Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
File: TxUpALDTI9NtlFEKsLAck_RRfIk.mft (raw, json)
Hash identifier: xXnFFc4pzx1QomcM8B0neDEP4HSDq84skbnwqD5AM4U=
Subject key identifier: 40:9C:42:AE:5A:E0:81:6D:00:BD:F7:4D:16:EB:09:8F:18:7C:3B:C0
Authority key identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
Certificate issuer: /CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Certificate serial: 019D2816935C3A90A83D960168B76864DD5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 03:01:01 +0000
Manifest this update: Thu 26 Mar 2026 03:01:01 +0000
Manifest next update: Fri 27 Mar 2026 03:01:01 +0000
Files and hashes: 1: 3bsIQIUMB3wEM7UpYsUhEhh9TDM.roa (hash: JUK0LWzP12KIpgwQRI9/y3rNyJiup+Z+mcnNsCbamT4=)
2: TxUpALDTI9NtlFEKsLAck_RRfIk.crl (hash: QvtM3UbV7M3YKlAndgE3doSSbkYUnzuzIBp4ZwFeEf4=)
3: UBcqPXEQnKrJnYhEGTvOR6j6EUo.roa (hash: wZthjYgNfjrS6L37NpRR1qXSrJcuxPFMsxRLKIg6JX8=)
4: Z0hS5fWo-y_SX9oUly3wZoFqg80.roa (hash: QItwS85WIhN170At5hmC7mNxoC4+AyHXJZmT2uZ7v2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:93:5c:3a:90:a8:3d:96:01:68:b7:68:64:dd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Validity
Not Before: Mar 26 03:01:01 2026 GMT
Not After : Mar 27 03:01:01 2026 GMT
Subject: CN=409c42ae5ae0816d00bdf74d16eb098f187c3bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f8:15:d0:17:06:c0:20:67:a9:b9:38:c3:ff:
15:8b:57:00:0c:c2:08:30:6f:14:36:0f:39:e9:ed:
85:85:8a:04:34:48:da:be:a5:cb:11:df:76:51:ff:
fd:73:2c:0a:75:67:e7:78:04:8a:35:b6:83:85:11:
4b:6a:e6:ee:ad:68:99:63:c2:b3:00:bf:0d:c0:f9:
7c:81:57:5d:6c:18:ad:25:41:81:d2:57:20:5d:e4:
de:67:a7:e8:32:51:59:60:29:ed:95:1d:17:c3:49:
6f:8d:21:a5:79:f8:34:f4:a5:57:42:b6:30:fd:8d:
d8:36:0b:9d:1b:bf:5a:97:50:82:b3:5a:5e:06:5d:
29:9a:f3:42:ba:7f:f2:dc:0c:a6:34:f0:c9:d3:df:
36:1d:d3:26:b2:4b:13:ec:3c:96:76:66:db:3f:53:
46:fa:01:4e:b0:3e:d7:fd:09:4f:2a:ae:df:b3:56:
c3:32:57:81:47:85:6b:bb:bd:98:28:ec:78:3c:81:
eb:b9:fc:c4:01:2c:2d:ac:a5:ed:e7:34:44:34:fb:
db:de:4b:2f:55:ed:1e:20:ad:ea:b6:20:7a:5a:ff:
e8:2b:14:14:62:bc:80:de:e4:6c:90:04:6f:70:62:
e1:0c:89:79:78:c2:de:95:99:19:cf:4a:20:a4:d7:
58:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9C:42:AE:5A:E0:81:6D:00:BD:F7:4D:16:EB:09:8F:18:7C:3B:C0
X509v3 Authority Key Identifier:
keyid:4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:15:59:7a:76:19:e6:b1:5e:1a:27:0c:b1:0a:39:bc:a4:37:
82:b1:92:29:54:56:62:33:6c:85:47:cb:dc:b3:1b:c3:4d:47:
bf:65:35:43:2f:75:ec:ee:dd:88:7c:3a:98:58:8c:19:5c:2b:
51:44:0f:48:7f:aa:84:aa:ea:35:28:ee:35:28:24:dc:de:4a:
02:4f:ed:f8:fb:1a:9c:5c:82:5e:c3:9a:4a:0c:16:2a:98:7c:
f1:25:e7:69:2d:f8:a4:f4:37:89:97:77:98:f3:ac:96:db:11:
5b:35:e2:c7:e6:68:24:fa:3b:a0:50:3b:bd:48:70:50:70:96:
a0:73:c0:d1:6c:1a:ec:51:67:69:8d:95:00:16:b7:19:b2:a3:
b0:ab:73:17:c9:6c:79:c0:62:16:54:ad:a7:89:c3:bf:16:05:
12:ea:04:b0:df:79:ee:b8:e2:5a:13:b3:9b:b2:97:db:af:81:
d5:dc:e3:94:a2:56:9f:a3:88:da:a5:1e:7d:fd:59:36:18:4d:
5b:09:c5:be:c3:46:c1:0c:3c:34:75:d9:45:70:19:d6:66:8a:
97:1a:7c:9c:1e:59:bc:c4:d4:99:2d:f5:f4:8a:39:0c:cf:f6:
43:96:9b:fb:01:65:9f:32:88:7a:63:9e:28:13:ee:91:f3:25:
f6:22:00:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:07 2026 by rpki-client