Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
File: TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft (raw, json)
Hash identifier: kzYvTWzykFyyCqbxN4R46hGOfvetStMbpYx6bnIn0wY=
Subject key identifier: 96:32:51:21:DA:44:84:82:11:13:12:9D:A5:67:15:A1:AF:7D:32:49
Authority key identifier: 4D:2F:4D:10:8A:C1:84:BD:1B:53:2F:F8:8F:C6:64:4A:DE:16:DA:75
Certificate issuer: /CN=4d2f4d108ac184bd1b532ff88fc6644ade16da75
Certificate serial: 019D28F2BC3B388DEE1191371F1CC405FC6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
Manifest number: 0C0F
Signing time: Thu 26 Mar 2026 07:01:29 +0000
Manifest this update: Thu 26 Mar 2026 07:01:29 +0000
Manifest next update: Fri 27 Mar 2026 07:01:29 +0000
Files and hashes: 1: 0IfBuJKTc-ZAapBVoo09IVcjirw.roa (hash: DTT3atnBIKRsyqC7V02d68tnwY+R6xQKAabUDXEqKAI=)
2: TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl (hash: dr3RODeqF0uRmV4lsqkgLz1bq8niSPX3/g9lqmt5V8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:bc:3b:38:8d:ee:11:91:37:1f:1c:c4:05:fc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2f4d108ac184bd1b532ff88fc6644ade16da75
Validity
Not Before: Mar 26 07:01:29 2026 GMT
Not After : Mar 27 07:01:29 2026 GMT
Subject: CN=96325121da4484821113129da56715a1af7d3249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ce:70:7b:58:a8:0a:4b:49:9b:cc:fe:f9:c5:
87:9d:20:82:1e:a1:f8:22:eb:0c:e6:25:be:4f:06:
cb:09:d1:fa:86:2f:3f:44:cf:18:e3:25:1b:7d:8c:
67:0e:97:b4:3e:b1:cc:e7:f7:24:3a:e1:e8:3c:f1:
07:69:c8:0d:fa:fe:2e:34:5e:1b:fa:0b:c9:03:cb:
ee:df:87:a8:7b:8c:6a:96:c2:9f:e1:e4:7d:83:50:
70:c9:95:b5:d1:be:b6:3b:b3:e6:71:83:7a:14:1a:
e1:8e:bd:1b:fa:aa:e8:f8:7e:ec:d2:c6:60:0f:a5:
8e:24:0d:c3:67:1d:5c:e2:e9:c3:57:9f:9f:07:d6:
30:7d:cc:15:36:8c:01:71:80:a6:97:42:c6:6c:af:
99:bb:12:75:8f:5b:d2:ef:03:90:34:69:a5:d2:80:
5b:8a:c1:0c:c6:04:fb:6a:86:30:fa:cc:cc:c3:e9:
7a:00:9d:45:15:13:45:02:58:0f:d1:0c:3a:68:f0:
b5:a6:af:25:1b:e6:4e:b1:bd:95:8e:41:85:e4:e6:
58:ce:88:2b:75:9f:38:f0:4e:92:68:fa:3a:76:ed:
50:08:22:da:01:6e:50:6e:9c:76:68:08:52:2c:82:
96:f8:5d:8d:e5:c8:d8:db:38:12:49:e5:2a:7f:a3:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:32:51:21:DA:44:84:82:11:13:12:9D:A5:67:15:A1:AF:7D:32:49
X509v3 Authority Key Identifier:
keyid:4D:2F:4D:10:8A:C1:84:BD:1B:53:2F:F8:8F:C6:64:4A:DE:16:DA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:72:c4:2e:40:48:4a:7c:70:81:9a:8f:35:3e:72:c7:01:91:
04:98:25:9a:6e:99:36:59:4b:75:d5:a0:b2:5e:81:a1:03:44:
cc:46:06:86:cb:82:3e:39:a6:4f:85:73:33:ab:db:89:c8:60:
0f:f9:01:60:58:4c:d6:60:f1:56:81:f0:2e:2c:50:7b:3d:58:
1c:19:65:a7:19:39:d0:e1:2a:c5:82:33:cf:e6:86:48:f4:42:
57:89:bd:65:6c:37:f7:57:a0:89:fd:93:af:9e:fb:8c:30:96:
41:c3:8c:59:a2:f0:d1:f9:81:81:53:ff:dc:bb:49:01:be:3b:
03:56:d4:e7:81:ba:07:63:9c:01:f8:d5:06:d6:bc:0e:e1:eb:
19:de:13:b9:78:3b:85:0e:a8:86:13:5d:ed:85:21:43:5b:1b:
58:89:c7:3b:e3:2e:74:ef:fa:73:28:10:c1:eb:fc:9e:bc:f4:
4c:1a:44:f8:d0:01:74:f9:47:01:9e:56:c1:a7:15:45:04:2b:
1f:ee:34:fa:22:9d:ad:fe:71:71:31:f3:31:7e:95:2c:8d:9e:
61:11:dd:3d:8a:c8:ea:17:09:0f:e8:ac:b8:75:d9:fa:ae:d6:
d7:54:45:a2:84:97:32:b5:9a:f8:ab:2c:6e:f4:76:9e:ca:04:
bd:d0:41:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:46 2026 by rpki-client