Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
File: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft (raw, json)
Hash identifier: ZZ9uflkMWsm7JEhvTYmkljd7MvDi2WS52yhIj0aBFBU=
Subject key identifier: 7E:47:C5:86:05:5C:4A:C8:C6:72:79:05:C4:83:02:BD:11:F0:7B:3C
Authority key identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
Certificate issuer: /CN=b522787599f1798e245f993f8cb8182f99cfd104
Certificate serial: 019D37F72AF8913149EDAFC5643F89BBB9A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
Manifest number: 100C
Signing time: Sun 29 Mar 2026 05:00:38 +0000
Manifest this update: Sun 29 Mar 2026 05:00:38 +0000
Manifest next update: Mon 30 Mar 2026 05:00:38 +0000
Files and hashes: 1: 1Hoyrylcn8m_wR_RB6kG1AoUkbs.roa (hash: i7cfjhCZOPLGdCo7zGnFGevBuRCXnZkz1NQPc21PRUI=)
2: MwxPjEKsyukIW9UgrbKug1OUrD0.roa (hash: hFFWhkDQsz4xhLvtRVUNZgMK+EMIxF7IR1hHUl7v5Zs=)
3: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl (hash: SE1ArmQu9I94nldQ8Sd145YsxDJS3U6NbBIlMZX0A7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:2a:f8:91:31:49:ed:af:c5:64:3f:89:bb:b9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b522787599f1798e245f993f8cb8182f99cfd104
Validity
Not Before: Mar 29 05:00:38 2026 GMT
Not After : Mar 30 05:00:38 2026 GMT
Subject: CN=7e47c586055c4ac8c6727905c48302bd11f07b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:14:dd:db:63:fe:b6:ba:d9:b0:c0:ed:a5:8c:
9e:a3:e1:33:21:28:e8:50:34:49:bb:e0:d0:65:82:
a4:52:d4:8f:9a:59:91:ee:ef:44:4a:39:bc:da:b2:
ad:2d:68:01:d5:78:a7:b6:39:53:3d:12:c4:d3:9b:
6d:59:f3:d6:2f:92:e9:05:95:b6:0b:db:e2:af:3b:
0d:a7:61:1c:7f:1d:68:55:ad:88:04:d6:8d:48:18:
a4:b0:a9:78:7a:30:e8:b3:2b:d6:2e:67:4d:f9:3c:
a3:42:98:3c:25:5a:3d:69:dd:7c:37:f2:97:d9:d1:
c6:67:39:7f:a4:bc:68:d2:ee:ec:3f:f2:8b:b8:21:
36:cc:fa:0b:85:67:f1:1f:df:b4:64:75:da:e6:05:
9c:1a:18:40:f4:7d:9a:a4:57:19:38:c1:be:64:15:
01:99:2a:b0:ca:a0:4d:5c:ea:06:76:a8:59:33:ab:
18:4f:fc:8f:6b:7a:5f:f3:09:2a:ce:1c:d5:f1:da:
3d:82:40:a6:27:b6:96:b5:ae:3b:23:9f:af:7f:8d:
97:97:bb:be:6d:01:1f:34:44:02:a5:4e:08:e6:90:
89:01:fb:0c:ce:7a:bd:53:64:65:c1:c6:67:7d:e6:
18:6a:22:14:6b:9d:49:4b:f1:db:4c:c5:92:a7:c4:
a3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:47:C5:86:05:5C:4A:C8:C6:72:79:05:C4:83:02:BD:11:F0:7B:3C
X509v3 Authority Key Identifier:
keyid:B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5b:2a:24:e6:e4:a7:fd:20:8c:ee:78:d5:62:77:6c:aa:e2:
17:ed:1d:94:a8:27:66:d2:d8:55:27:7a:4b:91:a8:a4:57:59:
00:ed:59:b6:a1:3e:93:ea:ec:25:62:bf:f4:32:73:2a:cc:4b:
ef:0e:1f:5f:41:30:26:4f:96:e0:9e:0e:5e:8f:d7:9f:31:5c:
90:a0:71:0e:de:7e:20:e4:51:35:1e:ab:c0:10:85:c7:f8:2c:
70:98:83:54:12:14:79:9f:48:ae:c6:17:af:38:01:17:b7:ce:
ac:d3:82:08:ef:44:0f:86:3b:bf:12:92:96:f4:ca:cc:2e:38:
67:82:79:b8:c8:69:1d:1b:2f:0a:69:46:71:d0:71:ca:42:90:
73:69:8b:8b:7e:80:cc:e8:0e:cf:41:65:7b:39:fa:d3:c1:2b:
fc:2c:5b:34:3b:66:9d:ff:76:77:38:df:73:29:0f:bb:4e:01:
99:92:31:14:2f:60:31:68:8c:3c:ba:61:da:f0:ca:88:7a:d7:
f4:51:a8:06:af:1f:c9:5f:31:f2:c7:67:8c:09:4e:c7:5a:54:
e1:2b:6e:35:e4:3c:71:36:9e:10:e5:8a:b9:5f:da:77:e4:9d:
fc:5a:f2:8d:d2:f2:10:08:01:36:0d:3e:30:de:c2:13:5d:a6:
4d:ba:b2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:24 2026 by rpki-client