Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
File: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft (raw, json)
Hash identifier: dkEgDFtA3/jmTqqaRW649kVSoCXQwUethkyN7cL6ddw=
Subject key identifier: 8C:C3:C9:23:FE:3C:97:9D:1D:0F:F6:BF:45:FC:54:4F:D3:D2:C8:F2
Authority key identifier: 4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
Certificate issuer: /CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
Certificate serial: 019D2627FC9D6AF2E4AF43398EC1720EB0B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
Manifest number: 1819
Signing time: Wed 25 Mar 2026 18:00:47 +0000
Manifest this update: Wed 25 Mar 2026 18:00:47 +0000
Manifest next update: Thu 26 Mar 2026 18:00:47 +0000
Files and hashes: 1: HPyXpgvZq0DmF5lYqywyaXxXuLs.roa (hash: xJJdHEjB0zhK0uHLhPfuryAT20NVmJFJDeJjva/xFEM=)
2: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl (hash: FgG2P/k/eCmOdfzfenUeehPj9/Ge4HNbaEmIETvBiNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:fc:9d:6a:f2:e4:af:43:39:8e:c1:72:0e:b0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
Validity
Not Before: Mar 25 18:00:47 2026 GMT
Not After : Mar 26 18:00:47 2026 GMT
Subject: CN=8cc3c923fe3c979d1d0ff6bf45fc544fd3d2c8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4e:d9:90:9b:12:42:54:bb:7d:80:9d:ff:7e:
d2:65:e5:b9:0a:b0:1d:66:7c:e0:03:47:f6:73:e6:
08:1c:c4:68:91:83:07:7f:1d:ce:ee:83:a5:1c:ea:
da:06:ef:37:ea:d2:2c:38:98:d7:ca:f9:4c:dc:ed:
18:4f:21:ad:1c:aa:6d:06:4d:ec:6d:21:1c:2e:ba:
6b:be:e7:0d:ee:ce:fc:05:d3:15:af:a7:41:c5:d7:
b8:89:4f:6f:de:6a:13:8d:68:0f:75:10:59:c9:bd:
c6:7c:42:bf:1d:e7:6a:ae:27:7c:a2:f9:54:29:0f:
c7:5b:48:e8:cd:ed:96:7a:bd:5b:4c:58:ce:7e:00:
df:51:ab:3b:9a:1a:6c:49:28:e9:ba:b9:83:fa:14:
85:1a:22:84:e8:53:33:c1:9e:2f:49:92:6a:72:78:
d4:c0:bf:99:d2:58:80:b0:f5:93:e5:95:36:b3:4d:
e2:a0:8c:26:a5:47:ba:02:93:34:db:89:05:7e:84:
04:ee:f2:8b:0a:4f:b7:d6:bb:74:e3:ad:af:4a:22:
e6:82:5e:83:97:bd:af:d8:8f:ea:16:ed:6b:f9:c4:
69:71:66:e0:1f:76:6c:dc:46:96:59:53:0e:75:2a:
ad:de:ff:c7:98:4a:65:00:94:d7:4d:a4:22:f1:d0:
39:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C3:C9:23:FE:3C:97:9D:1D:0F:F6:BF:45:FC:54:4F:D3:D2:C8:F2
X509v3 Authority Key Identifier:
keyid:4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:32:ec:ee:50:2f:10:65:38:69:a0:77:0f:d1:11:7f:3b:88:
06:e5:b6:0c:57:ea:b0:d9:76:95:cf:f6:04:ba:94:d5:fd:d3:
f1:6e:43:9b:d8:d8:4b:f2:af:84:22:3e:e5:33:5d:cc:63:9c:
5a:fa:61:82:01:b3:d7:06:04:e3:70:69:ea:17:07:b8:74:c1:
1d:c0:bf:3d:7d:a9:2f:5a:1b:cd:92:b3:31:aa:b6:cc:47:fc:
42:00:65:df:56:40:df:1c:de:af:98:6f:c6:08:8c:d0:a1:dc:
ad:c1:b5:81:03:ef:80:c5:4b:8c:db:4e:12:43:b8:37:19:69:
62:a4:66:7c:69:89:5b:59:93:f0:55:d5:5c:92:fa:06:02:97:
0e:f2:22:94:eb:6a:4e:bd:52:9d:7a:65:7b:55:b9:db:d7:c0:
44:67:7f:3d:01:4c:1a:9f:16:cf:9c:9d:91:a8:9c:71:8e:58:
ea:55:5f:d1:f6:b9:5f:89:bc:b9:2e:4e:19:35:14:c2:67:bc:
86:3c:bf:ae:31:cf:87:86:74:b9:4b:8e:fe:6c:6f:c8:0b:d6:
d8:d8:2a:c7:30:3f:50:16:c3:7a:07:97:17:69:ea:64:ae:1c:
0a:22:83:73:ea:e8:11:dd:f9:19:01:85:35:69:5b:ca:c7:db:
b9:8a:df:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:43 2026 by rpki-client