Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
File: tpJFTBZpZIbPBx7Rjnl240BJCfs.mft (raw, json)
Hash identifier: ib4UwaoRVk9a+k1OeUQgxEBKJxDaVn8tRkDiPIVlA/Y=
Subject key identifier: 3E:39:B4:4F:4B:C4:A5:E1:05:4D:12:EA:9A:A6:A2:83:5E:38:A7:DC
Authority key identifier: B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
Certificate issuer: /CN=b692454c16696486cf071ed18e7976e3404909fb
Certificate serial: 019D25842CC472A8BB5BE2EBD5E5B1B39F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
Manifest number: 0CD4
Signing time: Wed 25 Mar 2026 15:01:52 +0000
Manifest this update: Wed 25 Mar 2026 15:01:52 +0000
Manifest next update: Thu 26 Mar 2026 15:01:52 +0000
Files and hashes: 1: MXpmWhbVyPq4rmweRCFwVrTv_-A.roa (hash: 7v8WygVCKT2B/KZ8B8RmDLY2b/Xhyo57To56E6VXxLc=)
2: tpJFTBZpZIbPBx7Rjnl240BJCfs.crl (hash: u7gu+cTtcISiSlxtgGYo386AyLDBRE0fREscJf6ixAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:2c:c4:72:a8:bb:5b:e2:eb:d5:e5:b1:b3:9f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b692454c16696486cf071ed18e7976e3404909fb
Validity
Not Before: Mar 25 15:01:52 2026 GMT
Not After : Mar 26 15:01:52 2026 GMT
Subject: CN=3e39b44f4bc4a5e1054d12ea9aa6a2835e38a7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:24:73:05:8b:e7:b9:f1:6e:e5:74:be:22:
e2:e7:5b:5d:9e:d9:4f:31:f2:41:1b:ec:6e:2f:b1:
6e:cb:28:e6:90:1d:6b:8f:fc:15:31:c2:e9:41:ba:
95:ba:dd:3a:74:f7:14:2a:50:5c:a9:b9:84:58:ab:
cb:68:2e:e6:2f:3a:93:b9:d4:dc:e7:91:65:12:cb:
a1:a8:c8:42:f3:d4:71:aa:e4:05:af:d9:0e:5b:04:
2f:1a:7a:b8:5c:64:2e:b0:7a:68:d4:28:4e:fb:ea:
89:25:a4:56:3f:54:cb:a7:5f:78:3f:0e:ef:ed:45:
77:f1:74:f4:28:1f:b4:7f:fa:30:69:07:4c:51:54:
9e:46:f1:4e:ad:86:cc:e9:c6:84:dc:47:d9:14:6b:
3b:97:5c:c2:83:1e:13:fb:6e:ab:50:98:e4:97:09:
ac:c8:8b:f4:e8:1f:4c:ef:bb:ae:f3:78:7a:29:0f:
48:ea:70:29:8f:37:5b:44:8d:3f:79:7c:c7:0c:ba:
ac:a5:ca:df:0e:a6:be:8b:a6:77:61:a2:e6:3d:1c:
d0:9b:08:2c:96:ec:99:07:ee:05:6c:ac:23:1b:70:
71:f9:91:7d:2c:d7:01:43:67:95:ff:c5:14:f3:04:
c8:85:83:1e:87:86:dc:c6:c9:98:28:88:c2:30:bb:
4b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:39:B4:4F:4B:C4:A5:E1:05:4D:12:EA:9A:A6:A2:83:5E:38:A7:DC
X509v3 Authority Key Identifier:
keyid:B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:de:4c:4c:e9:96:f8:7e:f5:d6:80:2c:9b:c4:0c:9d:e6:48:
98:2f:54:45:d2:48:e6:8d:b6:b0:50:5b:39:cb:a0:b7:84:13:
5e:17:9b:15:ee:30:6e:4a:9e:e1:1a:be:b9:e4:8f:78:ec:bc:
16:a7:2f:6d:16:5a:ea:3c:01:c1:6e:2f:57:bb:14:10:e2:cc:
d6:a6:ce:52:40:6b:f0:dd:1a:db:d3:c4:11:4c:d0:3e:84:1c:
7e:01:77:ea:cb:62:f6:f9:03:ff:4e:e7:29:0b:34:3d:3c:65:
79:eb:ab:98:d6:ba:24:98:1b:ef:54:cc:b5:e6:67:6c:78:a8:
77:da:00:6f:7f:5d:7d:4d:c2:64:14:1b:d5:f9:88:54:e9:ee:
a7:5d:4b:51:9b:d9:16:94:85:c3:a4:62:0f:bb:13:cf:9d:fe:
5a:9c:3d:d0:cb:66:f1:c8:01:db:88:cd:9f:4f:88:46:97:ed:
16:0c:96:ca:40:71:a8:2d:b4:ef:04:c5:2e:5d:af:70:43:1e:
1d:2f:c4:78:3e:2d:fe:24:80:6c:06:7e:05:b7:11:3f:40:aa:
2f:8b:85:10:75:60:da:16:a4:a6:63:d6:4a:73:08:c9:d8:39:
9b:0a:58:83:38:a4:2e:15:eb:ad:a6:6d:6c:be:d4:aa:55:55:
72:dd:d5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:19 2026 by rpki-client