Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
File: tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft (raw, json)
Hash identifier: 6PRRGPtJ5BunPLv1hIYLFQCf7S/xTzekq1k6pnrg2f4=
Subject key identifier: 00:A8:B9:9C:50:5E:F3:F6:88:9B:3D:10:8B:D1:09:DC:F1:7A:17:5D
Authority key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
Certificate issuer: /CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Certificate serial: 019D37893FB2F9A1100926E7812EB3998A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
Manifest number: 0FB6
Signing time: Sun 29 Mar 2026 03:00:34 +0000
Manifest this update: Sun 29 Mar 2026 03:00:34 +0000
Manifest next update: Mon 30 Mar 2026 03:00:34 +0000
Files and hashes: 1: aZwxnKfHqmWxJT5LCOQaGzxTYfE.roa (hash: nuhL9NfNeMCM3Rnpe5bSoUeqEl5NVyDAwtG7Usr9Q4g=)
2: eVN-GPa2ZCzhCPNX82lsSDt1ilo.roa (hash: tjSDAKdgNEbCogLtkUwbJCmlZIdpfckJuru8vN6J8S8=)
3: tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl (hash: ueL2bf/uMfySRVg/v/szTKz5LyL52EpctmeaKH1mdyY=)
4: xxDHsd77vMM083YLrcc2xqEqOfo.roa (hash: w1yEB9PewQvSTE0IyZqBOAJcsbRhDlUVRG4rFXPAJVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:3f:b2:f9:a1:10:09:26:e7:81:2e:b3:99:8a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Validity
Not Before: Mar 29 03:00:34 2026 GMT
Not After : Mar 30 03:00:34 2026 GMT
Subject: CN=00a8b99c505ef3f6889b3d108bd109dcf17a175d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:72:f7:04:bf:80:60:16:e0:2c:4e:4c:e8:
94:bb:b8:29:2e:4a:3f:e4:36:74:17:01:ab:59:e4:
09:f0:a6:16:41:60:0c:c9:a1:31:57:69:01:40:cf:
9f:35:aa:75:55:7f:74:6d:2c:99:a0:49:43:4c:c8:
91:98:31:4a:77:59:8c:22:dd:c3:2f:be:8e:bf:42:
10:5a:56:b0:95:a7:dc:c9:79:bc:12:24:ad:ee:b1:
6c:0b:ab:9b:ea:44:13:83:50:0f:a8:dc:b3:3c:32:
fb:29:4b:83:ae:39:31:95:ab:e3:aa:dd:f6:db:12:
c4:ac:f3:eb:ad:44:0e:4e:89:62:f9:dc:a3:d1:9f:
a1:2f:96:f4:11:c9:99:72:72:d4:06:ca:3b:4a:f2:
21:4f:fa:96:44:dd:39:6f:f9:42:a9:69:11:05:25:
49:20:b2:b2:67:65:12:eb:ea:b3:30:e5:64:8d:89:
b0:43:12:0f:c2:66:f9:85:a3:e3:69:ed:3c:4e:b4:
87:c9:3f:10:54:28:cb:d7:ac:4c:57:e1:ab:7c:f6:
2e:d4:25:a9:2c:3d:ac:78:3c:09:9b:79:00:6e:b2:
5f:e6:b4:30:70:bf:65:7f:ec:a1:ed:05:e7:11:61:
69:75:ba:77:e6:2c:b4:46:d1:53:8e:06:3d:bc:38:
3f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A8:B9:9C:50:5E:F3:F6:88:9B:3D:10:8B:D1:09:DC:F1:7A:17:5D
X509v3 Authority Key Identifier:
keyid:B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7c:37:31:3b:ee:17:33:ec:cb:9f:c2:dd:ba:00:b5:15:70:
a3:32:72:b8:95:e6:f3:6e:b3:bc:31:8d:6a:45:87:01:5f:0c:
1d:0d:27:82:79:d7:7b:42:d5:26:02:5d:49:df:3c:7e:c3:d4:
0c:e0:1f:70:d5:88:02:9f:b9:cf:dc:7d:a7:82:81:f9:36:49:
a0:94:15:11:ad:24:87:8f:50:ad:7e:25:16:cd:df:e8:54:00:
71:fd:d8:d0:46:70:e3:45:0e:e9:67:02:09:4f:8c:f3:51:0f:
a2:88:5c:3c:8f:3b:0f:3f:71:a9:66:99:21:7e:5e:7e:0b:cf:
c2:57:41:1a:68:f1:e0:2f:25:02:ff:b9:39:20:c7:c4:56:7a:
ff:dc:3d:df:04:b0:9e:79:3f:9d:89:c5:0e:47:4c:36:30:cb:
7d:3d:0c:f8:13:4c:fe:13:cb:b1:7e:88:6e:3c:50:f7:b1:5e:
e3:80:3b:04:05:c1:2f:8c:df:b3:69:2b:88:2f:71:33:d1:be:
3e:40:b7:65:d2:0e:33:a7:e8:f1:f4:e1:0c:bc:00:d3:92:1d:
69:2c:f3:cf:6e:80:c5:98:d2:b1:dc:5e:e4:24:66:e0:73:a2:
e9:95:35:ee:5d:f3:de:2e:f0:cd:fb:5f:3a:b1:ae:12:46:f6:
2f:99:03:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:03 2026 by rpki-client