Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
File: TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft (raw, json)
Hash identifier: vUsN0uimr8SYBoOcfdOuM6l5ylOdNEAMBXl03eotuy0=
Subject key identifier: 82:D1:3C:DF:1A:15:31:8F:59:66:12:6A:F1:77:B4:D3:86:AF:E0:95
Authority key identifier: 4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
Certificate issuer: /CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Certificate serial: 019D28BB6D754B2B0FAF74E0D0AC8007580E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 06:01:05 +0000
Manifest this update: Thu 26 Mar 2026 06:01:05 +0000
Manifest next update: Fri 27 Mar 2026 06:01:05 +0000
Files and hashes: 1: TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl (hash: Jq+NlTBnJoHgkUphmH5yxwti8WvXDw2cqKviAHOAw/k=)
2: WAeLgGdzqW62R3XT1JnNrx8DFw0.roa (hash: u2qcj3/aGyotDnZkp7n2BDjtQTbTd2cHSPO2kqQnPxc=)
3: ddrx84-m9QT2CvYQ4rYUaQFT-V4.roa (hash: +34dpqFO+p0Lo2t/qjx/upoiDGo64OhUtxpuKNK8lMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:6d:75:4b:2b:0f:af:74:e0:d0:ac:80:07:58:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Validity
Not Before: Mar 26 06:01:05 2026 GMT
Not After : Mar 27 06:01:05 2026 GMT
Subject: CN=82d13cdf1a15318f5966126af177b4d386afe095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:60:b4:cc:bc:4f:f4:8e:6d:86:46:45:cd:
3d:60:74:71:02:2d:03:52:51:0a:a8:52:8c:95:97:
4f:c6:64:ed:31:80:50:d2:1c:80:df:03:aa:fb:a9:
78:c5:84:45:44:f5:b0:b1:06:22:b4:a8:9c:0e:a3:
6a:9e:90:ae:da:9a:50:91:51:88:69:80:5e:eb:ea:
ee:7b:42:9b:bd:48:c1:44:1f:de:c0:3c:f0:ef:16:
ed:40:a6:9e:77:8a:a5:ef:5c:44:ce:10:ec:44:ab:
af:b0:10:0c:2a:ec:23:c8:ac:40:a8:0c:ea:6c:eb:
31:e7:95:0b:08:51:02:75:bd:ab:dd:bf:78:a2:c6:
90:16:cd:26:b4:6c:7c:a2:22:fa:99:11:30:b6:39:
c5:0b:da:49:e6:7e:b2:a9:3d:a4:00:6a:30:3e:87:
fb:db:07:fe:41:ab:d1:cc:67:8b:6a:6e:a9:92:46:
2f:11:85:f0:ae:d3:54:6f:ad:01:78:d7:51:53:94:
d3:7b:c8:82:f3:2e:dd:cf:07:09:04:00:4d:cf:60:
6b:21:1d:4e:27:d5:c6:6e:7b:12:a7:41:a7:fe:1d:
07:3d:39:f4:73:97:f1:dd:f5:f3:3f:c3:96:61:97:
84:55:c8:b8:d2:9c:a3:2e:6e:94:48:d2:fe:a9:b2:
9e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D1:3C:DF:1A:15:31:8F:59:66:12:6A:F1:77:B4:D3:86:AF:E0:95
X509v3 Authority Key Identifier:
keyid:4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8c:5b:63:c9:51:fd:cd:c7:6d:65:bb:67:ef:01:9a:bd:53:
50:45:e0:48:62:0b:23:1f:db:2b:2d:a8:9c:5a:84:17:81:1e:
8b:3c:21:d0:2b:f5:72:5e:4b:2f:91:a2:1b:46:8b:4e:79:6a:
a8:7d:71:af:89:c9:a1:a5:36:84:a9:c9:4a:d8:cb:0e:1a:61:
0d:1c:47:4a:ee:ca:4e:f7:52:27:c6:ab:87:2f:e5:75:04:a0:
73:5b:fd:db:c1:98:ca:be:89:46:46:02:21:e2:00:f3:04:b5:
0d:20:c2:fe:b5:a1:b6:e5:bb:d1:80:cc:ff:4a:59:cc:d5:d4:
89:00:2e:93:bc:af:9e:c3:1c:10:0b:5c:8d:3a:3e:71:22:f9:
83:62:ff:79:31:75:25:e7:ba:fd:8c:d9:d8:17:71:90:ba:4d:
b9:e5:77:17:f7:70:01:b3:9e:2c:a1:bf:3e:dd:e4:c9:64:eb:
b5:5b:09:b6:b7:86:1b:5f:be:2a:72:48:da:57:29:12:99:1f:
c6:91:95:5d:fb:68:24:7f:85:5a:c6:00:91:a7:91:c2:6a:5f:
69:ae:9c:3e:21:31:53:b8:6c:f6:67:0a:24:f1:6a:57:b6:7d:
e6:f5:75:e1:ec:b7:5a:7b:b5:5f:6b:f8:a0:b2:b3:12:bc:d5:
c6:b1:eb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:03:46 2026 by rpki-client