Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
File: Tj_pDw-taiXUa9fDNbki2gMbLHg.mft (raw, json)
Hash identifier: O6/YjmZq3r3VBF4fNUOBJsRpPtSjYypqozrYx381fe4=
Subject key identifier: 99:33:BD:E2:55:8D:B1:D1:F6:5E:F2:03:81:0F:80:02:3D:E2:32:36
Authority key identifier: 4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
Certificate issuer: /CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Certificate serial: 019D28F23F21E8CBD1DF23736861C594B93B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
Manifest number: 0D2F
Signing time: Thu 26 Mar 2026 07:00:57 +0000
Manifest this update: Thu 26 Mar 2026 07:00:57 +0000
Manifest next update: Fri 27 Mar 2026 07:00:57 +0000
Files and hashes: 1: Tj_pDw-taiXUa9fDNbki2gMbLHg.crl (hash: wtU6UzWjyvyzowq3Yk+lfTGz5sPAaTagQuR6lQWasBE=)
2: uglZN3e0ur2TkFYxywC2Q5oDa8c.roa (hash: W5cX7fhh2nzjYIuvg0tzN9PC2FGwU2Yio9kqI45+MPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:3f:21:e8:cb:d1:df:23:73:68:61:c5:94:b9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Validity
Not Before: Mar 26 07:00:57 2026 GMT
Not After : Mar 27 07:00:57 2026 GMT
Subject: CN=9933bde2558db1d1f65ef203810f80023de23236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:68:52:41:43:98:bc:e8:ab:55:92:77:4a:8b:
40:e4:52:71:ab:00:cd:ff:84:db:85:8c:77:55:ae:
22:19:ea:5d:d4:0c:7e:e1:3d:24:2a:4d:ee:dc:8c:
ca:0e:9c:04:79:4f:02:d1:fd:f3:ed:e9:77:1c:7a:
3f:d5:40:86:af:7b:0e:60:ba:e5:c6:b9:94:dd:92:
0a:33:bd:cc:3f:6f:9d:35:80:65:92:f5:e1:4a:5c:
e7:5d:79:44:20:9b:9a:e8:f3:f4:8c:b8:dc:1b:5f:
56:93:39:ed:81:46:a2:cf:3e:7a:93:3d:ad:84:31:
f8:92:b4:a7:d6:54:c8:8e:f1:99:52:f6:09:e3:55:
b5:b7:fe:d2:32:17:d3:17:7f:dd:f7:73:cf:22:c6:
91:15:0b:db:2e:66:68:ad:d2:08:04:23:e6:b1:71:
6d:6b:50:49:90:98:1e:93:3d:08:bc:51:99:3d:a7:
a5:af:78:bd:68:23:65:46:81:90:bd:73:ca:93:08:
25:a7:81:66:b5:30:18:52:27:e3:72:c3:b1:33:99:
55:5c:47:47:62:d1:fc:e7:ba:db:ee:36:63:a3:20:
59:0b:1d:f8:bc:e0:7f:0e:6b:6d:07:90:11:ce:0e:
ab:b1:36:c8:e8:b7:1f:f2:92:b4:2c:0a:17:75:92:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:33:BD:E2:55:8D:B1:D1:F6:5E:F2:03:81:0F:80:02:3D:E2:32:36
X509v3 Authority Key Identifier:
keyid:4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:80:10:97:a5:c9:4b:df:0f:4c:38:92:4b:a6:46:88:ae:b2:
a3:ac:28:1c:a2:85:64:49:35:0d:44:36:08:8e:40:77:19:b9:
a7:98:41:eb:a4:dc:d7:ed:f4:d7:72:78:5e:d1:95:78:dd:4c:
eb:92:9d:42:d6:ae:ef:22:35:16:15:84:ce:dc:6a:dd:13:91:
9d:de:39:22:8c:ed:50:6f:4e:c3:3f:69:06:47:6c:f8:c0:cf:
a1:54:ba:1d:7e:d2:d8:7a:85:9a:1f:34:7e:52:3b:ca:66:41:
dd:a7:cb:6b:3d:d2:f5:07:67:e2:c8:50:6f:83:c1:3a:64:53:
d8:ad:e3:25:2e:0a:d2:7c:65:c7:a0:f4:d7:54:a4:cc:6f:b0:
dd:bd:c4:8d:93:ee:ec:be:94:19:12:6f:b3:14:92:c6:58:94:
db:d8:63:17:78:0e:32:b7:fa:3f:2c:7a:1b:be:f2:d2:d2:b8:
d9:a9:9a:f3:3a:7e:2b:98:44:6d:96:09:a4:25:e1:40:2e:e0:
ef:cd:69:b7:1a:95:9d:56:9e:18:e0:f6:c5:09:d5:4f:79:ac:
92:a1:ef:b9:80:ce:bf:eb:65:a3:80:40:68:6c:ff:33:34:2b:
b1:38:bd:b6:21:79:f5:31:e4:b7:22:12:71:46:eb:93:ba:33:
5f:b2:25:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:46 2026 by rpki-client