Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
File: TNR7i4qp-8zP89UHgU_HRGSiq_A.mft (raw, json)
Hash identifier: kelSG8bTtdp0mIgRimVZT2DOO52zzudxW60ueReMAUo=
Subject key identifier: 0F:49:36:D8:73:A5:DA:0A:E2:70:D8:1D:20:0C:1F:15:53:8E:FE:71
Authority key identifier: 4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
Certificate issuer: /CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Certificate serial: 019D27723C073CDD33B3B2C5177EAB9202DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
Manifest number: 0F7C
Signing time: Thu 26 Mar 2026 00:01:30 +0000
Manifest this update: Thu 26 Mar 2026 00:01:30 +0000
Manifest next update: Fri 27 Mar 2026 00:01:30 +0000
Files and hashes: 1: 8OxDlCEl3lB-3kIpiJQaHVQ4IyA.roa (hash: JPo/b3U7GJdqKgxMFuML6bnht3EJ1tJ9OiBD+teV5iI=)
2: TNR7i4qp-8zP89UHgU_HRGSiq_A.crl (hash: /GpwMhD4VOVah62Svf6P2DZoQsM0DhLp/+pLKvH5/DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:3c:07:3c:dd:33:b3:b2:c5:17:7e:ab:92:02:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Validity
Not Before: Mar 26 00:01:30 2026 GMT
Not After : Mar 27 00:01:30 2026 GMT
Subject: CN=0f4936d873a5da0ae270d81d200c1f15538efe71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:fb:ce:20:06:c5:7c:ec:8b:2b:db:ea:68:
af:73:97:c4:b8:2e:f5:c6:63:e5:a5:06:fe:ed:66:
35:a8:22:39:c3:6a:b6:fa:f3:56:fa:f0:08:88:8e:
dd:ce:19:36:0c:00:7b:a5:6e:81:53:7a:18:ed:c1:
49:d6:c7:c4:89:07:f9:77:4a:99:85:cb:c5:2e:6a:
68:e4:6c:43:51:81:5f:0e:24:41:0c:a6:95:b6:8d:
e1:16:b8:00:f9:a6:53:fe:91:ed:34:a0:93:0e:43:
4f:f4:d0:8d:08:37:82:b4:6b:f4:a3:45:67:af:65:
db:66:c3:21:17:ba:b3:4d:9d:02:a4:46:33:a0:16:
b2:10:de:99:43:50:ee:b5:6e:12:31:0a:b5:72:57:
99:4f:32:29:aa:3f:70:4a:20:8c:02:bb:ef:fa:e5:
d5:b2:09:73:46:ff:ca:e6:19:74:cd:f8:0a:c9:37:
39:61:97:e7:08:22:83:00:7a:5d:cd:41:b4:70:6d:
e4:33:50:9e:fc:cc:54:57:db:a1:df:e4:6f:21:a1:
3e:96:4b:66:3a:3e:e6:26:df:1c:65:dd:de:ad:8c:
a9:c6:a3:5e:79:6a:79:b6:20:61:d5:7d:fc:19:79:
5f:43:fa:b3:e8:9c:c0:bb:49:ee:3d:3c:a4:7e:a2:
e7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:49:36:D8:73:A5:DA:0A:E2:70:D8:1D:20:0C:1F:15:53:8E:FE:71
X509v3 Authority Key Identifier:
keyid:4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3c:ac:22:05:fd:45:90:b4:b8:05:68:ab:c6:26:cc:b9:02:
88:65:d7:98:00:c2:db:48:65:c1:bc:56:df:1a:ba:02:3b:2f:
77:ff:08:2f:88:01:2f:b4:71:82:8d:06:da:af:36:e9:86:13:
65:0f:9f:d9:8d:0b:cc:15:c9:f6:cc:24:18:d4:39:83:9b:84:
93:9f:8d:a7:ee:cb:c1:0b:f6:ad:1f:2d:a4:19:ea:68:06:86:
5b:a4:28:51:d4:ff:53:0f:0f:c1:c3:0b:b4:ae:e3:aa:bc:4a:
e3:55:57:a4:0a:f5:ea:59:42:65:63:c2:cb:4f:6f:72:f3:41:
e2:12:78:27:62:a1:12:81:16:0f:13:60:37:09:e6:d5:7d:c4:
9a:44:17:02:7a:42:4b:64:58:91:ca:62:29:d6:81:8e:48:4b:
13:b7:4c:4c:2f:3a:27:db:2d:ce:88:c5:b0:bf:fc:8a:da:dd:
d7:ea:ce:ba:54:64:49:88:a5:8d:52:a7:a8:68:9b:1c:fe:39:
26:5d:ed:da:75:de:57:44:4c:e4:b7:29:1d:b8:2e:a6:62:32:
47:fa:8e:d8:42:c2:9f:cf:37:1b:8a:fd:7e:f1:b2:9d:b3:55:
a3:cb:f0:0b:fe:72:a9:b5:91:c1:66:ac:de:2e:53:55:f3:63:
e8:c9:2d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:08 2026 by rpki-client