
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
File: TOdM9jcjwCadUoOxBlghrzhKmiY.mft (raw, json)
Hash identifier: wbx4Nnb7C0CIGMuLut/Owl+gxkB9pXHr3VOEt2hlDEo=
Subject key identifier: BA:A8:0D:AE:39:EA:03:1B:20:97:0F:B4:E4:34:44:4A:A8:DB:00:14
Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
Certificate issuer: /CN=4ce74cf63723c0269d5283b1065821af384a9a26
Certificate serial: 019D26CCDF17952158048FFEFB621E0C8FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
Manifest number: 091D
Signing time: Wed 25 Mar 2026 21:00:53 +0000
Manifest this update: Wed 25 Mar 2026 21:00:53 +0000
Manifest next update: Thu 26 Mar 2026 21:00:53 +0000
Files and hashes: 1: 4B_VfQWMTYDObUKM-BwKNSOeYqM.roa (hash: GtaOXYjrA7K8muzv0dOWQS3DgfVa4oJVWDqmEM1Lb0o=)
2: 8Q40PlY6cpiTHKi29S26G9DdZhI.roa (hash: ZDmF+D6x42sRt1+OHh8Qa/2IzhhfYVV5gqAu2bLK1o8=)
3: TOdM9jcjwCadUoOxBlghrzhKmiY.crl (hash: 58ekzDVuO8dwzjp7JT7RGYU9P/z/2H+9wrZIazUsdH4=)
4: mJxvlVesYFyqMGJZoVjJ6H8bytQ.roa (hash: VwZ3L7NHL8vXYsjYAD8iL+X2hR9DNXoNspGIhoXBzzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:df:17:95:21:58:04:8f:fe:fb:62:1e:0c:8f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26
Validity
Not Before: Mar 25 21:00:53 2026 GMT
Not After : Mar 26 21:00:53 2026 GMT
Subject: CN=baa80dae39ea031b20970fb4e434444aa8db0014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9e:40:d1:51:4a:a7:a5:91:cb:dc:3e:b2:6a:
e9:d1:31:b3:8a:08:b6:4c:8e:82:9a:2e:bd:84:44:
c2:7a:f6:c6:1c:ed:e5:55:c5:ba:f0:1f:83:e5:98:
1c:dc:c5:ba:e3:85:4a:48:2e:5d:6c:63:f3:9a:6b:
fe:48:2d:5e:ca:0a:5e:f1:ab:ac:11:25:48:52:37:
cf:c7:2e:33:71:c8:30:e2:5e:c6:86:53:ac:5a:7a:
a8:df:ac:63:70:8d:be:77:25:c1:11:3c:b4:0a:fb:
b2:5d:37:9d:47:4c:f1:64:12:f0:ae:23:52:82:29:
ef:b6:5f:b8:15:9e:10:fd:0a:15:68:ae:89:8e:9e:
0d:c4:1c:d8:c7:4d:2a:d2:a1:a3:30:30:33:21:87:
e0:b6:20:25:54:2f:c0:50:6b:0e:38:06:63:89:35:
9b:47:5c:0b:92:9d:cd:be:fa:92:6c:a5:31:ec:23:
89:d8:88:f9:49:ef:16:4a:b9:5e:f7:fb:c2:92:ab:
03:5f:7e:c9:1b:a6:3a:46:ce:c4:84:b7:23:1f:ae:
68:9b:65:ed:d2:03:fc:06:62:a4:25:65:48:18:c5:
a9:f1:ab:0c:56:c4:13:17:96:f8:a7:1b:56:c8:97:
c6:06:27:84:22:af:20:94:43:6f:c5:cc:41:61:f8:
dc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A8:0D:AE:39:EA:03:1B:20:97:0F:B4:E4:34:44:4A:A8:DB:00:14
X509v3 Authority Key Identifier:
keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f4:60:e8:0a:40:8c:6d:4f:0d:9f:fb:76:33:4a:02:e3:21:
b7:d4:a6:84:d4:21:db:c2:3e:29:5f:1b:29:00:0d:94:c7:2c:
d6:e4:0f:26:b2:04:fd:ad:78:17:34:06:2f:9d:fc:a1:3d:17:
92:f5:19:61:3a:77:f6:50:5d:c3:26:c7:19:de:f9:88:16:1f:
a3:8e:68:d8:4b:fc:24:6e:1b:b3:06:18:7d:dc:d3:51:29:32:
3f:1c:bf:3a:ec:60:5e:e7:1c:a5:3a:c7:d0:ca:90:b0:3d:a5:
4b:70:64:b1:1c:14:ba:08:f5:c2:b3:1a:b8:55:f0:04:98:eb:
49:4f:a8:5c:f9:6a:95:9a:cd:ab:46:fe:df:a0:ad:36:02:fa:
9f:7e:f2:6a:df:2d:64:66:57:52:95:e6:e8:e4:b6:cd:ea:4f:
c4:ec:ea:5a:cb:52:58:02:94:32:15:88:5d:9c:47:0f:8e:7c:
3b:9d:16:61:7a:1e:d1:87:94:18:fd:ab:93:b6:c2:cd:fa:35:
7f:37:c2:4b:d7:07:d1:7f:00:e5:50:2b:01:b1:d9:7c:e0:02:
21:ac:ba:e1:46:e6:3c:d0:22:9e:26:98:ce:38:57:24:d4:b8:
91:94:41:59:3b:6f:84:a8:c4:16:a0:d9:dc:fb:39:0f:54:e2:
5e:69:25:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:39 2026 by rpki-client