Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
File: TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json)
Hash identifier: 9GR2qhg4qJWJq9lg/csO6Hf6YZVatfm/Wh97Sq1ZhPc=
Subject key identifier: 8B:3B:55:CD:70:F7:30:DC:9D:C8:8D:8B:03:7F:3C:EE:78:0D:D8:D2
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Certificate issuer: /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial: 019D2703BC4E663CFBB52C14162BB236205E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
Manifest number: 133C
Signing time: Wed 25 Mar 2026 22:00:49 +0000
Manifest this update: Wed 25 Mar 2026 22:00:49 +0000
Manifest next update: Thu 26 Mar 2026 22:00:49 +0000
Files and hashes: 1: SFGE70vQYmz_oKTtZMgB-YKUyZc.roa (hash: lZ0OnAmHAxbwpz0Bf+bKQq6tPOf7KpsPHIF+YP1ggzc=)
2: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: eVobcP0i098us0jDwfahE9vCEPoANOk1dAfWUhCA+b4=)
3: eHNuPU6iYgVIfZ9NIp8A3552y-I.roa (hash: AOM1Ajc5ONgwd+E4wuOhZtP8/uws9RFZszPyOYWcL2Q=)
4: vP7G0LDj9js2uqV_dVx329H3yeM.roa (hash: fyHdxLq/9tcpLwgIyk0ErgVx3QqPOxT/MFLUCo0yJ0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:bc:4e:66:3c:fb:b5:2c:14:16:2b:b2:36:20:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
Validity
Not Before: Mar 25 22:00:49 2026 GMT
Not After : Mar 26 22:00:49 2026 GMT
Subject: CN=8b3b55cd70f730dc9dc88d8b037f3cee780dd8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a6:8a:2e:70:4b:3b:54:7d:2d:7b:ad:9c:84:
5a:88:61:59:44:03:37:01:e0:83:0e:69:f9:d7:22:
06:09:88:4d:a4:05:0e:e3:82:e3:e3:14:1e:c2:42:
eb:cf:1d:8c:11:a6:78:53:fd:d6:d9:4d:e5:2b:9e:
ce:c8:1e:46:5c:79:7a:ef:ed:99:57:e5:d8:06:cf:
03:f0:93:1c:c5:e7:83:52:45:d0:2f:c0:a0:61:7e:
89:ef:13:bc:9c:c5:8a:91:29:fe:18:47:80:13:e0:
57:04:7c:0f:ce:6e:08:07:11:77:86:6c:f7:fb:c9:
42:a6:b5:88:e4:8f:b6:79:98:3c:2c:32:7d:8d:f2:
37:fb:a0:d5:32:ac:75:13:20:21:2f:70:ff:44:2f:
bf:c2:19:61:a9:71:c2:f5:e3:c2:51:e4:f0:3e:aa:
00:0e:2d:84:d1:64:fc:bd:d7:02:92:a5:7d:5c:fd:
39:24:09:93:81:d5:17:af:56:64:47:60:31:4c:16:
51:a0:fd:df:a0:ed:6a:31:42:b1:f4:03:32:c0:bf:
9f:9a:4d:1a:28:cf:17:46:64:90:62:e7:20:14:eb:
5c:e1:ec:7d:ef:18:38:35:f3:4c:8a:2f:11:f1:de:
d6:20:ef:21:31:e5:b5:e6:fb:30:3d:96:3d:9a:f1:
94:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3B:55:CD:70:F7:30:DC:9D:C8:8D:8B:03:7F:3C:EE:78:0D:D8:D2
X509v3 Authority Key Identifier:
keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b8:0a:31:71:fc:e3:77:29:3c:84:88:a6:90:47:2b:22:15:
51:47:8b:75:de:8a:25:10:57:ec:fb:5e:f9:e5:32:41:66:1e:
ee:50:c2:9b:13:6f:8e:75:77:7a:2b:d0:1f:46:e8:d2:fe:01:
20:55:67:93:5e:af:f0:82:d8:a3:64:5e:b5:8c:6e:a9:3b:ca:
d6:d6:68:3b:b8:e2:b6:3a:42:73:e6:f8:27:a8:8b:9a:43:c5:
1e:ba:5f:14:16:3c:c8:34:ab:67:b8:63:8d:73:fe:e0:48:14:
1f:5d:31:4b:ce:a6:6b:74:de:97:3e:c4:01:77:49:51:8b:d8:
a2:b5:02:5d:76:03:07:48:f6:4d:cb:5d:c6:80:9f:f5:92:35:
64:71:cb:3d:0f:0d:b7:35:7e:25:3e:12:49:f1:4d:ee:79:8a:
07:01:03:23:cc:9d:31:ce:83:f4:a9:57:e0:5f:fd:2a:a1:0c:
da:eb:2f:ab:c2:bb:44:5b:18:dc:a3:1f:4f:d3:f8:a6:3e:34:
ad:48:2b:05:01:81:d1:c5:f9:5b:55:40:fe:c7:17:95:57:58:
af:9d:ea:31:ae:8e:a9:fb:d5:33:5d:9c:83:37:f6:64:a0:12:
39:46:fd:60:aa:8e:3f:0d:65:2b:ed:e5:b1:09:01:3a:6f:60:
95:0f:9b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:13 2026 by rpki-client