Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
File: TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft (raw, json)
Hash identifier: mLuJUyd4Qb+umXIx4S1PDC1ZvTbFkiP+W6NZpOE9+X4=
Subject key identifier: FE:80:0A:97:C0:9F:7B:32:20:53:C5:45:2D:14:6C:1E:14:EC:39:52
Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Certificate serial: 019D28166DD00F506622A2931A2A8E0BE345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 03:00:51 +0000
Manifest this update: Thu 26 Mar 2026 03:00:51 +0000
Manifest next update: Fri 27 Mar 2026 03:00:51 +0000
Files and hashes: 1: TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl (hash: /V1GVhHoZi8/jA9xtTpoLFmt0drQ/4tONhQY90I0AqM=)
2: o-popO9auROaiIHZBs-GFli-ZBg.roa (hash: 3gA1UOiSr0PnnoNboQJZUsn/LeXSette67Qdwhw+aTc=)
3: x3MPjpAMv8jy4dhfPiDorj_3tLI.roa (hash: 0SB+6P5HbotJTZwxWuM7rwLO4yE+FQC9GnNEzbQTjX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:6d:d0:0f:50:66:22:a2:93:1a:2a:8e:0b:e3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Validity
Not Before: Mar 26 03:00:51 2026 GMT
Not After : Mar 27 03:00:51 2026 GMT
Subject: CN=fe800a97c09f7b322053c5452d146c1e14ec3952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7c:d7:bc:0a:15:e7:e5:be:49:f3:a9:53:87:
c5:26:13:ee:9a:0f:a7:e8:ec:3e:80:25:8d:73:03:
05:b0:c6:39:08:06:96:16:cb:66:27:32:b0:85:d4:
81:55:9f:f0:78:7e:1e:7d:b0:6c:ab:16:b1:1a:c1:
9c:5d:fe:92:1c:36:d7:6a:7e:13:e7:90:4d:ae:91:
22:c0:47:c9:6c:76:42:c9:7e:35:02:33:11:77:1f:
1f:b2:ec:e9:7f:39:29:2a:0e:49:19:d6:42:04:eb:
82:d2:4d:e7:d7:88:87:7f:ea:f7:46:00:57:02:a3:
6a:8b:7a:3b:a9:f2:91:f0:22:6b:8e:29:b1:d6:ad:
01:5f:a2:6e:c1:fe:ba:20:6c:60:ea:a2:84:7f:10:
58:30:d2:20:b5:20:80:48:15:d4:0d:58:19:bd:9d:
e1:f7:ba:00:da:43:48:1c:a4:3e:25:c5:df:2e:ea:
ba:05:05:14:9f:fc:29:b1:72:84:14:97:d5:e5:09:
31:4a:8f:7f:d9:66:46:31:02:ca:f2:c4:6d:74:ad:
3b:8a:f0:b8:d1:3d:d2:77:b8:a7:57:6e:33:25:5e:
df:a2:16:c1:fe:2d:48:79:e9:1a:16:a8:f9:45:bc:
a0:aa:72:51:16:dd:db:18:6d:5c:4b:e5:6f:b1:1f:
d4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:80:0A:97:C0:9F:7B:32:20:53:C5:45:2D:14:6C:1E:14:EC:39:52
X509v3 Authority Key Identifier:
keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5b:ce:1f:55:ed:b1:8b:d2:9d:e8:d8:eb:8c:6e:35:ab:ae:
03:8a:f8:26:31:ff:9a:63:78:11:a8:99:09:f1:58:f9:e2:81:
8d:74:23:43:02:e7:40:ea:5b:03:d2:35:e4:2d:16:3f:df:4e:
c8:6d:8a:44:db:32:48:14:03:65:62:6e:7c:73:98:fc:27:e1:
fb:f3:63:be:87:69:a4:c8:72:76:c5:ed:6a:c5:54:cb:11:d7:
d3:05:89:a0:b4:e9:a3:44:e1:91:bc:46:fc:fb:96:cf:5c:2d:
78:bd:cd:c5:3d:30:47:b9:33:6d:c2:cf:e7:ee:1b:36:dc:cb:
30:fd:90:43:50:3d:9a:e5:b2:30:01:5d:2e:27:e2:9e:be:c8:
ec:c1:92:be:78:44:2c:01:99:bf:ad:96:7f:55:14:db:95:74:
6f:85:e0:51:03:06:82:56:1e:be:ef:59:cb:39:02:c0:9c:74:
1e:d9:5e:15:60:ac:13:bf:b4:4d:74:92:49:2d:86:25:a5:8c:
cd:bb:83:f1:c5:6f:c8:b2:a3:b4:ee:ae:1c:ab:c7:32:f0:01:
e8:12:e8:3c:b4:bb:2b:91:fa:78:db:37:0d:f9:8c:c0:0d:e7:
10:40:95:62:95:1d:ad:cc:35:16:79:7d:82:54:3a:9f:58:de:
c2:ec:2c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:18 2026 by rpki-client