Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
File: TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft (raw, json)
Hash identifier: tQbKEVZ/iF4UdEb6YiiWOrx+96fDXqxH79hczfwDz38=
Subject key identifier: 3C:62:79:BE:66:9D:CE:D2:16:59:FA:7B:3B:C3:E5:F6:7F:D8:90:F2
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Certificate issuer: /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial: 019D2BBBDD0A99188647226BB6FAFD90A850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
Manifest number: 1895
Signing time: Thu 26 Mar 2026 20:00:25 +0000
Manifest this update: Thu 26 Mar 2026 20:00:25 +0000
Manifest next update: Fri 27 Mar 2026 20:00:25 +0000
Files and hashes: 1: S_xAw4TAKD0Hmw2xnhtHL3k5aoY.roa (hash: vxfwKl9OJNlj62NwZPK4TBDjwebx7L8XA//O2MRpF/I=)
2: TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl (hash: pkE83ZiLxAPBsP9EJrKx9yTIWNhY1GU0Pv17zuZqBIY=)
3: c-YCWyzoKuSSywaDEkzGQvM7mCM.roa (hash: LATRwAOMpRe3Y12ruNlNc3V0nVK0fS7nwrlPNDtss+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bb:dd:0a:99:18:86:47:22:6b:b6:fa:fd:90:a8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Validity
Not Before: Mar 26 20:00:25 2026 GMT
Not After : Mar 27 20:00:25 2026 GMT
Subject: CN=3c6279be669dced21659fa7b3bc3e5f67fd890f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:ce:53:5e:23:54:49:bc:47:66:bd:ab:d0:
e7:be:39:66:89:45:50:5f:12:8c:5b:d1:9b:eb:65:
35:de:76:48:90:9c:b5:0f:94:96:57:40:50:fd:86:
bd:70:8d:06:a8:11:ea:58:fb:89:d1:b9:8a:44:c2:
6a:0c:e1:0a:1d:ca:9b:32:bb:63:7a:4d:3f:b5:5f:
9b:d1:99:06:12:b8:26:60:78:e9:af:9d:9f:36:8a:
11:11:06:50:7d:06:7e:c2:70:af:49:ca:fa:f9:46:
7d:e6:7f:87:f4:8f:b7:f0:29:ef:1e:ba:4f:bb:b7:
65:6b:8f:5f:aa:58:5c:75:44:f2:dd:5f:0d:f7:f3:
46:7f:75:1f:29:4b:dd:1b:43:43:45:5f:e0:dd:d2:
30:9c:d4:1b:64:da:3a:f2:97:45:50:b2:e7:5a:eb:
d0:f7:9a:1f:9b:38:00:07:b0:98:64:1a:d2:4d:f6:
68:08:c8:6f:26:a3:75:5e:9b:53:be:a8:9a:69:b3:
08:71:5c:66:cf:3e:21:5f:20:f3:39:ad:b9:48:88:
b5:5a:cf:6a:e0:58:05:59:97:8f:2b:d3:a4:bf:b5:
2e:10:34:b2:20:0b:02:a8:fc:dc:82:c3:34:b9:27:
b1:56:eb:96:e8:8c:c9:d6:ea:a6:9d:36:86:88:97:
0a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:62:79:BE:66:9D:CE:D2:16:59:FA:7B:3B:C3:E5:F6:7F:D8:90:F2
X509v3 Authority Key Identifier:
keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f6:40:06:6e:f9:00:36:ca:ce:e5:7c:6d:f2:f6:21:cf:f9:
1f:83:3d:96:40:12:a7:5f:f9:97:f6:6e:cd:83:51:7d:75:f2:
e3:da:5b:41:a3:0c:2f:e1:c4:7c:52:c5:f7:1c:38:4d:07:7c:
1f:7d:36:0e:c9:44:55:29:63:03:8c:d1:44:d2:0c:63:c8:bc:
5c:06:e5:d0:f5:46:e7:46:7d:8f:e8:8f:68:80:8b:15:27:45:
42:d9:f7:d8:5d:58:4b:63:0b:be:c2:29:0d:05:c0:df:7c:82:
27:2a:71:1b:80:77:5f:97:7f:26:f7:eb:7a:8a:03:c1:cf:03:
89:f5:47:b6:fa:80:c1:9d:53:ea:16:71:d1:80:21:ba:74:88:
bf:7c:2e:13:41:85:1d:07:3c:e9:8c:1f:b1:e9:3b:dd:87:e1:
1e:39:a9:a5:f2:b2:fd:8f:af:32:08:50:54:18:ae:95:b3:84:
0c:b5:11:1f:46:28:5f:3c:22:89:34:c6:2f:54:cd:bb:18:08:
5f:08:de:df:ed:da:6a:e6:16:8c:45:51:64:37:63:2f:e6:6f:
2d:a5:0c:0f:ff:bc:ce:3e:4e:21:77:24:4c:fb:8d:ae:cb:7b:
71:b1:c4:f9:e6:bc:3e:de:a5:39:26:64:7b:d8:3e:27:3c:79:
ff:36:ea:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:21:07 2026 by rpki-client