Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
File: TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json)
Hash identifier: 3E5bBA5CPrNS8TMrHBK35/lq7gLLpDJRGIYbaz9+Nuw=
Subject key identifier: 21:4F:43:E9:81:2B:2F:93:11:98:84:1E:37:E2:4A:02:B9:45:7E:90
Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
Certificate issuer: /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Certificate serial: 019D27727B1BA4DD7B2FC97EE223C2B6DEDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
Manifest number: 0680
Signing time: Thu 26 Mar 2026 00:01:47 +0000
Manifest this update: Thu 26 Mar 2026 00:01:47 +0000
Manifest next update: Fri 27 Mar 2026 00:01:47 +0000
Files and hashes: 1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: qKKfHlO8QUwdY3y9bDVh2d0CoCZJ9C/Kr9/7oLnppeY=)
2: s8uoBmRDwT1I6UHn-j9HLjE26mE.roa (hash: 93nVEqAB+I5Wpe2PdQ+LQC2FT2DxNkUueoInceH3LxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:7b:1b:a4:dd:7b:2f:c9:7e:e2:23:c2:b6:de:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Validity
Not Before: Mar 26 00:01:47 2026 GMT
Not After : Mar 27 00:01:47 2026 GMT
Subject: CN=214f43e9812b2f931198841e37e24a02b9457e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:73:58:20:ca:2a:e5:2c:94:fc:04:31:a2:58:
c8:0e:13:81:ab:f9:d3:a3:ec:77:01:2f:13:7e:75:
c1:b9:0f:5a:6a:9e:c1:f9:e3:3f:74:69:8d:cd:07:
34:bf:aa:3e:57:c6:9a:7a:f0:23:92:61:6a:87:6e:
0b:00:69:f8:3b:11:8c:f6:10:b2:e4:fe:cb:0a:88:
36:db:3e:79:78:d6:23:26:9c:4c:79:91:39:10:2d:
b5:ff:ef:33:ca:66:cb:e9:b8:61:9f:e4:30:31:d0:
d8:5a:63:00:08:7d:9d:f3:e2:d3:0c:c7:9a:7f:34:
d8:16:5c:37:e8:d2:d9:99:7d:d1:7f:41:67:18:12:
c5:a7:5d:42:e6:50:8f:60:3f:5b:e4:e9:b5:ff:a3:
23:44:65:fd:cf:06:32:98:3c:e5:b9:81:c7:29:0e:
88:6a:a5:d8:eb:95:82:78:d0:73:be:01:49:c4:cd:
cc:61:80:39:a6:6d:3e:6c:7c:a0:bf:e7:f1:e0:cd:
a7:b4:2e:f7:b7:d1:b4:82:bc:24:fa:0f:1d:51:23:
f5:8a:6f:bd:7e:7e:10:ff:b0:a8:46:f0:3a:41:35:
52:8f:07:50:41:cf:14:6b:3d:7f:d5:00:b8:f7:85:
92:35:8d:db:a7:03:85:fa:d8:6b:74:ae:a2:52:5d:
bd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4F:43:E9:81:2B:2F:93:11:98:84:1E:37:E2:4A:02:B9:45:7E:90
X509v3 Authority Key Identifier:
keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f6:2a:c9:4a:17:be:81:e8:03:c8:6e:14:d0:86:57:85:d1:
77:31:4b:c3:bf:6c:3c:6a:47:dd:4a:03:91:c5:51:26:d6:e9:
42:2e:9c:ef:bf:22:eb:f0:04:a6:3c:79:6d:cf:61:f4:3c:fe:
9f:74:a6:b8:62:68:c4:42:3d:fc:78:11:91:27:32:95:1e:e4:
ac:52:e0:31:c3:d3:75:ed:c9:a2:74:56:7b:70:a3:ec:b2:e3:
4d:26:4a:5d:9c:57:c2:64:8f:f4:ec:0c:ff:06:37:82:fc:b3:
f8:6c:f1:e5:fa:3d:50:34:0d:a2:80:3a:8f:10:76:b2:cd:6f:
90:ac:75:dc:5f:70:c7:eb:b3:65:d1:91:76:db:78:82:43:71:
2d:46:f5:c8:54:14:bd:08:8f:05:23:22:e7:1f:58:e3:b2:44:
ce:e0:62:2a:61:5d:09:8e:75:dc:41:64:a1:3a:43:4c:a1:d7:
a1:5a:3f:55:8c:1c:a4:c1:cc:23:16:0f:b4:c0:60:08:1d:ae:
5f:36:42:23:9a:1a:2b:e7:90:95:37:5f:d4:7f:02:c5:22:60:
c6:04:a4:42:10:c2:7e:eb:8a:44:02:c3:a1:fe:9a:67:39:72:
9f:1f:58:99:16:1d:ee:6a:75:fb:af:10:7c:fd:8a:8e:76:65:
18:7e:d4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:23 2026 by rpki-client