Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
File: TIEnPcsDw0V7eSUL4Qnhml508P0.mft (raw, json)
Hash identifier: 0doFdWrmm2dG7TEWCz8b1901OQXq5H8lbDQmgVT5VTA=
Subject key identifier: 42:CD:75:B1:F8:95:4A:2F:29:3E:63:F6:C5:2B:AA:37:BB:54:F0:71
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial: 019D25F1D29E11F1F12C21D10CA50921919E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
Manifest number: 0A80
Signing time: Wed 25 Mar 2026 17:01:38 +0000
Manifest this update: Wed 25 Mar 2026 17:01:38 +0000
Manifest next update: Thu 26 Mar 2026 17:01:38 +0000
Files and hashes: 1: 1-07ZjHZQ4JAS_TNnMMIuiuGHUu0.roa (hash: Wh4hYAahHN1SwbCKEhKPBAVeToja3QYblB0SUbJdjis=)
2: DnIOOoGWRavp5IqwW9ySIPh79lk.roa (hash: rq7BHpoO+/BSPP6hcjEqbUgUHas+lRS8Sfpjq0LOIgU=)
3: G2MOc8TWFDIMMJqGe6NYQzJGJRc.roa (hash: 6e+/w4+tJC0z0SxMPZdExM5pB9/UDFdAttq+Dk7OWZs=)
4: TIEnPcsDw0V7eSUL4Qnhml508P0.crl (hash: ycOAJOA+3xoaJ7S6r+LVnOj+2ZH2Vz97iUu95jzbZ9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:d2:9e:11:f1:f1:2c:21:d1:0c:a5:09:21:91:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Validity
Not Before: Mar 25 17:01:38 2026 GMT
Not After : Mar 26 17:01:38 2026 GMT
Subject: CN=42cd75b1f8954a2f293e63f6c52baa37bb54f071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ef:59:20:f2:be:fc:9c:c0:1d:a3:cf:54:85:
60:98:91:05:fa:bd:06:0b:78:42:08:4d:60:ac:31:
c6:f6:1d:57:27:06:81:af:ab:fc:11:b1:ac:24:79:
87:1a:67:d1:a6:bc:b6:d2:d3:85:1f:c3:f6:e8:45:
f8:c5:d7:1b:a0:ad:87:85:f3:dc:5d:37:a5:e3:91:
af:b1:88:9a:9a:cc:3a:e7:b4:97:96:15:74:33:f4:
e5:6d:cc:23:ec:5f:40:f8:a6:35:39:a3:9f:28:be:
fa:47:88:4e:fe:7b:b8:4c:fd:2d:67:2a:a1:4e:ed:
b8:ea:13:79:53:5c:f7:c7:d8:b6:d8:43:aa:33:13:
73:98:e0:55:29:e5:ef:8b:e1:03:6b:25:1a:74:c5:
b2:2b:36:e6:bb:51:fe:c3:16:10:8d:20:1f:a5:e9:
4e:fb:91:55:f1:54:72:55:25:68:de:b9:bb:bd:f3:
18:3f:2e:45:e4:f7:a1:4b:ce:ec:88:90:59:57:7b:
ec:a4:3a:fc:71:7e:a4:c8:52:36:d3:35:aa:c0:19:
81:5c:20:9a:cb:f3:bc:7e:e6:41:9d:35:88:ca:ee:
aa:ea:17:d0:82:55:80:c2:85:8e:08:72:96:5f:db:
9d:9f:0a:d6:b7:dd:2b:65:a5:0d:64:5f:2d:66:a9:
68:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CD:75:B1:F8:95:4A:2F:29:3E:63:F6:C5:2B:AA:37:BB:54:F0:71
X509v3 Authority Key Identifier:
keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:96:a6:d2:23:2d:89:6f:ec:8e:8f:da:fa:66:71:bb:ea:11:
cd:13:dd:9c:3d:a1:e3:8c:f8:62:e4:46:d9:3f:ec:ec:f9:47:
ee:36:b2:d1:b8:dd:60:00:31:cc:df:ce:54:d2:ec:1c:50:1e:
ce:f0:a1:25:fb:a8:16:26:9b:4a:7b:69:d0:1a:7b:08:c5:ef:
3e:ec:05:d9:71:26:2a:d5:ff:ba:67:a6:3f:a4:6d:0a:72:30:
2a:15:3a:06:86:8d:61:af:d0:08:9b:b5:36:c0:bf:fc:19:98:
31:3e:77:91:dd:bd:76:eb:1b:de:a3:25:d9:4b:56:f6:b3:5c:
ce:f6:bb:db:80:81:49:73:be:64:59:a2:41:8a:7b:62:d6:4f:
32:58:19:43:7f:31:3f:02:37:ec:1f:a6:48:f9:a3:ed:d8:8d:
55:70:16:4f:df:fa:37:7e:1f:57:29:7f:8a:74:cd:68:35:fe:
5e:39:15:2a:e5:ac:b4:4f:bf:cd:d6:d2:79:8d:c2:9c:fa:d2:
b8:ef:3a:16:75:e5:b0:3a:eb:f7:ed:43:72:d3:ea:17:28:88:
40:35:c5:3c:34:37:5e:04:9d:d7:ea:c3:6d:f7:a8:58:e0:2d:
15:a2:97:4f:79:84:e2:be:17:79:ad:39:92:6e:28:52:25:59:
a0:91:5d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:13 2026 by rpki-client