Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
File: tFBrzj9-GuOn4sua0gXEzfsC3bU.mft (raw, json)
Hash identifier: PPdU39V5lAZhy9F0MnUn7+I2k13gk4F5IaKECuO+7cU=
Subject key identifier: 46:80:0C:06:3D:2B:A4:70:E4:81:14:6D:74:38:A2:E1:C0:AB:31:10
Authority key identifier: B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
Certificate issuer: /CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Certificate serial: 019D2816D62CBE054664003483CDC8E19E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
Manifest number: 1796
Signing time: Thu 26 Mar 2026 03:01:18 +0000
Manifest this update: Thu 26 Mar 2026 03:01:18 +0000
Manifest next update: Fri 27 Mar 2026 03:01:18 +0000
Files and hashes: 1: 8w5O_aWA-iC3XSFytQzyWAwkxBU.roa (hash: Q/iVM9hXeiPLXmIvOeOkM8vWEHG4S+hzrZyqZ+mibGo=)
2: tFBrzj9-GuOn4sua0gXEzfsC3bU.crl (hash: K0ffj+PyIXMe4OTMHyzznSnW3ZQBl55HnoGmS+33+Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d6:2c:be:05:46:64:00:34:83:cd:c8:e1:9e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Validity
Not Before: Mar 26 03:01:18 2026 GMT
Not After : Mar 27 03:01:18 2026 GMT
Subject: CN=46800c063d2ba470e481146d7438a2e1c0ab3110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4b:7b:7d:42:30:18:85:ff:d5:84:ba:75:8b:
f4:d7:b6:23:3b:ad:16:ae:f1:96:1a:8b:e1:cb:06:
15:88:4e:38:b9:92:79:8a:90:7c:e7:c8:5c:d7:2d:
ec:1f:db:ab:c4:c7:7b:49:0b:ae:9b:47:49:2f:60:
5c:f1:4d:86:31:95:2c:af:d6:6d:18:a0:d7:a9:3e:
1d:42:09:ef:8c:ef:70:67:95:3d:41:b8:6a:c2:25:
71:85:52:6e:d2:32:72:75:aa:b7:c8:3f:3a:ad:e7:
48:8f:90:4f:d0:07:33:8c:79:0f:4c:86:32:fa:c6:
24:23:63:28:73:1a:b7:cd:2e:6e:1d:0f:4f:21:6e:
f4:22:c5:15:6a:07:de:66:2b:5f:c0:f7:c3:25:6e:
32:f9:b0:52:d5:9b:f0:1c:6c:cf:43:6b:59:65:a8:
ce:5d:73:14:77:27:5a:22:56:04:81:83:20:a8:bf:
65:9f:96:a7:df:44:23:43:b8:b8:bd:48:8f:bd:63:
af:8e:aa:02:02:03:6c:06:1b:e3:fd:ab:aa:2d:33:
1d:99:1c:63:38:b0:dd:d5:df:b9:cc:ce:bf:13:fd:
28:39:83:86:72:5e:e6:fa:9b:8b:17:f3:1e:f8:7a:
6c:93:05:80:c9:a6:d3:e8:08:ad:44:25:8a:d2:76:
b8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:80:0C:06:3D:2B:A4:70:E4:81:14:6D:74:38:A2:E1:C0:AB:31:10
X509v3 Authority Key Identifier:
keyid:B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b3:8b:9c:cc:c2:09:7c:32:b2:5e:35:0d:18:60:b4:5d:32:
46:f6:f4:31:eb:6f:71:e4:ce:77:7d:21:6d:07:6c:50:0f:5f:
bc:3f:ac:16:09:27:5f:61:88:a0:a6:46:ad:b3:0e:db:a7:3f:
51:92:de:6f:2a:5a:32:b5:5a:2c:3b:81:4f:c8:bb:fd:6d:b3:
8d:50:53:28:97:7f:2a:bd:8f:cc:5e:a5:b0:b9:af:e4:11:c7:
59:40:e0:34:ee:5a:3e:8d:00:f2:e8:1a:3e:2a:42:31:83:6f:
61:0d:6f:4c:9a:8d:7e:7c:79:83:6e:e0:88:4e:26:2f:be:1c:
d7:4e:eb:a7:81:de:62:50:6c:ca:63:f6:fa:b5:97:c9:e2:f6:
ae:e3:27:22:2a:2d:aa:c9:92:17:27:3a:75:3d:9e:b5:5e:88:
e3:46:e2:c6:8c:2d:46:da:92:e0:92:5a:9e:6c:26:1d:fc:ef:
79:55:f8:0b:e5:39:29:cd:b9:79:88:e7:c0:1c:30:7c:32:21:
69:74:62:eb:a2:a2:1e:49:8f:7e:ec:d8:ae:2c:2e:e8:20:3d:
01:64:68:cb:97:16:e6:6c:1f:54:0f:82:8c:ff:18:7a:cd:48:
5d:d3:78:fa:64:c8:6b:29:96:4d:9b:29:69:a1:2d:d3:16:6e:
8b:52:46:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:22 2026 by rpki-client