Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File: TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier: LULdhF0emi9q5m7N+L5JCZ/QnhZGb+gYHExzV9QPwKA=
Subject key identifier: 3C:28:66:60:0C:D5:02:A9:D6:6A:CB:06:C4:B8:66:BB:D7:F9:75:C3
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 019D2A72587C2F5EBC14FA1A62CBEA1468D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number: 1876
Signing time: Thu 26 Mar 2026 14:00:29 +0000
Manifest this update: Thu 26 Mar 2026 14:00:29 +0000
Manifest next update: Fri 27 Mar 2026 14:00:29 +0000
Files and hashes: 1: 87ELvGR-tVd6OIalv11-VasMdI0.roa (hash: GT+ViPlDKtnswlta2ucK3jOCqFPeg5F12bpU1G0NLyM=)
2: 9HtQbFiuMYK5vn6ZdJ9A8WN33CU.roa (hash: NhpPo4MiaM2h+3uIW+206u04bojlNWdCKr/u5d1izOo=)
3: EgoHat_Mmduzy9sVoMLljVSWe1M.roa (hash: sKWx6PYAthDawxft6PEnQMKdlybWEO/LK5TV06bp3aI=)
4: Kdv421FxArGX_lR7dnoK8dbBkd8.roa (hash: QF5wI0hLNiGqV5YB/2mk9biUU4gFL01FMlpDcSvN+Dk=)
5: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: Tks5bfvr1XzinsrU1+eVaZ1MRUqvS5sQ6mHLaabNc/Y=)
6: VOy2pqg45DcbaU8g-AYkzB6uwX4.roa (hash: VFjQyoH7Ml5NUEDn/pVO3lEP5cH7fnzrRe/Tnl0alSQ=)
7: jueFlTq5Wpmf63P1qlwF3ekSIBo.roa (hash: 73q0Fc/38Tfq14N513XX+nWtiK95t2QQLqH0dSyYsFc=)
8: weCSLgcy81oriQwLxEbz5cBeJzg.roa (hash: TJPfh6TbLdnCL07UGvGbszVyYvuSMqDOujw1k7u6TFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:58:7c:2f:5e:bc:14:fa:1a:62:cb:ea:14:68:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Mar 26 14:00:29 2026 GMT
Not After : Mar 27 14:00:29 2026 GMT
Subject: CN=3c2866600cd502a9d66acb06c4b866bbd7f975c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:98:22:8c:92:74:96:d6:e9:4c:d1:7d:d4:
ba:f6:aa:80:79:f7:35:97:e1:80:83:26:fa:b6:f7:
67:39:38:cc:b8:44:8a:ae:78:af:1a:bb:94:9d:cb:
ce:47:53:b8:8e:45:9d:6e:c8:34:51:91:be:63:d8:
d7:a7:e9:ae:14:67:34:13:5c:27:15:17:ac:9a:d8:
cb:cd:08:59:88:7d:b3:e3:45:c6:08:49:eb:84:d0:
bf:83:84:ac:37:42:21:5e:5d:bc:47:91:47:0f:87:
08:33:49:7f:04:43:b6:76:52:8c:34:1c:09:ed:4f:
70:ee:39:a7:6b:52:37:d8:bf:16:bc:2e:fc:ea:77:
f4:66:e6:9c:db:b3:fc:fe:b0:96:b8:a4:1c:71:83:
f3:99:13:2f:e4:49:3e:a3:f3:7f:5d:02:57:28:12:
4d:97:a3:b2:8a:9a:6c:4c:bc:0e:b0:ad:e3:fe:5e:
1b:85:43:04:a2:57:2d:de:9f:1f:8f:21:32:84:19:
14:99:7c:10:0a:60:55:cc:ce:2d:45:8e:98:fe:99:
71:fd:b5:0d:a4:5d:90:93:45:10:7a:74:78:d8:27:
20:cf:86:e5:3e:a2:a1:9a:84:88:b0:71:ea:6b:3f:
c5:f5:af:7b:dc:52:ad:02:b0:60:da:27:19:00:f4:
30:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:28:66:60:0C:D5:02:A9:D6:6A:CB:06:C4:B8:66:BB:D7:F9:75:C3
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1b:9c:94:45:bf:ae:89:fd:9f:b8:ce:2e:e9:91:1a:45:ed:
b1:ab:d7:fa:f2:b0:b2:7e:da:84:92:41:07:19:bc:cc:a0:ef:
4c:cc:58:af:0b:b4:5f:f3:f1:5e:78:75:f4:f9:2b:2c:6c:0c:
ae:ec:94:e7:81:7b:5e:4e:f3:98:e4:75:13:a8:72:84:71:af:
86:45:10:f3:e0:69:89:8f:3d:6a:5c:39:b7:c9:41:57:e4:fd:
89:59:d3:70:ea:a4:ad:77:d2:98:20:14:e1:4a:29:b7:73:15:
d0:56:69:69:11:8a:ef:14:b0:ae:71:07:97:1e:e6:52:44:c3:
dd:00:60:d7:57:18:ca:60:30:4d:5b:0f:01:c9:13:23:87:81:
21:e4:d4:1f:e2:3f:e4:9c:f0:d5:5f:86:d0:05:60:85:90:7a:
e2:9f:5c:ba:3d:92:db:0f:fe:b0:ab:c3:9f:62:95:65:da:ff:
81:34:d6:27:54:12:f5:75:89:2b:22:21:a5:95:3a:a3:7f:7d:
41:ba:db:28:20:57:07:d4:25:a5:5d:34:d6:0f:ca:13:f1:b9:
76:2e:17:c3:9f:37:73:5d:7c:b3:aa:4f:59:ac:73:f6:ac:b2:
11:87:a5:5d:6a:51:07:f6:d7:49:e2:9d:f7:ad:25:e0:36:3a:
cd:6c:f7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:13 2026 by rpki-client