Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
File: TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft (raw, json)
Hash identifier: tRa2mbKl2o1o63jvCTCkopfxLvTWtl0ag7jqlfqxMfs=
Subject key identifier: A6:5B:DD:16:7A:0C:B6:7D:1C:5C:1C:AA:08:75:9B:2B:01:AC:E0:C1
Authority key identifier: 4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
Certificate issuer: /CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Certificate serial: 019D29608CB2E1BD44FA3F406F854C8F8BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
Manifest number: 0948
Signing time: Thu 26 Mar 2026 09:01:26 +0000
Manifest this update: Thu 26 Mar 2026 09:01:26 +0000
Manifest next update: Fri 27 Mar 2026 09:01:26 +0000
Files and hashes: 1: PqzFQQ5sES2MqGglMugWf_lMxyY.roa (hash: khSqFydqj9KZQBk9HYnRXgBI+ueTAb2xBqHtEX2tAzU=)
2: TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl (hash: 3IsYRrlQraKkJYtAOAR4SuQLhPYGBuja1m6NEz3uriA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:8c:b2:e1:bd:44:fa:3f:40:6f:85:4c:8f:8b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Validity
Not Before: Mar 26 09:01:26 2026 GMT
Not After : Mar 27 09:01:26 2026 GMT
Subject: CN=a65bdd167a0cb67d1c5c1caa08759b2b01ace0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:18:5c:28:33:c0:e3:a6:77:8f:5b:57:42:
43:b8:e5:e9:10:12:74:d2:8b:93:57:1b:1f:aa:34:
6e:6c:6c:6e:ec:4f:f3:f2:c6:74:e9:6d:84:0e:6a:
09:cb:46:81:31:96:e6:7a:f3:12:c3:c4:e7:6a:6e:
8d:2f:75:5a:25:e1:b8:bf:78:28:bd:ed:89:d2:f3:
c9:e9:8b:4a:8d:1e:d6:44:e9:f2:10:53:53:c8:cc:
9b:8b:b7:b6:d9:19:21:d0:0b:4b:60:b9:d4:91:fe:
6b:86:d9:0f:94:88:9a:d5:23:a2:9c:de:f9:df:e4:
b1:44:05:32:bd:aa:db:e8:b2:c0:70:27:d7:a7:40:
6c:7e:fb:1d:07:6b:8a:50:3f:65:b2:fe:26:f4:61:
33:c5:4e:d7:3d:34:77:f4:fa:22:87:c6:fc:62:96:
03:29:ac:e0:d2:b0:3f:41:4d:55:32:5e:d0:67:f8:
ca:6d:ed:de:da:b6:4f:f0:fa:39:b7:11:84:cc:d7:
94:54:1c:3d:aa:cb:ae:a5:8a:5c:22:47:c5:8f:61:
08:e6:7d:46:40:22:b3:7c:fe:f6:73:22:b1:39:79:
9c:e0:93:dd:cc:39:e0:3a:d4:69:8c:e1:3f:61:d4:
45:51:2d:8d:34:c6:f5:16:03:53:44:8b:03:7f:27:
db:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5B:DD:16:7A:0C:B6:7D:1C:5C:1C:AA:08:75:9B:2B:01:AC:E0:C1
X509v3 Authority Key Identifier:
keyid:4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d8:12:ea:5e:9e:8b:f0:52:1c:a5:10:e6:76:01:42:f1:19:
94:d6:60:8c:2f:14:95:67:88:91:3c:7e:ba:34:3d:6b:72:7f:
58:3e:0b:f0:1d:41:ef:4e:63:c8:37:bb:03:7c:6c:da:1f:c4:
23:b2:d1:94:56:e1:be:b5:cc:b6:35:9f:fb:15:35:9d:14:6e:
fb:90:8f:83:49:fe:cb:4c:e8:24:da:53:de:80:42:26:18:bb:
ba:c1:5f:72:7e:4d:86:64:0b:5d:c7:f2:51:ae:98:02:ef:a8:
6f:56:92:d8:ad:7f:68:bf:1d:f5:6c:e9:c2:89:43:d6:4a:2d:
e6:c0:b1:f3:0d:dd:5b:03:32:5b:62:6d:96:dc:8b:5a:43:d6:
e1:62:91:55:6f:fd:6f:a7:9b:11:ff:dd:2c:8d:01:b6:28:94:
ab:31:c0:41:26:19:2c:63:6e:26:79:e0:1c:56:84:f3:e6:a2:
4f:77:12:fe:7d:b7:81:48:01:c9:c7:6c:76:94:23:b7:05:d8:
d6:eb:37:a4:56:a2:0a:81:4b:16:e0:e6:31:b4:83:34:b7:02:
cf:35:60:c6:1f:04:af:7f:5e:06:a6:88:a0:9e:c4:e6:28:2b:
08:04:4e:6b:cb:5a:07:ec:93:e9:b6:1e:d8:47:3a:f7:70:4a:
b8:a2:48:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:58:50 2026 by rpki-client