Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
File: tmDXgyCGDV7-cp4gi160sqvr4Hg.mft (raw, json)
Hash identifier: T5hZkDZiK5JBsRe+tilojKQF4V+L8+VXKehdLlriIIM=
Subject key identifier: 50:28:BB:08:1C:AF:AE:4B:1D:FE:22:5A:4A:08:6E:C9:3D:F3:88:2A
Authority key identifier: B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
Certificate issuer: /CN=b660d78320860d5efe729e208b5eb4b2abebe078
Certificate serial: 019D2A3B4E88CB082B08414E7D0503E1FCD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
Manifest number: 0E3C
Signing time: Thu 26 Mar 2026 13:00:22 +0000
Manifest this update: Thu 26 Mar 2026 13:00:22 +0000
Manifest next update: Fri 27 Mar 2026 13:00:22 +0000
Files and hashes: 1: mFb4ImZ4JM6OoNTxHAkLWhtfrLY.roa (hash: qBhRAaHkCsZlWo9HIK89kWh5m3QpwUNyihNsADOIr5Y=)
2: tmDXgyCGDV7-cp4gi160sqvr4Hg.crl (hash: skQWRFoCeBsCTDJQaC/RHxMyQJLpeWiJRXvsUeqJSVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:4e:88:cb:08:2b:08:41:4e:7d:05:03:e1:fc:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b660d78320860d5efe729e208b5eb4b2abebe078
Validity
Not Before: Mar 26 13:00:22 2026 GMT
Not After : Mar 27 13:00:22 2026 GMT
Subject: CN=5028bb081cafae4b1dfe225a4a086ec93df3882a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:76:5b:42:d3:24:5c:d8:5f:9f:56:4d:28:
e6:ca:89:ca:9b:2f:8f:06:a5:2e:d0:28:10:ad:4a:
44:20:67:12:2d:3d:e2:00:88:91:a9:bf:81:59:13:
45:28:98:cd:84:4e:71:6e:ca:d0:25:a2:41:96:9f:
7a:f4:8c:7a:13:f1:8a:33:c0:14:54:6f:10:df:72:
a5:ab:7c:d5:99:6a:4b:f0:1c:35:e5:a2:fe:ca:19:
a1:83:9d:49:4f:b1:a5:3b:51:01:a4:40:a0:3f:5e:
b9:2b:b1:78:f3:4c:51:3d:fb:99:9b:fb:53:1e:95:
b5:b7:99:71:ce:90:36:54:82:75:a5:b8:41:70:c9:
f8:5f:e6:66:e5:2b:84:fd:c2:62:8e:78:fe:d2:f4:
9d:b5:26:b6:b6:95:0a:c1:e0:b9:2c:b6:d8:64:81:
0a:b7:5a:4a:5d:1f:28:73:40:d1:bf:f0:9e:a5:1d:
45:24:5d:3b:c1:47:3c:aa:03:0d:d5:45:3f:89:23:
7c:ed:e0:f0:e4:87:32:cd:01:27:34:77:cb:bd:42:
11:22:c4:33:93:f3:1b:87:ba:47:4e:5b:c8:c3:cb:
95:6a:a1:23:8f:8a:be:f5:41:6f:b7:1e:3a:f9:59:
32:1a:56:69:e2:c3:26:5a:23:f8:4e:67:b3:40:53:
de:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:28:BB:08:1C:AF:AE:4B:1D:FE:22:5A:4A:08:6E:C9:3D:F3:88:2A
X509v3 Authority Key Identifier:
keyid:B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:00:7c:96:71:ef:ef:53:7f:9c:0b:8e:0e:2e:ed:1d:fa:64:
47:dd:e5:4b:e7:f0:cb:c9:9e:e3:89:5c:9f:e3:d6:75:a2:18:
17:2f:87:ff:67:1a:fc:f5:f4:14:20:9b:fe:15:37:00:b2:a2:
eb:41:2e:3e:e8:c7:f3:66:1e:a5:00:40:fd:34:63:13:7c:60:
49:2e:24:e8:cf:78:83:af:12:b3:96:ca:67:02:c4:1d:7f:93:
c7:22:c6:71:44:86:e0:30:a0:2c:56:e5:c3:e8:22:66:43:19:
83:45:0a:54:ff:14:2f:4e:a7:b8:88:12:bd:de:c9:1a:f6:10:
e3:9f:e9:2a:15:7d:8f:e1:44:27:2b:84:34:f3:8a:38:52:c8:
0c:76:b4:c0:c6:81:d1:2c:2e:ef:86:ee:52:dd:74:bd:11:9b:
ee:14:96:02:98:79:e9:ba:50:85:f3:c5:02:ad:58:7b:fd:56:
19:a6:27:7e:43:75:4a:b8:95:5c:39:f1:1c:a1:ec:6f:14:9b:
68:24:57:5d:6a:79:8b:6b:f2:2d:74:28:ee:57:62:fa:e8:e2:
09:39:ed:cc:84:7b:87:aa:f9:ff:f9:1d:f2:71:bb:54:cf:48:
e0:cc:a2:34:d9:d7:b0:b4:66:ee:88:3c:95:30:0a:e3:ec:0b:
2c:c9:63:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:56:59 2026 by rpki-client