
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
File: TPgIAsZXmk1KEGCNz5LprOmQWxY.mft (raw, json)
Hash identifier: HIzdMTdLAm6YX4DLjQjS0aTYdOpL/ynm6Yqmh2D9Ak4=
Subject key identifier: A6:7B:C9:B1:83:6F:B4:24:D7:A6:70:25:F0:74:C8:7B:9E:35:CB:65
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial: 019D2628886BA1BF151644873DBED2AB681E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
Manifest number: 074B
Signing time: Wed 25 Mar 2026 18:01:23 +0000
Manifest this update: Wed 25 Mar 2026 18:01:23 +0000
Manifest next update: Thu 26 Mar 2026 18:01:23 +0000
Files and hashes: 1: JAiGMFKKZfeARhCIuVLbMeZNXJY.asa (hash: BVYEISvT/4Z21IuD9kN936xR94O9xS00DBa/dc3qsv4=)
2: TPgIAsZXmk1KEGCNz5LprOmQWxY.crl (hash: MlOT3a+JO43RWU6lA86W5Yt8DvuLORf00yZ0VOy6wM8=)
3: gKnl6zVoIeKgo92UVGQsPpHqtzE.roa (hash: 56ktfiqABwMNzwOBBq7mQNUi4gG3qwUkwZC4BiFM9Oc=)
4: lSVqAAvEWKUv1GrOr_KbEfWQpGk.roa (hash: Ugj+m6NNSZeK/sMmtv36B6LB9pkXvcsE/Io4aKNy8r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:88:6b:a1:bf:15:16:44:87:3d:be:d2:ab:68:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Validity
Not Before: Mar 25 18:01:23 2026 GMT
Not After : Mar 26 18:01:23 2026 GMT
Subject: CN=a67bc9b1836fb424d7a67025f074c87b9e35cb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:68:9c:5d:b5:02:c7:cd:87:e3:be:00:83:91:
43:17:1b:c6:fd:2b:a8:ab:38:8c:c1:43:12:34:66:
c8:23:30:2d:5c:28:0e:1c:02:36:04:f0:47:0a:b4:
29:9c:74:84:65:1c:15:7b:2d:9f:90:e5:11:c7:72:
4c:f5:6c:d8:2d:c6:8e:14:48:79:d3:d4:6a:0f:c5:
ad:da:ff:9c:fd:43:9e:e5:1a:e2:a6:1a:b9:ee:2c:
1a:c7:88:c1:c4:7e:af:5b:fd:26:57:3e:64:49:e4:
7e:ae:46:29:dc:c6:72:a0:35:e6:0d:48:23:be:58:
e2:ac:95:14:25:ed:0e:4f:21:bb:6e:6a:59:14:84:
bf:62:41:0f:d0:5c:4c:fa:31:13:5e:0a:dd:55:79:
99:5c:3f:98:b8:00:a2:32:e5:30:ce:39:63:fe:44:
2a:5b:19:9d:c8:c5:9d:21:52:95:b8:08:52:78:65:
a2:12:85:9d:8c:2d:67:9d:16:d5:33:23:c6:66:1f:
e2:3f:83:48:c7:98:f2:22:70:fd:87:cc:86:3f:78:
dd:a9:08:35:68:55:be:e8:0d:da:7f:35:9d:cb:4a:
b4:5b:62:4e:6e:f7:be:c9:56:5c:e1:d2:e0:c9:05:
49:aa:ef:d6:a0:51:39:54:1a:fb:d5:80:2a:90:3b:
2a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7B:C9:B1:83:6F:B4:24:D7:A6:70:25:F0:74:C8:7B:9E:35:CB:65
X509v3 Authority Key Identifier:
keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:33:07:cd:85:4b:1e:28:87:89:35:bb:06:e5:2a:52:7b:6a:
b5:57:dc:d0:45:6c:b1:cf:32:61:d5:e2:49:7a:1c:56:15:bc:
e1:12:b0:12:9e:4f:e8:2e:fd:7e:d0:e5:31:76:22:9c:96:c8:
06:0b:c6:af:d8:f3:5c:47:37:a5:ea:78:64:1a:45:06:bb:9c:
72:ab:d8:10:3d:d3:39:aa:ad:75:a1:92:0c:94:58:87:0e:a8:
8c:af:d9:25:07:20:d6:1b:67:0d:29:db:cb:42:25:a5:79:f1:
da:1b:7a:5b:b4:d3:e1:cc:59:5e:5c:d3:f9:fb:71:32:e3:aa:
ba:9d:5e:39:a0:c2:d2:d4:70:a2:8b:25:16:3d:41:23:13:ec:
e6:59:83:94:c9:36:28:e6:c5:78:a5:cc:9f:db:99:c3:7c:09:
c4:b2:fa:d1:91:01:b6:7f:47:c8:36:c2:06:2e:bf:87:bb:13:
cf:a6:92:67:a0:56:30:02:b2:c7:57:19:0b:01:39:bb:11:40:
47:42:9b:9d:ab:a5:62:7f:35:2e:49:ca:8d:0b:a5:b4:02:85:
ca:e3:c0:68:4c:d7:e3:56:fa:d0:d9:65:22:55:53:67:c1:19:
1c:40:05:d7:7a:0a:fb:fa:52:fb:6a:56:d8:65:c6:91:b5:fb:
5c:d0:67:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:20:42 2026 by rpki-client