
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
File: TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft (raw, json)
Hash identifier: ilD/oAUPfQPLePKp3sA6JjVRzYcTSZy9UEErkNvSs3w=
Subject key identifier: E6:87:29:87:45:43:C3:30:57:A3:E2:C7:DF:53:D8:9A:D6:0A:4D:52
Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
Certificate issuer: /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Certificate serial: 019D265F268381BD81B7EF09AEF8DD222A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 19:01:03 +0000
Manifest this update: Wed 25 Mar 2026 19:01:03 +0000
Manifest next update: Thu 26 Mar 2026 19:01:03 +0000
Files and hashes: 1: 1-yMlj_lfkJoYBfYvpMydeDjmgSM.roa (hash: K/sPdE3c5W5fRpAqOLm5bFgaW4DKI4EBlPvEPl32aOM=)
2: RItX9BG6Bl_mx3MTjyJm8l3wLw4.roa (hash: ozz/LMoGDHWxs5USbAIdVcdqDkAaVci0RWqFGYt8Lgg=)
3: TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl (hash: WauUyriOMI5DEOSYYC1v/2i9I4AdI7D+mSiRUj+wWYY=)
4: tCb5DC6zfb4vzHPOix2UvW9ndS4.roa (hash: ntxgYvCvFvJADG1N43LItMS9Zjg6jG20YT8FEIvxIu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:26:83:81:bd:81:b7:ef:09:ae:f8:dd:22:2a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Validity
Not Before: Mar 25 19:01:03 2026 GMT
Not After : Mar 26 19:01:03 2026 GMT
Subject: CN=e68729874543c33057a3e2c7df53d89ad60a4d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:89:09:6d:9d:c9:37:6f:a7:b5:61:d0:96:
7b:5f:4c:87:b3:7f:ef:51:23:63:5b:2d:27:4e:da:
7e:d5:69:50:6a:b5:ca:2b:4f:77:0c:99:c4:47:09:
cb:6f:6d:75:3d:cc:1b:5b:81:cc:42:52:3a:ea:a8:
81:20:06:37:3e:f9:9e:ab:45:91:be:2f:04:a1:0b:
2f:b8:1f:0e:00:46:7f:08:ed:e1:4b:fc:8e:b6:42:
8b:1f:9f:17:94:2e:04:bf:2c:40:14:1b:85:f2:40:
f7:28:a6:d2:7f:4c:15:4b:23:e2:1b:5d:c3:6f:74:
eb:48:16:55:c1:46:65:d0:d2:17:8f:54:b5:bb:fe:
eb:8a:f4:1c:c8:c7:0c:68:7f:3f:cc:76:94:70:00:
af:28:02:8b:95:b5:39:27:76:c5:c3:80:fc:03:e2:
af:ea:7e:86:93:7c:04:b1:86:aa:6e:85:05:9d:0a:
42:46:96:ec:73:0d:34:27:8b:00:81:14:ef:16:ab:
22:e8:04:e0:c2:c9:bb:cd:d9:74:64:c8:2c:75:42:
a0:ef:7b:99:29:51:4e:15:16:7f:f4:c9:96:a1:26:
55:d0:6e:bd:3b:ca:f3:3f:9e:74:0e:af:d4:9e:f9:
29:e7:ab:07:5e:6c:f0:58:ba:89:ee:96:bf:ac:04:
f9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:87:29:87:45:43:C3:30:57:A3:E2:C7:DF:53:D8:9A:D6:0A:4D:52
X509v3 Authority Key Identifier:
keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:67:07:40:b2:53:cc:fd:37:c3:13:4b:58:fc:17:83:56:df:
d1:d7:c1:09:b5:ff:c2:e9:3b:54:76:a2:ce:94:07:e2:9d:00:
a0:18:3c:77:c9:e3:a6:a9:48:c1:61:b5:c8:88:30:0e:ba:fc:
70:c7:dd:7f:a6:7c:ad:65:3c:54:be:a7:4b:5c:e7:6e:9b:40:
00:4c:67:60:48:04:8b:cd:31:9d:1a:b0:10:2a:93:2f:2e:3c:
53:89:66:9e:91:fe:99:d0:e5:39:b5:6f:34:d1:b0:13:5c:1e:
91:c0:75:fd:7e:e0:16:97:88:d3:50:fd:30:63:d2:77:02:8f:
8d:91:e1:db:4a:68:6e:91:9f:e3:68:d0:18:f1:02:25:c7:a0:
b6:05:73:e1:7d:e4:37:7f:5e:35:fa:11:a7:45:d1:35:26:eb:
18:33:a5:7d:60:7a:b8:15:e5:23:2c:32:99:ba:c5:9f:f9:1d:
75:15:ca:fa:06:d5:13:0c:68:35:3d:3c:6d:1c:92:2d:cb:a7:
f2:b3:bd:87:3f:d5:36:0a:ca:a8:da:04:ea:cd:29:d4:f5:ac:
d2:51:e0:ba:e2:63:2a:a4:a9:7a:e9:04:45:d5:31:ff:40:4e:
08:d3:9e:89:b1:88:8c:1b:96:ba:ad:77:54:48:a3:36:d1:32:
8c:81:f4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:06 2026 by rpki-client