Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
File: tznE4_6GnZeDui2t9mDczQ-lNwc.mft (raw, json)
Hash identifier: 2XshRjuZMoV11718vT5OqfhDGKSUcotfIN12Wa3O4Gs=
Subject key identifier: F2:CD:C6:8A:21:86:1E:41:85:26:CC:C1:D0:96:56:4C:EE:5B:58:D1
Authority key identifier: B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07
Certificate issuer: /CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707
Certificate serial: 019D27E0611FC8E7BD615990E6A8F9ACBCE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
Manifest number: 12D2
Signing time: Thu 26 Mar 2026 02:01:49 +0000
Manifest this update: Thu 26 Mar 2026 02:01:49 +0000
Manifest next update: Fri 27 Mar 2026 02:01:49 +0000
Files and hashes: 1: fp6e1oWTW6ERgaYTNaPCSf0ibbk.roa (hash: cfY9W6Oc4CWCMHNddhZlxoGOHOxJVO+wjS65/vUgYTs=)
2: tznE4_6GnZeDui2t9mDczQ-lNwc.crl (hash: uPZbVCi1WlurM9M8ucjnjiODJKQuae7QVa1mLbST3X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:61:1f:c8:e7:bd:61:59:90:e6:a8:f9:ac:bc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707
Validity
Not Before: Mar 26 02:01:49 2026 GMT
Not After : Mar 27 02:01:49 2026 GMT
Subject: CN=f2cdc68a21861e418526ccc1d096564cee5b58d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e6:71:b8:aa:86:f8:6b:ed:a1:f9:a9:21:62:
88:25:12:01:47:48:9c:78:86:4d:96:02:70:5b:17:
35:b0:e6:28:4f:a3:24:be:da:42:f0:6c:20:29:68:
ae:74:f7:23:88:bd:10:93:b3:9d:b3:38:95:02:50:
2e:56:7f:aa:eb:e3:5a:bc:8f:90:14:07:69:11:ed:
30:07:69:56:f9:d6:d9:0e:b0:55:f0:16:ae:ae:bf:
ad:be:69:8c:5b:0c:7c:ab:29:e8:6c:1b:28:5f:5e:
fd:9d:99:cb:a4:f4:0e:c8:39:e6:19:60:ce:c3:2b:
23:65:ca:7e:2e:8e:d6:1a:ab:12:ff:f5:a4:7b:3a:
fa:70:1e:d0:ae:cc:7f:a8:b5:8e:01:4c:79:c7:d2:
54:39:da:7d:96:00:9e:f3:6c:4c:b8:2f:1b:91:b8:
39:67:0e:96:70:d2:b3:7d:7e:cd:f7:0f:40:43:16:
54:e9:0e:c6:6f:f2:3c:3f:a1:a4:f9:29:3c:d3:fd:
bf:0d:b6:54:88:48:6d:61:33:fc:da:23:6e:25:06:
79:a0:41:ae:67:6c:e8:db:14:c2:2a:f6:2a:1d:4b:
06:48:1e:8f:58:0a:7d:83:76:26:e8:04:d1:e4:9e:
2b:1e:47:99:bc:60:09:53:d5:7e:f6:c0:1f:4d:a5:
4a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CD:C6:8A:21:86:1E:41:85:26:CC:C1:D0:96:56:4C:EE:5B:58:D1
X509v3 Authority Key Identifier:
keyid:B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c7:60:4d:7b:48:07:83:8d:2b:e5:57:64:9f:53:b1:86:d6:
f9:52:2f:b3:a0:a3:65:1f:c5:45:72:4f:e3:4c:88:c6:4d:49:
18:e5:5c:83:2a:39:b2:2d:3b:cb:c4:7c:f7:41:a7:39:e5:3f:
a5:80:ba:3a:1d:15:ad:96:e9:4f:65:3d:4a:5f:bb:89:93:60:
60:e3:9c:8c:5f:be:78:cd:0d:85:28:3a:33:87:9e:ff:bf:a8:
cf:0a:ed:2a:5a:b7:fb:32:64:ea:fd:64:11:c2:30:c6:ee:33:
63:d3:4f:0d:66:31:4d:7e:55:ea:04:c6:38:69:c3:b1:62:d9:
39:ac:7d:f2:63:f0:3b:6f:47:6b:19:5f:18:aa:7f:e8:1b:e3:
5e:6d:87:48:54:06:27:54:da:b5:2e:54:16:4d:97:84:c4:7a:
08:1e:7d:76:e2:dc:ec:e9:c8:5a:84:c9:91:10:07:bf:a3:5c:
bb:af:59:16:60:bd:1c:91:1c:12:04:f3:b4:6a:d7:4f:86:73:
35:c5:06:fa:e5:60:32:6b:0d:fb:c8:fe:d8:5c:ae:01:75:5f:
d3:e3:96:9e:f2:79:27:93:37:50:81:f3:7e:5b:77:2e:f6:d9:
83:fe:d6:94:ed:12:b7:d8:49:a8:8e:af:df:0a:b7:ec:55:79:
09:8d:8f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:50 2026 by rpki-client