Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
File: TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft (raw, json)
Hash identifier: JaGFMpZXn7wZB5UZf/MPFbGoQ9BmWeBtfBP7Po5u7Zc=
Subject key identifier: 2A:F4:DF:32:CD:CE:00:64:6E:E3:43:A0:3D:B4:E3:B9:55:B8:2A:E0
Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
Certificate issuer: /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Certificate serial: 019D29610D2323B6F58F8AC86659227D480E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 09:01:59 +0000
Manifest this update: Thu 26 Mar 2026 09:01:59 +0000
Manifest next update: Fri 27 Mar 2026 09:01:59 +0000
Files and hashes: 1: 7f9mWNQ21808rBtQKs150YeYGdQ.roa (hash: K2kDNGbgaaoiVLGCQASew4TmUVDveF6R8yGfvf0iat0=)
2: BpTEWFuaVAmDD0gS8GtzltOvrDc.roa (hash: x9sMNPsZhw4zuQc28bgkmq0CPdL7ikw7lR8SsfIXz9c=)
3: TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl (hash: L61CtIEE9FHhjvw3+zEPNzBLkHlrJpnzE0pwwwOtJn4=)
4: pbffqVIcAirnQONXIVnNslpP08U.roa (hash: 5VbKEPwbiJ5zZD1DvoWLqE1iDiZFdWOMUbRQcOz5CGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:0d:23:23:b6:f5:8f:8a:c8:66:59:22:7d:48:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Validity
Not Before: Mar 26 09:01:59 2026 GMT
Not After : Mar 27 09:01:59 2026 GMT
Subject: CN=2af4df32cdce00646ee343a03db4e3b955b82ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:70:13:a9:99:92:e4:45:65:81:c9:89:4a:
32:36:85:cc:9c:67:e0:66:92:50:4e:91:5d:e7:24:
72:20:f2:d9:55:85:7a:4b:9a:e2:25:c5:3c:c6:f0:
05:6a:2a:62:90:da:a5:7b:44:38:d4:f5:42:88:88:
b8:f3:4d:c4:06:59:2b:b7:bf:de:ac:3a:52:c9:c2:
87:66:9a:14:30:35:e3:25:5d:f5:5d:74:bb:8c:2a:
f4:e3:31:62:8b:4e:fa:e2:25:c7:82:24:1c:00:75:
cd:ae:35:0b:dc:4f:6d:93:e9:7f:26:0b:07:32:c1:
c7:df:f1:65:87:da:c8:24:68:20:13:0d:9e:1a:dd:
c9:6f:3c:7e:e7:9f:bc:a8:e7:25:2f:dd:43:b3:37:
b5:e3:56:2f:15:73:9d:ae:4b:d5:56:9e:b0:ab:c8:
27:c8:2d:7a:8c:59:39:7f:75:7a:b4:5b:12:6f:73:
14:a7:50:bf:07:15:b3:d5:96:f2:90:41:59:2a:fa:
6c:71:a0:f5:31:88:21:b0:bd:d1:6d:ad:f4:fb:42:
06:e5:c7:4a:7a:7f:3a:ca:d4:33:25:39:c7:8d:00:
82:99:62:b3:f8:a2:0e:c5:94:f1:a6:a0:1c:04:28:
97:8b:63:40:86:8f:0a:cc:62:1b:ca:d7:4b:26:78:
4c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F4:DF:32:CD:CE:00:64:6E:E3:43:A0:3D:B4:E3:B9:55:B8:2A:E0
X509v3 Authority Key Identifier:
keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:25:7b:8a:45:48:05:1a:90:b8:62:81:05:f4:00:82:e8:09:
a0:b4:77:5a:53:14:39:82:d9:cf:ba:43:19:61:a7:ce:b5:24:
05:b1:e5:45:a2:38:00:97:dd:fc:5c:70:8e:2c:a5:71:fb:00:
72:82:e4:1b:a3:ff:34:88:5d:6b:e8:a7:24:4c:d1:13:9e:86:
a5:50:9c:7c:99:2b:74:54:24:46:22:76:a9:f1:15:af:2a:d3:
84:cc:fe:56:11:8e:e7:79:39:6f:90:03:18:fa:f8:c7:bf:85:
19:66:14:39:b9:73:bd:7a:44:98:3a:13:5c:f4:b9:92:dd:81:
29:e3:b0:6b:56:63:f3:66:e1:c5:8c:24:ba:c5:15:2f:c6:b5:
c9:f9:81:3c:a0:91:c1:cd:a0:30:8a:21:a5:78:b8:6a:db:1a:
11:23:6b:d0:63:a5:db:12:b6:93:6a:3a:95:19:b5:3d:bf:23:
c5:bd:e0:58:c2:33:5c:52:74:e2:8a:b8:35:76:15:56:dd:9b:
5c:e5:77:a6:a9:42:3a:2e:fb:59:48:79:58:11:cc:f7:44:35:
7e:4b:4c:1b:10:61:5b:d2:1e:96:bd:d3:26:91:fb:96:b4:e3:
89:01:79:75:b6:15:c7:f3:a3:ea:4e:48:00:28:dc:6a:7d:b8:
ca:17:4d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:12:08 2026 by rpki-client