Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: 0Yqd8Fs46U/BA9w6vglrV1NVt4Fv9GtmoUM+WuJ5B/s=
Subject key identifier: 2B:68:A0:11:CA:46:FF:D6:79:FF:CB:6A:36:6A:7B:B3:C7:B4:B4:AA
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 019D27E072AC3F8059EF02130E218E50AAA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 02:01:53 +0000
Manifest this update: Thu 26 Mar 2026 02:01:53 +0000
Manifest next update: Fri 27 Mar 2026 02:01:53 +0000
Files and hashes: 1: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: 4e9i3qbq8ENiahe2R89sSax6Lrefym1hXh0np1hD8+g=)
2: ZyTWugoefki0oz6k0H0j3uSA6D0.roa (hash: 8RbuK4aoWVsFj9ZjDN4iwth9lW8pdbJFx/Taog1hSJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:72:ac:3f:80:59:ef:02:13:0e:21:8e:50:aa:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Mar 26 02:01:53 2026 GMT
Not After : Mar 27 02:01:53 2026 GMT
Subject: CN=2b68a011ca46ffd679ffcb6a366a7bb3c7b4b4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:56:30:6f:7c:9b:70:39:c2:5d:d6:23:fc:
48:41:aa:e2:9c:f9:15:9a:60:91:32:c5:68:81:5e:
40:e2:67:4d:3b:65:ae:db:1e:ee:45:89:f2:78:84:
29:9a:f8:0d:32:f6:57:47:09:df:6f:45:92:0f:5e:
5c:d9:11:c5:3f:56:00:c7:f9:ee:f2:5c:51:02:a1:
ba:70:3f:bf:23:1e:18:0d:5a:7d:df:2f:45:7b:2f:
c7:a9:5c:20:99:dd:48:40:9a:dd:23:01:e0:f3:b4:
4e:76:ad:34:d6:86:2c:e3:4b:cc:43:2f:93:a3:9e:
af:a8:72:3b:f2:f4:8b:38:f0:90:f0:ca:44:ca:73:
25:46:1e:88:a6:d2:6d:7b:c2:62:3e:e1:11:db:6f:
42:55:ef:27:29:75:cb:22:31:96:98:47:60:16:64:
c2:01:81:d1:90:92:68:72:8f:f9:4f:14:c3:b1:7d:
50:c3:e0:5c:3f:5c:a8:c2:99:12:63:78:b1:13:48:
44:1e:c5:40:76:8e:1e:f3:89:a0:b5:c2:60:08:46:
bf:99:a8:39:2d:63:ea:ee:9d:12:87:be:9e:11:4a:
d6:a4:f5:d4:90:0e:94:0c:62:79:35:85:56:48:2b:
9e:d5:de:23:ed:ce:e1:63:b7:04:d5:93:a6:76:2c:
e0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:68:A0:11:CA:46:FF:D6:79:FF:CB:6A:36:6A:7B:B3:C7:B4:B4:AA
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:42:d1:77:ee:2d:19:f5:e9:27:b3:1b:65:c6:76:68:80:b0:
29:28:f5:b1:8c:44:30:5c:30:fd:e6:88:14:88:ce:ae:5e:e3:
d1:b8:4f:55:85:32:41:73:c1:eb:f6:09:27:15:d3:d2:a9:d2:
75:7e:e4:df:b3:fd:6d:20:5b:d3:a0:78:62:9a:78:27:7c:8a:
1a:11:9c:56:db:4a:b4:ce:74:46:54:40:8b:85:73:cc:8d:2f:
f8:a0:78:ba:0f:0b:86:f7:53:00:92:49:d1:87:57:05:c2:d7:
92:80:d2:c9:3a:2f:be:49:18:88:6b:06:c7:ef:f6:44:34:56:
3c:03:0b:ea:42:78:ba:24:2d:e6:68:ff:38:f7:df:f3:3c:43:
6f:da:5e:b0:8a:9c:53:c7:b4:64:9b:7f:b8:63:8b:0c:6e:52:
5e:38:84:d9:ae:71:68:2c:f7:19:83:e0:a4:9b:d0:c0:c7:49:
6b:76:7f:1a:6e:03:7b:31:84:b7:e0:8a:e3:95:01:dd:57:f4:
f6:b8:97:2c:d0:ba:de:8f:a6:59:bf:14:1f:57:ca:e1:ff:79:
b1:b9:75:da:87:c0:fb:2a:ae:c3:7d:43:a9:74:40:ab:d7:f8:
60:72:da:ac:bb:14:92:2c:57:d6:28:45:95:f8:d0:02:28:6e:
dd:2d:23:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:42 2026 by rpki-client