Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
File: TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft (raw, json)
Hash identifier: oMI2UnahY9bU7CsDis4z6xsUZNHDPutAEbqn4FacfSw=
Subject key identifier: 2A:72:E2:CD:6C:62:F9:9B:AC:62:A9:1F:FA:A8:92:E5:93:C0:E2:BB
Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Certificate serial: 019D2BF365AF9BCC1799BB7AD1C3833F36E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 21:01:04 +0000
Manifest this update: Thu 26 Mar 2026 21:01:04 +0000
Manifest next update: Fri 27 Mar 2026 21:01:04 +0000
Files and hashes: 1: TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl (hash: 22M5j5oE1WY047dqyQvtRnMZh8CQ549lP04/mDrxonM=)
2: o-popO9auROaiIHZBs-GFli-ZBg.roa (hash: 3gA1UOiSr0PnnoNboQJZUsn/LeXSette67Qdwhw+aTc=)
3: x3MPjpAMv8jy4dhfPiDorj_3tLI.roa (hash: 0SB+6P5HbotJTZwxWuM7rwLO4yE+FQC9GnNEzbQTjX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f3:65:af:9b:cc:17:99:bb:7a:d1:c3:83:3f:36:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Validity
Not Before: Mar 26 21:01:04 2026 GMT
Not After : Mar 27 21:01:04 2026 GMT
Subject: CN=2a72e2cd6c62f99bac62a91ffaa892e593c0e2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:5a:7b:62:ef:cf:b8:44:cd:6b:53:c7:59:
6e:ec:dd:e4:70:71:ea:43:84:13:d4:93:fe:2d:0d:
e3:ba:03:b3:30:b9:2c:40:c2:c1:5d:2a:d0:93:d9:
05:c5:1a:d3:98:f1:ca:b4:a2:08:12:8f:4e:3e:bf:
5b:85:cf:c9:e0:46:65:15:c5:32:80:a9:c7:d1:72:
96:5b:03:82:cd:ec:fd:ad:84:fd:7f:80:62:44:f7:
43:42:0e:84:8a:b5:79:be:42:95:b7:65:dc:7b:fa:
91:d8:7f:14:9d:f8:bb:05:52:1d:f3:37:fa:bf:82:
50:92:d4:7e:36:2d:b1:c6:c4:82:6b:f6:37:29:4d:
5e:1c:69:d0:ae:23:a6:d6:67:6d:a8:db:04:46:a2:
99:32:c8:fa:6e:25:45:16:16:db:1e:38:26:0c:2c:
ec:cd:a2:3f:5f:bd:94:5a:72:2b:bf:36:2e:23:41:
f6:29:68:87:41:a9:ed:d7:4d:89:52:58:6f:31:cb:
62:23:a2:9e:e2:45:fe:86:43:12:72:5e:ec:e3:bb:
bc:b3:02:ae:88:97:b5:4b:b7:90:0f:e3:a0:d1:2d:
1e:3c:5d:b2:70:56:10:46:70:97:a1:4a:3d:73:a3:
3d:42:38:fa:70:e8:6e:8e:dd:8e:59:2d:84:31:1f:
3c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:72:E2:CD:6C:62:F9:9B:AC:62:A9:1F:FA:A8:92:E5:93:C0:E2:BB
X509v3 Authority Key Identifier:
keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a4:a4:90:b9:4b:73:75:84:c2:59:cb:06:77:af:40:d8:c5:
82:15:48:0a:c3:83:d2:78:3a:46:6d:0b:92:36:63:b2:03:05:
2c:5b:5f:a7:89:b8:d4:4a:4f:95:66:7b:cf:01:67:54:bc:e0:
57:fc:a5:a7:0e:fb:91:03:cd:51:b1:33:a8:86:ab:13:22:60:
7b:f0:ff:f0:29:7b:98:b5:fa:b7:4a:62:b9:65:f7:05:40:7d:
a4:47:94:f0:44:5a:5f:5c:e3:95:3e:6d:5b:35:be:c3:fc:79:
a5:39:24:de:ac:ce:d9:ae:fe:c1:7c:6d:5c:bd:e4:01:59:7e:
38:ed:05:fc:25:d8:d2:de:73:23:d0:38:35:f1:f3:2d:99:1a:
a3:24:c6:0d:76:b2:55:d6:4d:bf:c4:9d:0c:0c:6f:eb:1f:d2:
be:ca:3c:68:32:7c:bc:c6:bc:9e:c5:2d:45:e5:5e:55:60:e0:
84:ce:53:fc:e0:6e:62:14:3d:87:5a:f4:b1:cf:bc:26:d8:9c:
7a:55:6b:fd:f5:cc:46:a7:d2:f0:19:f0:e3:65:b5:59:06:ed:
fd:51:3e:1f:55:16:e7:47:25:42:00:bd:a6:79:cd:81:df:f4:
11:58:c8:12:f5:2b:d4:98:eb:cd:90:b2:c8:b9:98:3b:b5:e0:
fe:c9:87:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:13 2026 by rpki-client