Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
File: TfLG-lSozC3HHoAs-D9cd2zpdMk.mft (raw, json)
Hash identifier: oia6Cpn8L24WuYV7qQt0d1RWUu693/taxgAfrqFFyQA=
Subject key identifier: B6:D3:54:62:14:D7:F6:D0:89:02:24:DE:D0:61:BC:88:BA:B4:7A:FB
Authority key identifier: 4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
Certificate issuer: /CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Certificate serial: 019D269663F9BEA922E8A721C861509F842B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 20:01:23 +0000
Manifest this update: Wed 25 Mar 2026 20:01:23 +0000
Manifest next update: Thu 26 Mar 2026 20:01:23 +0000
Files and hashes: 1: 1-9VvIj4I5VuB1gt29vzT-2uQZlA.roa (hash: aDxytIY+QLBvjB+sNfj6erO7LbHVI7jcd1DbRYQbTzE=)
2: TfLG-lSozC3HHoAs-D9cd2zpdMk.crl (hash: 88Lx3AzkO8dAPjHbuhMy0ci3pTFDUgis0MxhMFq94DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:63:f9:be:a9:22:e8:a7:21:c8:61:50:9f:84:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Validity
Not Before: Mar 25 20:01:23 2026 GMT
Not After : Mar 26 20:01:23 2026 GMT
Subject: CN=b6d3546214d7f6d0890224ded061bc88bab47afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:71:74:19:2e:ff:8a:5c:b8:a8:eb:38:7d:
ae:e9:df:5b:87:4c:e7:02:15:19:12:bb:32:c6:04:
7d:89:6d:fa:b2:36:a7:95:24:78:3f:4a:ce:18:f5:
46:55:e1:2d:93:ba:f3:e3:f5:92:67:3b:49:f8:c9:
dd:ff:89:b5:d4:6a:f0:a7:fa:1e:88:4f:1a:eb:2e:
5c:30:ef:e4:ed:05:11:13:c1:10:d1:d3:84:fc:91:
ce:8a:e4:62:a7:50:32:1b:aa:47:a0:3c:85:20:56:
95:7d:04:63:04:85:5c:1e:c7:cf:3c:93:91:86:c3:
cf:19:00:55:c5:ae:88:fb:bb:39:a4:11:51:16:96:
aa:08:d2:d8:fd:6d:65:78:b2:92:ee:11:57:ad:ed:
38:71:53:43:6b:ce:c9:c4:f9:d0:2c:6d:aa:65:38:
bb:22:20:92:f7:b9:50:59:93:a1:17:f2:da:58:c9:
dc:cf:9e:37:75:cf:6b:a0:47:b3:e4:0b:81:d9:93:
b5:3c:08:6b:9b:6f:4b:35:e1:1d:e5:fc:3a:26:e7:
fe:37:9f:c5:f8:68:87:2a:2a:9a:2d:25:00:c7:dd:
67:a8:99:38:b0:ae:f1:20:b1:31:fb:5c:07:ec:49:
a9:2e:a1:e5:1d:ab:c6:92:ee:4c:bf:4f:72:34:15:
60:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D3:54:62:14:D7:F6:D0:89:02:24:DE:D0:61:BC:88:BA:B4:7A:FB
X509v3 Authority Key Identifier:
keyid:4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:be:42:7a:93:80:34:09:96:3d:05:d4:e7:86:52:f2:37:0c:
49:a5:cb:c6:74:c5:68:32:67:0c:51:fc:87:e8:04:a1:17:fc:
21:72:0f:37:21:f7:16:af:78:a1:5b:34:53:46:68:22:b6:99:
fc:58:25:75:f5:7f:8c:07:a0:a5:46:7f:59:2d:4b:cc:c7:9a:
15:1c:a1:69:51:e3:0e:4f:f6:f7:d2:3c:71:44:55:44:c2:b6:
1d:d2:f6:8c:5a:c2:dd:08:64:65:6f:02:38:7b:81:48:a5:b9:
6f:fd:6f:9e:fc:d2:e7:c9:f1:7a:d3:16:2b:13:6b:47:7d:e5:
f5:ea:28:56:10:05:98:93:80:f0:e2:23:50:1e:5f:98:f4:fc:
ae:68:4f:7e:20:ab:0f:7b:d9:66:67:92:cc:c7:75:cf:da:4a:
fe:2a:ef:44:32:77:9f:d3:ef:e2:5e:48:72:b3:0d:b1:75:5b:
b1:f8:09:46:84:a0:b4:85:b1:48:8d:4c:81:a4:2f:79:9f:be:
1a:8b:0a:41:e7:a6:54:56:af:0d:7d:fe:7c:e2:ff:48:9f:42:
1b:d0:e0:a1:98:09:ba:12:b9:3b:e4:63:ea:32:7f:45:b4:9b:
49:4d:ec:cc:1a:3f:49:f6:a8:e5:23:f5:0d:ab:95:2d:ab:8d:
a7:2b:8f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:42:20 2026 by rpki-client