Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
File: TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft (raw, json)
Hash identifier: MJQm+r7iF1LoSwbfZUnZRu8/Z5lFyh7Xei1TXvL+eUg=
Subject key identifier: EC:EF:3E:A1:18:93:7D:13:05:81:24:61:F3:F3:6E:B4:BC:92:28:31
Authority key identifier: 4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6
Certificate issuer: /CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
Certificate serial: 019D269654996D46184AA5CBA58F46A4F53C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
Manifest number: 0ACE
Signing time: Wed 25 Mar 2026 20:01:19 +0000
Manifest this update: Wed 25 Mar 2026 20:01:19 +0000
Manifest next update: Thu 26 Mar 2026 20:01:19 +0000
Files and hashes: 1: TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl (hash: 8w7c5iaBrCKXpDjxBNZdlLEBdH+qcRbyhUWa/0E1VR4=)
2: aC8UNmy0l7OgPQTZ2nVPiNtSCxQ.roa (hash: L0i81KYUigHRpwI1gm1ehZ81UJds6Brs5hjYir4TlR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:54:99:6d:46:18:4a:a5:cb:a5:8f:46:a4:f5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
Validity
Not Before: Mar 25 20:01:19 2026 GMT
Not After : Mar 26 20:01:19 2026 GMT
Subject: CN=ecef3ea118937d1305812461f3f36eb4bc922831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:1b:2b:09:7c:d1:6e:9d:c7:3a:13:87:cb:
00:c4:0a:fe:6f:27:8d:93:55:fa:f6:9a:d8:16:f5:
15:70:51:37:39:0f:d5:9e:ea:a3:1b:c8:ab:a1:38:
4d:1f:1f:0f:3a:5d:3b:53:a3:c6:ea:63:3f:14:35:
fd:04:ab:a6:c5:a8:06:47:b3:d1:45:51:29:31:ae:
da:b8:02:0a:af:66:b7:c6:9a:b4:95:03:05:4a:5a:
48:ff:bc:fc:b2:1a:42:e9:6c:81:81:3a:dd:47:3b:
f1:13:e9:7e:0e:56:56:82:c4:da:ec:79:32:f3:47:
45:2b:37:1f:5f:bd:0f:da:ad:b2:10:4b:35:67:f8:
0b:24:2e:87:04:9b:0c:ed:93:a4:81:80:5e:1a:c5:
0f:dc:6b:14:16:7e:46:a7:3a:e4:bb:08:36:cf:93:
27:f5:78:d0:2d:30:d1:ba:4e:a2:e7:db:8c:f6:89:
bf:bc:10:a3:50:77:1e:c6:66:fd:c9:ed:75:8d:ed:
94:ef:68:6c:02:b1:8f:b2:09:0a:c0:bd:f1:b8:02:
d9:84:94:e4:85:3d:d5:3d:75:33:47:53:4a:0b:e1:
8a:1e:27:2e:83:21:59:36:3b:2a:26:0c:f2:d9:cc:
ca:07:a5:5c:79:ce:15:b9:90:43:7f:51:45:5f:3d:
96:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EF:3E:A1:18:93:7D:13:05:81:24:61:F3:F3:6E:B4:BC:92:28:31
X509v3 Authority Key Identifier:
keyid:4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8c:d9:5f:a0:88:bc:a2:cf:8b:6a:4c:90:dd:3a:f3:e4:e1:
d6:af:e0:af:ae:77:03:75:6f:2f:cf:8c:6d:5c:18:ab:98:ea:
b6:95:c7:48:0f:a0:5c:7e:98:5d:fa:9a:11:a8:fc:ee:6f:82:
2a:1a:ad:da:24:f0:c0:1d:61:5a:bf:46:3b:0a:8d:83:71:35:
81:0b:c3:86:1f:4d:56:de:4f:25:a0:03:06:c3:f9:06:06:dc:
1e:a1:bd:af:01:5b:96:02:5c:6d:30:96:f7:e0:82:15:c1:9c:
17:86:a2:33:16:ab:6e:61:3b:b9:0d:86:64:88:35:0a:93:a7:
8b:60:dd:68:be:a8:89:40:65:c1:b9:4b:63:e6:fe:19:8a:26:
8c:b8:26:fa:48:db:d3:9a:24:42:f4:20:3a:ad:da:75:5a:82:
c0:37:60:b5:16:c1:9f:08:dd:46:9f:55:61:aa:53:3d:15:5c:
d9:79:3d:7a:21:83:2b:fc:c9:f3:cf:1a:1c:f8:b9:f9:87:a8:
77:2c:74:00:a4:4f:09:23:ee:e5:e5:38:27:87:1d:7f:8a:e8:
11:be:7a:1c:7d:45:cd:14:2b:0a:51:42:d0:c7:2f:c9:79:f7:
a9:4b:44:38:f7:91:de:72:e0:d6:0c:d7:85:f2:8e:50:30:06:
e0:5d:58:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:02 2026 by rpki-client