Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
File: TBdAzvl0ncKw9fiM3xA02oHWBtw.mft (raw, json)
Hash identifier: 33E86pK6BsktAPJVY/xozHSzuYFe50FFqjsCrqNvgbk=
Subject key identifier: 99:73:79:F8:6B:C7:9B:79:B2:23:DD:DB:3B:C9:D5:BA:F0:42:3D:F4
Authority key identifier: 4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
Certificate issuer: /CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Certificate serial: 019D284D9537D4686A002C6CB6D9E8D0190F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
Manifest number: 1206
Signing time: Thu 26 Mar 2026 04:01:05 +0000
Manifest this update: Thu 26 Mar 2026 04:01:05 +0000
Manifest next update: Fri 27 Mar 2026 04:01:05 +0000
Files and hashes: 1: TBdAzvl0ncKw9fiM3xA02oHWBtw.crl (hash: TzPBTC3hcaOftSuacDcnaZcCgMEAzgd0qFLpXqKEjhE=)
2: YVsXJWPnPlqWMFeltxgBZhUCs4Q.roa (hash: q9sjXMHf5vLLJ+Iss0xTQC2tfqQnUkneeNz0HcAGC9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:95:37:d4:68:6a:00:2c:6c:b6:d9:e8:d0:19:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Validity
Not Before: Mar 26 04:01:05 2026 GMT
Not After : Mar 27 04:01:05 2026 GMT
Subject: CN=997379f86bc79b79b223dddb3bc9d5baf0423df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:be:f9:09:e1:8d:f2:42:73:22:0d:44:d3:50:
3c:60:1c:c2:f9:e3:65:63:59:1f:5b:09:51:87:c1:
d8:19:e3:3a:03:b8:3e:89:63:29:6e:db:c1:b3:62:
9b:12:ab:49:da:71:6c:1a:6c:2f:a1:56:41:38:79:
6a:df:40:c8:3a:ae:d8:c0:6d:76:50:ba:5d:fb:25:
76:c7:13:f1:92:11:13:63:b8:88:80:07:d8:14:68:
79:fb:06:4a:2b:a4:75:a6:b1:a2:07:6d:43:25:8b:
2c:d8:a6:26:ff:4f:0d:aa:9a:df:95:9e:67:2d:da:
80:6b:e6:87:93:b3:7f:10:10:f6:2f:f3:95:cd:17:
04:43:f8:36:a4:7f:4e:c7:a5:26:ff:01:89:d7:75:
d7:c7:10:88:93:83:5f:d5:bb:88:29:b3:06:d9:99:
2b:b6:05:c4:05:6e:26:10:9a:02:43:97:74:17:83:
5e:c7:8d:60:8c:ca:99:58:aa:bd:c1:b5:8f:5e:59:
70:67:74:4f:30:a9:4f:1c:90:58:29:58:15:c8:61:
dd:b1:75:f6:3a:aa:39:6c:41:ad:71:9f:d1:5d:c0:
ce:4a:35:88:66:2c:27:e2:a0:0e:63:0c:e8:42:c8:
94:e4:59:9e:94:a6:79:75:51:3a:e1:47:b8:01:b7:
cd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:73:79:F8:6B:C7:9B:79:B2:23:DD:DB:3B:C9:D5:BA:F0:42:3D:F4
X509v3 Authority Key Identifier:
keyid:4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:87:fe:da:49:b0:1a:0e:72:56:c2:a4:28:f0:9c:6a:cb:74:
15:48:8f:ac:2e:b4:93:a1:c5:53:c4:42:26:f7:88:ab:b0:99:
37:93:db:26:2c:2f:09:47:b3:72:80:1a:3d:61:38:4d:d3:f2:
0d:ad:23:a1:f6:06:19:c3:a7:0b:e1:f4:cb:3b:13:14:04:83:
5b:8c:a7:fe:1c:38:bb:e3:03:8e:f4:3f:e4:75:03:a6:c4:4e:
85:b3:49:88:61:c1:58:91:6a:96:37:2d:89:12:40:97:72:34:
bc:7d:2b:58:e1:79:26:06:d2:ae:c5:09:51:c7:31:6e:68:52:
1c:38:39:0f:da:d8:5e:1f:a8:5a:9c:ef:a0:44:d6:01:ca:90:
29:5c:da:2e:40:d3:30:4f:18:80:79:fb:6e:3b:0d:49:db:01:
46:4c:22:df:cd:f8:bb:99:18:67:8d:d4:4a:8b:34:91:fa:5e:
85:ec:da:60:14:35:5e:6d:ec:c9:32:8a:25:40:0b:65:4e:cb:
3e:cc:e0:52:da:a6:83:18:b2:88:e1:99:a0:66:a8:78:bd:24:
9f:00:56:b0:28:c0:07:d3:38:c7:1a:f4:2b:62:36:b1:8f:4c:
bc:69:8d:e8:32:c1:26:bf:c2:04:8e:ce:5e:8b:b2:86:66:48:
9d:cc:67:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:26:06 2026 by rpki-client