
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft
File: tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft (raw, json)
Hash identifier: V/FxMHs7A/zaUZ972CZ4e7ETVNrutnjwzKvA2bmPUsQ=
Subject key identifier: 4A:4F:CD:1D:E0:AE:77:05:4D:0C:20:71:72:C9:2D:7B:A2:C0:FB:E0
Authority key identifier: B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE
Certificate issuer: /CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee
Certificate serial: 019D28F297CB1552D1AE1101080EBF1B4EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 07:01:20 +0000
Manifest this update: Thu 26 Mar 2026 07:01:20 +0000
Manifest next update: Fri 27 Mar 2026 07:01:20 +0000
Files and hashes: 1: 9mkH4IzMoq3DwoNvnvYH9-YO79c.roa (hash: 3KE8jl9vgjE4AA+K3LRuupb+vjXe25NtIAJuw2cNEMk=)
2: tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl (hash: nLjRZUo2UJdVla7CaVgyPgNimumQHhmDLUBfASMlfZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:97:cb:15:52:d1:ae:11:01:08:0e:bf:1b:4e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee
Validity
Not Before: Mar 26 07:01:20 2026 GMT
Not After : Mar 27 07:01:20 2026 GMT
Subject: CN=4a4fcd1de0ae77054d0c207172c92d7ba2c0fbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:93:f0:85:a2:fd:3c:50:19:8e:6d:17:a6:55:
ec:ee:d8:29:2b:30:a4:9d:24:57:6a:35:2a:6f:ab:
ef:d1:27:1b:9f:2f:34:92:45:d9:f0:d8:31:0d:20:
8f:fc:c9:cd:7f:0f:20:7c:34:ad:8d:b2:55:de:ba:
dc:d3:4b:6e:9c:1e:00:75:97:a2:f2:2a:b1:0a:e0:
20:4a:51:02:20:f9:0a:30:c3:2b:60:fa:be:7a:13:
fe:41:25:c2:b5:1f:4e:70:2c:f4:6d:51:c3:60:85:
0d:b9:b6:39:82:11:0c:e7:11:90:9b:7a:a3:ee:20:
8b:e3:f5:dc:8e:33:8e:74:c9:15:42:9e:96:f9:60:
8e:2d:8d:97:65:14:ad:c6:3a:4a:30:f6:32:01:38:
96:fe:f5:20:62:2d:08:26:29:fd:37:a3:41:44:fc:
5c:d3:b5:61:d8:cf:3e:69:c5:a2:6f:c2:7f:b9:cd:
9b:ea:d5:ca:e7:c9:d5:1c:3b:ab:ec:1c:89:93:64:
c1:96:63:30:3a:23:02:3e:06:90:be:5f:9c:78:26:
03:4c:3a:0a:9d:3b:74:3d:81:52:a2:19:60:b9:7d:
70:58:96:64:38:11:a7:ee:d4:ea:3a:1f:88:fc:33:
2f:96:b7:52:88:69:ee:69:76:ef:dc:31:21:64:e3:
9d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4F:CD:1D:E0:AE:77:05:4D:0C:20:71:72:C9:2D:7B:A2:C0:FB:E0
X509v3 Authority Key Identifier:
keyid:B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:49:41:ef:d9:e2:9b:ab:e0:f3:04:09:86:26:47:92:46:9d:
d7:4b:d1:aa:2b:f9:6e:e8:5f:68:f1:65:76:3c:ad:56:2a:17:
aa:47:f7:be:5d:e5:b0:b8:33:d0:da:51:0d:6f:f9:49:2c:bb:
41:4a:fd:2d:47:55:ca:73:e7:94:04:c9:e4:7d:a7:f7:7a:3d:
9f:65:93:14:97:6c:d3:7a:b2:1a:d8:68:10:06:d3:d7:ce:5b:
3c:3e:aa:83:1f:18:f0:04:bc:5e:5b:19:58:bc:2a:b0:40:eb:
6e:e6:24:5d:53:0e:a2:8f:5c:70:63:2a:11:c1:3e:35:1c:47:
3c:cd:48:0e:3f:20:c9:46:47:b9:7f:8f:fc:72:dd:94:13:20:
a8:92:65:ff:cc:b5:52:00:83:e4:d8:49:dd:3c:ed:90:8b:19:
b8:f6:6e:f2:36:77:a8:cc:95:7e:5f:82:19:74:9c:00:73:16:
a7:bf:ae:64:46:58:b6:ad:15:e4:0f:8e:cd:13:ec:c2:b6:bc:
71:f4:a8:03:18:49:ec:33:5a:41:78:2c:90:9a:c8:5e:a6:a0:
c8:17:8e:d5:d4:81:fd:93:bc:6f:4a:94:3a:8b:80:04:b9:0f:
96:5f:e1:05:70:12:ac:44:04:f8:4c:ab:47:f4:a9:45:03:67:
31:4d:b7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:22:43 2026 by rpki-client