c:8d:13:1b:26:49:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Validity
Not Before: Mar 29 06:01:05 2026 GMT
Not After : Mar 30 06:01:05 2026 GMT
Subject: CN=20c70575d1b484369c75d24338a5270624dfa40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d6:d0:24:ac:04:05:43:68:b2:07:2d:ee:39:
52:8f:a7:c3:fd:aa:c2:8e:3b:a9:a7:54:2b:7f:12:
70:66:97:62:d0:c9:8f:9e:e6:8c:14:f8:de:f2:c8:
80:12:9c:54:9b:f6:07:5e:62:7f:d1:7a:41:4a:79:
9b:39:59:c0:3c:b4:ec:6e:5c:e1:c6:08:48:d0:13:
f1:ef:b2:6f:f3:4b:9a:05:67:9e:61:95:cc:6e:07:
f4:71:c2:a1:ed:0d:5c:12:4f:a5:ec:d6:e0:7d:2d:
35:b5:0d:71:a9:2b:b8:9b:1f:ce:0f:61:ac:fc:18:
9f:46:25:0e:f3:49:46:44:e5:2b:1a:10:fe:ad:02:
dc:4e:ce:97:ea:c8:8f:66:72:33:cd:54:9f:6c:c5:
74:12:35:2b:eb:58:1b:8b:63:10:32:66:03:d5:f3:
b2:d4:91:f6:12:3f:41:e2:9d:c9:df:b3:a8:52:a7:
5e:ba:70:33:49:ee:33:75:a4:88:7e:f7:2d:b1:c9:
35:1e:61:a1:50:ea:e0:19:12:f9:4d:3c:2c:bb:ad:
a8:0c:bc:f8:07:24:97:30:90:eb:75:e0:3c:c7:8b:
fd:03:7d:9b:69:21:1e:2d:28:37:13:ac:b8:73:ca:
31:a7:ee:fe:a9:40:1f:8f:d5:12:e3:61:35:87:2c:
e8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C7:05:75:D1:B4:84:36:9C:75:D2:43:38:A5:27:06:24:DF:A4:0E
X509v3 Authority Key Identifier:
keyid:B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:95:43:9a:3d:db:fb:e5:fd:a9:a1:5e:c5:82:71:fd:72:3a:
90:0e:ff:18:ae:ec:e0:2a:ce:6a:f3:09:1b:76:9f:f8:f8:39:
f3:e8:23:be:26:b7:f6:34:be:67:c6:46:6f:45:0b:2c:f4:ab:
91:ea:c2:33:9d:17:91:35:06:73:82:1d:d0:ae:fa:51:8d:6f:
c3:66:6f:5d:59:16:ee:48:de:7f:6e:b6:2c:bf:21:1b:00:4c:
3d:92:24:7e:45:32:5b:7c:11:17:a5:7b:ea:dd:91:fa:e3:cd:
15:19:49:7b:ad:ae:41:29:d5:a2:e5:1a:ff:7c:54:bb:e4:b8:
40:fb:02:ba:f7:c3:00:47:36:15:16:54:ec:7c:45:0a:25:4e:
ef:0f:53:34:af:ac:ab:73:b8:68:e4:59:86:60:41:5c:7b:85:
de:88:ec:05:a4:98:3f:16:fc:fe:d1:23:c0:28:22:52:62:ca:
88:d6:99:9e:53:bb:3a:46:94:aa:d5:c7:d8:c2:b2:79:1d:f6:
f8:fb:bf:90:79:52:c0:be:ca:7f:58:62:6f:52:cd:58:af:9f:
4f:fa:a7:55:7f:a8:26:d5:df:6c:05:33:3b:2e:f8:e0:75:66:
f2:dd:e1:c3:10:38:af:6f:cb:d9:f9:0f:73:2b:74:ca:6a:fc:
57:46:0f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:35 2026 by rpki-client