Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
File: tVNDqiHHSjn81Rg_T99V3EZ56D0.mft (raw, json)
Hash identifier: 4/UqQI8uHGQPmW9WgR0DTAUSZ52Btw81nGklVsE02RY=
Subject key identifier: 96:AF:BE:A9:DD:39:60:2E:B9:E2:A6:4D:E8:DD:40:F0:2F:01:BD:AF
Authority key identifier: B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D
Certificate issuer: /CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d
Certificate serial: 019D389C0D8F98AD13BB3BB78637305E4477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
Manifest number: 03C7
Signing time: Sun 29 Mar 2026 08:00:44 +0000
Manifest this update: Sun 29 Mar 2026 08:00:44 +0000
Manifest next update: Mon 30 Mar 2026 08:00:44 +0000
Files and hashes: 1: Zu-ElV4uUmsS8N-T5zbcqTuwkyg.roa (hash: 3I4QEhvQK0en7UHCJ9hltNJw37O1fUahnvRcDgraIJI=)
2: tVNDqiHHSjn81Rg_T99V3EZ56D0.crl (hash: 8p3XT7efLp3NTaCb7WuOx8Am+N88pR5lNZoY3BQ7Pro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:0d:8f:98:ad:13:bb:3b:b7:86:37:30:5e:44:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d
Validity
Not Before: Mar 29 08:00:44 2026 GMT
Not After : Mar 30 08:00:44 2026 GMT
Subject: CN=96afbea9dd39602eb9e2a64de8dd40f02f01bdaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e7:77:c1:e7:de:f9:7a:d3:ce:af:43:0e:d1:
42:56:04:89:5d:71:7b:9e:57:0c:2d:7c:24:26:66:
73:1a:9c:f9:2b:bd:0c:18:d1:1c:5d:3d:cd:8f:e0:
21:9c:db:54:c9:69:08:47:8e:f3:45:78:a1:86:a9:
53:ac:47:66:21:9c:87:2f:d8:70:91:a1:0c:c6:03:
93:42:92:59:ce:a9:46:1c:78:2c:cd:94:9f:ed:c8:
59:ad:cf:21:4d:28:32:6d:0d:87:18:ec:3c:fc:45:
9c:57:ab:3c:42:8b:8b:1e:cc:88:d1:fc:a5:64:39:
8f:4e:33:1d:1b:16:1e:8f:84:cf:37:ce:3f:9a:f1:
fe:2a:31:82:9f:0b:75:4c:35:63:cb:01:fa:8c:bf:
dd:48:a6:68:9f:9e:fb:fb:48:d5:41:0e:84:48:29:
e4:2f:b2:89:6b:cf:0e:b1:6f:f1:c5:e3:a4:d9:a6:
29:16:26:45:aa:6c:8f:c1:41:68:a6:c5:86:21:32:
5d:ef:87:92:4a:f0:88:cb:fa:2a:81:8c:ac:ba:d9:
9e:7e:1b:d3:60:81:41:a4:c7:c1:f9:ba:f0:8f:b9:
59:76:40:78:41:9d:55:c7:fa:31:7f:8a:b3:7c:0f:
9b:11:38:72:55:ef:22:97:87:49:6b:90:1e:77:1c:
68:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AF:BE:A9:DD:39:60:2E:B9:E2:A6:4D:E8:DD:40:F0:2F:01:BD:AF
X509v3 Authority Key Identifier:
keyid:B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:fc:20:44:be:c3:cb:47:83:a6:78:fa:af:cf:d9:a4:ad:87:
8e:af:c0:0f:19:4e:76:ca:35:83:ec:f3:5a:3d:4f:6f:80:cc:
0d:4d:b0:18:e2:1a:8c:47:83:92:e1:04:91:f7:9f:f2:fa:da:
d8:a8:1e:e3:36:30:9a:30:58:18:63:eb:fa:df:9e:16:cc:5d:
a3:22:4a:53:fe:8a:3d:8e:5e:7e:b0:73:75:c6:56:ad:fa:58:
ff:85:ba:15:d8:3e:80:9a:ac:6a:78:a2:5e:bb:f1:95:cf:28:
ee:af:50:6d:d9:da:35:e9:8a:2c:d7:1c:9d:06:99:69:79:e9:
3c:ff:7f:73:51:d6:f3:31:9e:25:85:31:3e:42:50:e9:b3:65:
86:ee:39:61:e6:0c:26:14:b1:1c:45:c4:c4:d8:63:1b:cc:f8:
e7:61:28:9a:2d:e2:d6:20:01:21:19:36:53:f9:65:41:78:a7:
bb:07:7b:63:f2:d2:fd:b6:a8:17:fb:56:91:a4:24:a3:d8:b3:
39:49:ce:d1:7a:86:af:c2:c2:dc:68:59:75:9f:ed:0a:b2:5f:
08:20:d6:aa:ab:63:f3:5a:50:82:73:cb:f5:8f:69:05:6a:91:
a4:24:6e:8b:08:f0:24:24:2b:e3:5a:ea:c3:55:f5:68:d5:d8:
9f:fe:aa:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:59 2026 by rpki-client