Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
File: Tc_QAaZn4WRatAxbvtifWScAT4U.mft (raw, json)
Hash identifier: kw/t4eosSqaY+NhlB/6m5pUzL3Fyzr/6ovcWls4VvyM=
Subject key identifier: 4D:47:BD:47:9B:9F:2D:90:22:8F:9C:0B:69:2B:0C:29:71:84:16:73
Authority key identifier: 4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
Certificate issuer: /CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Certificate serial: 019D288443F14622976043282D1B1B13809E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
Manifest number: 0CB2
Signing time: Thu 26 Mar 2026 05:00:49 +0000
Manifest this update: Thu 26 Mar 2026 05:00:49 +0000
Manifest next update: Fri 27 Mar 2026 05:00:49 +0000
Files and hashes: 1: Tc_QAaZn4WRatAxbvtifWScAT4U.crl (hash: OtnJZzXwWHc8NsiiApkDjb8snT6SWKgYPhxYgau48GA=)
2: UKP4TUcHQtGrFZOuVGeoJQ7WW6Q.roa (hash: 99B0w3hw/yKL8K1EFcdu+2H+KrVDmHXCwq/A1IUCotg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:43:f1:46:22:97:60:43:28:2d:1b:1b:13:80:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Validity
Not Before: Mar 26 05:00:49 2026 GMT
Not After : Mar 27 05:00:49 2026 GMT
Subject: CN=4d47bd479b9f2d90228f9c0b692b0c2971841673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:59:a7:b0:e7:93:c4:f4:5f:1f:3f:66:39:25:
4d:f2:0a:b1:e6:38:82:22:56:98:41:cd:d9:ed:d5:
3e:a3:07:06:88:87:0a:39:27:87:e1:b9:d0:73:2e:
eb:7e:3f:26:4c:e4:d7:81:38:c5:fb:ba:30:ad:24:
c5:9d:dc:b2:41:05:cf:14:c8:f4:25:1d:2c:a1:f6:
a4:ef:9d:98:a7:2a:2a:fc:98:31:4e:c6:f0:38:92:
79:b6:e3:6b:9c:7c:22:3a:7c:85:32:22:a3:51:13:
30:78:d8:6f:c9:a6:da:1f:ff:03:3c:b1:b0:5d:d1:
b0:e5:65:65:28:aa:1a:83:3a:ca:2c:c2:43:fb:d6:
e9:b1:a5:4f:98:c1:c3:b5:34:ae:26:48:ca:60:0b:
d0:9a:69:ec:98:1e:c0:9f:7f:2f:a7:4a:b8:71:1e:
1c:c0:82:b9:30:58:e7:c8:b8:54:ef:f4:0e:3d:f1:
38:be:4f:cd:7c:f7:a2:ee:57:0a:7c:39:af:b8:f2:
b2:2e:69:fe:af:57:ee:26:64:25:7d:72:ff:58:f9:
bd:e9:9b:ab:87:9f:06:61:22:20:74:b8:68:0d:37:
db:c2:32:25:ae:67:b2:41:d2:eb:6b:35:5e:4b:b9:
5d:f8:c0:13:89:f0:b5:60:8d:48:5d:03:99:fe:d4:
4c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:47:BD:47:9B:9F:2D:90:22:8F:9C:0B:69:2B:0C:29:71:84:16:73
X509v3 Authority Key Identifier:
keyid:4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c4:d5:04:d3:73:88:f6:98:5b:25:64:ce:6e:90:a1:cf:02:
71:11:25:d1:27:b8:8a:ba:88:de:1b:47:41:79:0f:84:fa:92:
3e:68:97:57:67:8b:36:db:df:e3:02:79:a2:83:2f:2d:4d:da:
53:74:08:75:68:ab:2a:41:b6:3c:09:7b:da:2b:46:a9:f3:6a:
a1:d2:37:a9:fd:86:01:a0:19:7e:2c:eb:5b:36:e7:f4:4f:f5:
83:90:cb:32:e9:c8:fa:2e:02:c7:16:38:6f:f5:a0:be:fa:9e:
56:f0:79:1b:a4:de:d1:9f:0c:5a:93:81:14:7f:16:08:74:04:
a7:4e:25:9d:fb:98:01:f0:99:09:36:21:c9:bd:e5:47:24:32:
4e:35:d6:f5:2e:f5:92:04:c0:c7:a0:61:29:f9:56:8d:5f:34:
5e:90:4a:92:34:5f:7e:05:74:5d:57:be:34:cc:a3:70:eb:66:
8a:3e:f3:04:94:c2:7e:be:d4:49:55:34:e4:a3:de:98:d1:04:
ab:f7:f8:fd:d1:2c:83:99:51:5e:1a:ed:e2:0c:bb:ea:a2:20:
2e:70:df:4e:c3:d9:40:13:52:8d:9c:25:25:8b:2c:04:0f:5d:
25:73:42:49:6f:c4:78:8b:ff:31:c8:21:a4:6b:f7:1f:a5:25:
d6:c5:09:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:04 2026 by rpki-client