Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
File: taJj0Y61xUD3R4glu3LvrG8o-Cs.mft (raw, json)
Hash identifier: i2inTwihhyE1uleH6YNAluO8KqM8xTT2gK0zMtrlUZk=
Subject key identifier: 20:66:8C:D8:BF:CC:91:77:CA:6C:AE:99:DC:8F:17:B2:A8:20:62:95
Authority key identifier: B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B
Certificate issuer: /CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
Certificate serial: 019D3A544C83701E18A5C34B9F969425BA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 16:01:36 +0000
Manifest this update: Sun 29 Mar 2026 16:01:36 +0000
Manifest next update: Mon 30 Mar 2026 16:01:36 +0000
Files and hashes: 1: mGuGgApHSUc3pkLejONy6uxFa8I.roa (hash: 72owtSfE8WtU3O8vsf/pSLMkM235o/0ogXWxdafrLec=)
2: taJj0Y61xUD3R4glu3LvrG8o-Cs.crl (hash: 6lJ9/cJo7TAUPmuzYkZLODuaUOCsUSJf0Y7lJmOrRJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:4c:83:70:1e:18:a5:c3:4b:9f:96:94:25:ba:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
Validity
Not Before: Mar 29 16:01:36 2026 GMT
Not After : Mar 30 16:01:36 2026 GMT
Subject: CN=20668cd8bfcc9177ca6cae99dc8f17b2a8206295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fa:e3:2e:a1:73:31:64:e0:67:e7:8f:d0:55:
20:ff:38:cc:7f:6c:f1:94:6d:2e:ff:68:3b:44:c3:
c9:c2:83:50:50:03:1c:99:59:96:6d:48:1d:7e:3d:
ce:c4:d0:91:60:cd:13:3a:99:8b:27:a8:cc:e2:0b:
c4:c1:48:1a:9d:1a:0a:bf:58:12:9b:33:9b:65:4d:
ac:09:99:24:d4:52:68:86:25:dc:6c:b0:30:23:c4:
96:a5:c6:16:2d:77:af:1a:30:1e:54:74:5a:34:b1:
f7:15:76:9a:15:b6:0a:e4:e9:de:c8:58:6c:38:11:
fe:7a:76:70:cb:f8:5f:0e:0e:93:70:67:e7:ad:41:
7a:2e:21:bd:e0:2f:e3:55:7a:b3:1a:75:09:31:78:
e2:5a:db:83:14:cb:58:77:3f:ed:d7:cd:58:ab:27:
02:a0:08:c9:fd:aa:59:e2:e9:e3:bb:2b:92:96:09:
dc:f1:ab:31:02:3a:08:6e:9b:86:83:d2:2a:e6:fb:
2b:21:48:04:c0:1e:8a:d4:08:5c:48:e9:3c:3d:b1:
73:04:a6:b2:da:d6:88:d5:b7:a8:ba:b7:eb:75:f9:
b2:ae:f0:19:ab:d3:98:f2:be:45:33:2d:a8:4d:ca:
08:d3:e5:e2:53:47:97:54:56:bd:9b:05:e7:4f:36:
5e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:66:8C:D8:BF:CC:91:77:CA:6C:AE:99:DC:8F:17:B2:A8:20:62:95
X509v3 Authority Key Identifier:
keyid:B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b6:d4:a2:e3:a3:27:1c:d2:75:12:05:e7:e5:31:39:0a:f5:
ed:66:b0:23:84:ec:1e:2b:c3:a0:40:93:d4:6e:e7:8b:20:f2:
54:d5:bb:cd:80:9e:bb:f8:64:fd:17:88:5c:15:7e:e2:36:d5:
82:3a:00:bd:75:a4:ec:19:95:39:9d:35:cd:18:40:15:5b:9a:
87:67:50:bc:df:1c:2f:b7:f0:d4:df:c9:a5:d2:8f:13:b2:c8:
d2:db:78:85:f0:0a:d6:8d:7c:cb:e9:2c:ec:9d:2e:b2:55:18:
17:13:06:3e:c4:56:3f:53:bc:02:db:63:e0:be:4d:a2:27:8d:
2d:8f:f0:bd:1f:b3:f3:01:b0:70:b3:e1:c2:bc:e2:0b:e3:42:
77:67:49:ce:3e:fd:03:05:86:5b:24:b2:a9:42:54:02:df:58:
3b:db:15:d3:1c:05:69:40:8d:c1:d0:90:58:49:ed:d5:ce:03:
d0:f1:dd:6e:70:65:4a:ea:d0:c3:02:38:a2:43:c7:20:fb:4d:
1b:ca:54:4f:38:79:5d:f4:70:57:f7:de:bf:f8:da:14:7d:86:
d1:2f:ed:64:94:0c:c3:4e:3c:56:20:78:4f:ee:ac:18:88:36:
02:21:d1:1e:ab:03:43:c4:8f:11:c2:67:0c:4f:84:a4:e1:b8:
a0:aa:62:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:19:44 2026 by rpki-client