Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
File: tn8bh-Z1L0VDm4UozJaLR3CloPs.mft (raw, json)
Hash identifier: kw1KiHYdkAW40tR3YWSTkxwcBTYWq7f28zwuYV8I/MU=
Subject key identifier: 5F:9C:23:DF:40:89:0C:3B:6D:0F:E9:A2:F5:18:A8:C2:0C:27:83:32
Authority key identifier: B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
Certificate issuer: /CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Certificate serial: 019D26CD0337533DD482595FF4C0482C231D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 21:01:02 +0000
Manifest this update: Wed 25 Mar 2026 21:01:02 +0000
Manifest next update: Thu 26 Mar 2026 21:01:02 +0000
Files and hashes: 1: LQJRQQjbwBZBO6fcDK7TBARIRcA.roa (hash: kgMdOcv0hribs4xM8yAxDMw6nXQ/d8F0OHR9C1YIdKg=)
2: tn8bh-Z1L0VDm4UozJaLR3CloPs.crl (hash: t8dglpuvc7jXpTSwvaRnKBwmznniiI40dxmUYjuGGpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:03:37:53:3d:d4:82:59:5f:f4:c0:48:2c:23:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Validity
Not Before: Mar 25 21:01:02 2026 GMT
Not After : Mar 26 21:01:02 2026 GMT
Subject: CN=5f9c23df40890c3b6d0fe9a2f518a8c20c278332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:f1:7e:ac:6a:52:f7:98:fc:11:3c:94:88:
90:8b:d0:72:ec:0e:ec:a0:65:42:3e:ab:43:95:0f:
1d:a7:60:71:9d:e6:db:b0:23:11:a3:e9:33:07:dd:
53:7a:f9:a5:a5:36:c7:9e:73:90:46:fb:cb:20:48:
ef:6e:af:7a:f8:ac:59:51:a2:e2:a4:f3:94:4c:07:
6c:a7:07:08:19:e9:28:b3:a3:87:5c:22:30:ef:8c:
f3:1c:67:b8:c4:f8:2b:5a:f8:16:ed:8f:1c:7a:31:
c1:5e:4b:32:57:52:57:9d:ab:4b:32:b5:42:db:58:
9d:9a:4d:5b:e4:3c:fc:61:3d:4c:bd:a7:44:ff:40:
52:ff:b4:61:6d:74:fd:6b:42:6b:d9:ec:26:17:76:
1f:a5:ed:19:61:7f:b9:2f:ae:86:0b:e0:7d:42:ce:
01:9a:1e:2b:0c:e5:ef:2b:0a:26:81:5b:1d:d0:dc:
02:b4:dd:01:80:c4:10:57:65:20:6a:1b:b0:24:67:
b8:a2:12:0a:9e:71:34:1f:a5:ed:88:62:9a:b9:24:
b1:33:cc:62:f5:07:d8:dd:18:2d:d5:4d:52:2b:e7:
b2:37:f7:7d:ee:a8:4e:da:6e:c8:de:ca:48:d0:31:
8a:72:f7:6a:ca:29:a6:7a:85:79:f7:13:55:e7:1f:
c3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9C:23:DF:40:89:0C:3B:6D:0F:E9:A2:F5:18:A8:C2:0C:27:83:32
X509v3 Authority Key Identifier:
keyid:B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:eb:6f:b2:7d:5f:13:88:90:4f:19:22:b1:55:f1:1e:62:d9:
58:38:0d:20:8e:3a:98:bf:0f:22:97:b5:14:a7:02:37:2b:f4:
b6:b3:0c:92:2d:98:e2:31:8b:2c:84:c6:c3:22:15:bb:0c:5d:
4f:b9:4b:3b:62:56:6a:ed:e7:58:48:28:f9:96:2e:0f:21:f9:
a8:20:b8:15:09:ac:80:81:58:1e:cd:8e:2f:5e:cd:45:a0:4a:
e4:c9:c8:9f:72:76:ca:30:95:6a:91:0a:cb:66:58:5c:a4:a9:
b2:fa:b4:32:f3:23:57:47:a9:cb:bc:4a:1c:48:35:d0:ef:48:
0b:9e:c7:ce:ef:35:08:2a:a3:d2:13:ee:9b:a3:03:29:7b:00:
02:7d:da:ba:7a:93:17:63:29:a1:81:e5:da:3d:72:55:74:55:
5e:af:e8:5e:dc:66:e3:5a:a3:40:29:3e:13:c8:80:5b:f4:12:
16:49:8f:9b:5b:d6:28:a3:64:87:58:ce:76:c5:68:69:a5:b1:
64:32:a7:76:ac:ce:0a:83:68:64:02:1b:5c:d3:97:9d:77:94:
c7:6b:53:4d:dd:7a:02:ae:18:f8:4a:20:02:42:14:e8:39:6d:
bd:0b:c0:d0:f3:73:05:9a:d2:4c:48:b7:bd:f3:81:a5:19:14:
67:f6:a7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:41 2026 by rpki-client