Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
File: tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft (raw, json)
Hash identifier: 6fM8z5TdfkdS71HEIew9pYaNsTReD/9/FM1LO1/7uF0=
Subject key identifier: E4:C1:CA:F5:7A:2D:A4:9D:30:24:84:FA:EC:2A:F4:8E:0D:41:AC:FE
Authority key identifier: B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
Certificate issuer: /CN=b46320188098520c366277f749a4f77a1d444439
Certificate serial: 019D2B858248C79E1DB5232EFEA1554B9CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 19:01:02 +0000
Manifest this update: Thu 26 Mar 2026 19:01:02 +0000
Manifest next update: Fri 27 Mar 2026 19:01:02 +0000
Files and hashes: 1: cD_uFT-kTapfuxpK7AHJ-T-GM5U.roa (hash: xnN2+r5sXxZBGsxlc2VxrhNLd6wrjJggfMUTLHByC7E=)
2: tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl (hash: D24ML9gcndONdj5z7/AgA8kxC0waCa8DFKPwLY+B11s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:82:48:c7:9e:1d:b5:23:2e:fe:a1:55:4b:9c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b46320188098520c366277f749a4f77a1d444439
Validity
Not Before: Mar 26 19:01:02 2026 GMT
Not After : Mar 27 19:01:02 2026 GMT
Subject: CN=e4c1caf57a2da49d302484faec2af48e0d41acfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:83:3b:f6:17:d4:b0:99:c6:a7:dc:42:66:08:
46:ea:7c:dd:1e:b1:4e:04:08:a5:ea:f3:77:f6:6b:
96:8f:00:4d:e6:2b:15:53:ae:8c:77:d0:ec:bb:37:
9c:9d:08:30:e7:0e:05:7a:51:71:2e:4b:05:93:ae:
fb:05:cb:b9:ec:26:cf:22:d8:12:f0:77:90:1f:74:
47:03:70:d9:48:91:44:7b:7e:5a:fc:eb:a4:92:ab:
bd:bf:61:cf:c3:dd:6c:e1:d1:a4:8e:13:0a:25:28:
6c:11:75:06:e5:5a:80:e8:11:c0:60:62:1f:b2:0b:
40:a4:58:46:49:70:2f:45:83:06:e3:d6:e0:4d:e5:
c8:61:15:9a:14:bb:51:db:f8:44:3f:bd:18:d6:b9:
22:b7:2d:c1:33:58:20:ea:6b:c3:00:4a:66:61:6c:
11:5e:a0:b9:11:b8:4e:74:d1:9f:4a:75:79:b8:d3:
a4:93:78:9b:db:27:70:94:a4:d7:6a:f3:05:34:4b:
27:95:89:1d:04:ef:1b:44:7b:4b:c1:db:6b:3a:15:
ee:60:63:c5:1c:ff:83:7f:5d:51:00:5b:13:ee:6a:
7f:5f:4d:4e:cc:30:06:5f:97:df:32:4f:62:9b:af:
a8:95:5d:fa:d3:91:ce:68:90:18:37:f4:5b:5b:d0:
5c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C1:CA:F5:7A:2D:A4:9D:30:24:84:FA:EC:2A:F4:8E:0D:41:AC:FE
X509v3 Authority Key Identifier:
keyid:B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9c:19:85:e5:37:2c:41:a0:ac:03:1c:b9:b1:25:cc:56:7b:
10:16:42:55:4d:7a:23:68:3a:49:f6:0c:64:77:a4:f3:a5:f3:
e5:be:df:13:ad:b2:dd:a9:44:8d:a1:fc:cd:0e:54:ba:90:8d:
7c:d5:98:45:6d:3a:1c:6c:59:f2:93:23:91:99:4e:cd:b6:d0:
ee:0d:2f:09:d8:30:dc:fb:a3:00:3d:20:a3:98:ea:61:30:b6:
62:35:91:0b:3b:c2:bc:ae:88:12:56:8d:2b:a3:bf:76:7b:ac:
22:97:75:45:b6:16:48:64:02:e7:22:ad:0c:55:dc:fa:09:12:
98:1b:40:df:1d:1d:20:0f:f8:0b:e0:9a:0a:0a:52:ee:76:33:
08:2e:f3:91:0d:73:9f:a9:04:86:e8:95:18:cc:dc:70:a6:0a:
67:03:78:98:b5:74:d7:4c:40:4a:f4:18:50:a7:5e:a9:4b:dd:
17:75:34:1f:52:fe:d1:6d:e5:7a:23:16:d9:2c:2c:df:69:e4:
cc:fc:26:72:d3:c2:18:6a:7d:ea:37:b7:e7:7c:9b:7a:f8:54:
a5:d8:17:dd:e4:8f:9f:01:b0:87:4e:ff:86:2d:9e:ef:4b:ae:
3a:f7:99:df:ec:0b:10:d7:3b:f1:41:be:91:31:87:1a:2a:d4:
b4:72:03:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:13:52 2026 by rpki-client