Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
File: tFBkwayGkOLHepWaUCVG6YvNNyc.mft (raw, json)
Hash identifier: 2pRlVseDza5SnDnGAHx67M2xh46/BYoaxHBSy/ua3Io=
Subject key identifier: 53:4B:3B:AF:DC:68:D1:47:D9:57:59:59:F6:45:AB:A1:B6:D9:95:8F
Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
Certificate issuer: /CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Certificate serial: 019D3752AED1EFD044E3C4376F9ED99BF181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
Manifest number: 0F0F
Signing time: Sun 29 Mar 2026 02:00:58 +0000
Manifest this update: Sun 29 Mar 2026 02:00:58 +0000
Manifest next update: Mon 30 Mar 2026 02:00:58 +0000
Files and hashes: 1: tFBkwayGkOLHepWaUCVG6YvNNyc.crl (hash: ib44H5bXv5QfIXjL/IJW7TAu9OHZm8n+EMXbzkxMMt0=)
2: wFIxH6rmc0pTO3lHbm1q54JXQUw.roa (hash: LdJ/iIkB/Qkjc76ikiZz0rGCtU2IPzIjdQ2qezYDSK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:ae:d1:ef:d0:44:e3:c4:37:6f:9e:d9:9b:f1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Validity
Not Before: Mar 29 02:00:58 2026 GMT
Not After : Mar 30 02:00:58 2026 GMT
Subject: CN=534b3bafdc68d147d9575959f645aba1b6d9958f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:f0:37:36:c6:d3:b5:67:64:4e:c5:c8:cb:
3d:c9:e5:79:22:8c:4d:3d:56:8e:b8:98:97:65:39:
12:fe:36:27:4d:da:8a:6e:e0:92:2e:72:f2:3f:c7:
74:e2:9b:ab:9f:9b:14:54:63:63:15:c6:38:b2:6f:
90:c9:06:f1:10:8e:1f:ad:c5:06:ef:44:36:c7:e9:
e1:85:c0:fa:d6:2b:23:7f:62:d2:a8:f2:2d:33:08:
51:90:5a:57:ce:72:b3:cd:8f:ff:4d:92:c7:64:b0:
54:c7:1f:b2:39:61:65:03:cc:86:b6:cd:80:2c:53:
fb:06:6c:4a:16:86:3d:59:31:e8:26:fd:ae:ef:c8:
50:1c:0b:cf:c9:fe:77:f6:a0:6a:bd:76:60:3e:13:
82:b8:fe:92:6d:64:8b:47:1d:29:97:1b:b9:ea:d4:
e1:86:6e:fd:ad:b5:00:cf:39:b9:c8:be:6b:51:8f:
34:87:91:45:a1:f2:b1:f6:1c:c8:8a:d1:16:d5:42:
d5:8f:c0:43:a4:3b:fc:e9:6b:bd:4c:71:53:21:25:
39:08:9f:fb:a9:ae:28:cb:72:03:4c:43:93:70:f6:
82:50:18:b4:24:0b:6e:08:ab:bb:ae:83:6a:a6:e5:
3b:11:c5:02:f6:30:74:da:38:b8:6b:4b:49:17:41:
5b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4B:3B:AF:DC:68:D1:47:D9:57:59:59:F6:45:AB:A1:B6:D9:95:8F
X509v3 Authority Key Identifier:
keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f8:87:a5:de:78:bf:62:fd:74:02:de:77:6c:a7:41:7d:74:
23:84:2a:82:40:8d:82:f9:2e:a8:40:e4:14:3c:b7:28:00:89:
24:07:b7:b3:6a:04:68:9a:e9:ee:f3:c1:0d:27:22:c3:91:53:
7f:70:d8:67:14:bf:8a:9c:93:82:00:63:1d:07:ca:5e:11:e5:
0e:c0:40:6d:93:20:65:57:42:89:7c:e6:5c:db:21:38:fd:dc:
b1:9d:2b:24:ac:0d:bb:1e:15:df:ad:18:21:58:08:6a:e6:f0:
45:51:95:7d:7c:3a:47:e7:c4:e9:7e:78:a8:1a:dc:b2:09:c8:
4e:c4:9f:42:91:2c:2e:fa:c6:50:02:db:02:ad:eb:a3:28:1b:
b2:31:b1:2b:0b:8e:4c:d9:ec:63:71:bf:77:0d:2c:7f:ef:1b:
d3:6c:98:eb:a4:ca:f2:f8:82:5e:5c:4b:81:16:dc:ab:b8:0d:
2d:1e:a8:a7:5f:07:ce:cf:aa:46:ae:61:d1:54:46:e0:7b:b8:
97:9d:eb:70:9b:ec:1a:94:69:5d:05:36:6c:8b:30:4d:ed:26:
6b:13:24:64:8c:e2:93:f7:e1:7f:f9:49:f4:be:5c:88:a5:6e:
d2:98:54:0c:b3:dc:59:80:80:7e:5f:68:2f:76:4f:59:a6:ab:
59:77:b3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:32 2026 by rpki-client