Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
File: TnzINx7SS6z2esqLkCzucGr8Yks.mft (raw, json)
Hash identifier: fechXhzaZkgnZf5/UyE4VusQm3jqiD/+lbfVoWcE1PA=
Subject key identifier: F6:D6:77:F9:16:58:21:CD:B0:A8:65:52:FA:82:63:A9:D1:D0:6B:19
Authority key identifier: 4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
Certificate issuer: /CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
Certificate serial: 019D27A91F4423D401CBD579B9318B76A8FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 01:01:27 +0000
Manifest this update: Thu 26 Mar 2026 01:01:27 +0000
Manifest next update: Fri 27 Mar 2026 01:01:27 +0000
Files and hashes: 1: TnzINx7SS6z2esqLkCzucGr8Yks.crl (hash: ivUCD/uZDFvSgehtlxPLL/KMg3yTpuf7bL4RmVXMy9s=)
2: wlxifpAvi3KnZGmbDR-ny66_Gks.roa (hash: T7gVPusKxBgkDKZBte1yrg8sQCBMVaEOfioHHj0VULo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:1f:44:23:d4:01:cb:d5:79:b9:31:8b:76:a8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
Validity
Not Before: Mar 26 01:01:27 2026 GMT
Not After : Mar 27 01:01:27 2026 GMT
Subject: CN=f6d677f9165821cdb0a86552fa8263a9d1d06b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:62:eb:27:26:97:8d:4b:74:08:09:c3:24:31:
36:07:6f:d2:cf:3b:8b:bd:c6:c3:50:71:51:c9:3d:
8e:ad:9f:ca:0d:26:cf:b1:49:68:52:1a:72:1e:c0:
5d:40:11:fa:88:0a:97:b1:72:d6:03:ef:ef:aa:bd:
2e:21:23:69:4c:3d:e3:dc:76:d7:8e:db:a8:ba:4c:
60:eb:f4:2e:a0:2f:25:4e:7f:20:e1:d2:d7:dd:72:
57:1e:aa:60:29:52:3b:ed:38:0e:6b:f3:cd:cc:4e:
06:18:68:19:7d:9b:4f:aa:e7:43:c1:8e:c3:92:83:
ab:1e:81:07:b6:77:30:4a:14:a2:83:cb:b9:b1:16:
0d:91:60:45:1a:3d:30:e2:19:c3:a7:11:8e:d0:4b:
88:bd:c5:e3:fa:5f:ea:48:e1:48:6c:3a:04:54:f7:
1e:d7:e5:39:7d:94:cd:ec:a8:0a:be:c2:8a:a2:42:
83:06:3e:24:0c:56:fe:ef:a4:aa:b9:e3:6e:7f:6d:
4f:d2:bd:d6:2b:18:18:71:09:b7:7f:ef:7f:eb:88:
c0:bd:97:bd:fa:be:44:3e:2a:eb:d3:69:af:2a:47:
cc:99:44:17:6f:c6:6c:99:72:49:10:45:64:6a:47:
c8:8d:ec:53:6e:e2:02:ff:fd:01:63:ad:df:7a:15:
c3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D6:77:F9:16:58:21:CD:B0:A8:65:52:FA:82:63:A9:D1:D0:6B:19
X509v3 Authority Key Identifier:
keyid:4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:da:47:d8:99:58:28:17:c1:3c:6b:c6:c9:3e:ab:76:7f:81:
1a:22:a4:dd:7d:b6:8c:d5:13:cd:02:d6:f7:b6:64:18:f1:94:
4e:f4:42:c5:47:5a:ca:8c:03:a0:5a:e6:9c:46:8a:bf:15:03:
99:cc:b8:da:7d:9d:c7:73:95:d6:b7:9d:0e:ab:cb:71:ff:21:
86:6b:a2:c5:a6:81:d3:77:0f:77:5f:ea:1d:e3:90:06:08:73:
58:84:84:ce:df:ed:fb:7b:84:bf:ce:33:dc:12:79:8e:c1:1c:
a7:8f:85:fc:7d:40:fe:de:f5:13:dc:8f:42:a1:e9:bf:89:38:
0b:11:d9:ce:e4:e5:fd:cf:8b:47:12:14:bd:77:22:95:37:d6:
a5:67:b1:53:8a:ee:27:b4:d6:ac:77:bf:e9:d4:6d:25:b6:ae:
cd:40:c9:aa:67:09:ec:a8:58:92:7e:0a:23:ca:11:f1:e4:f6:
7f:62:d1:cc:27:99:6d:0c:fc:d3:8f:a5:3d:40:de:ef:ae:95:
ed:34:8c:75:4d:3f:e9:b6:47:b3:59:8f:40:9d:6a:80:84:9d:
5e:12:df:96:ff:9c:12:80:1c:bf:1b:eb:6f:2f:a2:24:9b:1e:
dc:9d:59:e1:23:f2:af:f5:f3:29:73:bb:75:0a:f2:19:6b:f2:
fc:de:f8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:04 2026 by rpki-client