Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
File: TXPZQBmjwjWHffa8GynHagtkydA.mft (raw, json)
Hash identifier: D2ErTdGNWGjcb02d5zDlLwTjW/qgJ+hTJ+nsBCv8Lfs=
Subject key identifier: 6D:FE:F3:D2:11:F5:37:0A:CA:D7:10:42:4C:2A:05:FC:6E:0B:EF:59
Authority key identifier: 4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
Certificate issuer: /CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Certificate serial: 019D28847E9E86939E7DAEF1B269CDFD6674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
Manifest number: 0EDF
Signing time: Thu 26 Mar 2026 05:01:04 +0000
Manifest this update: Thu 26 Mar 2026 05:01:04 +0000
Manifest next update: Fri 27 Mar 2026 05:01:04 +0000
Files and hashes: 1: Aq2uYBM38caP1COB9dDvXovJtxs.roa (hash: xNEtL6mGQtXdg7pfWA/jWJFTi74bGAiMyDEPSZKrj8A=)
2: TXPZQBmjwjWHffa8GynHagtkydA.crl (hash: con9JNkaTyQXxCuukFKDOx42rkh0AjG0mAnMSa0O6mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:7e:9e:86:93:9e:7d:ae:f1:b2:69:cd:fd:66:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Validity
Not Before: Mar 26 05:01:04 2026 GMT
Not After : Mar 27 05:01:04 2026 GMT
Subject: CN=6dfef3d211f5370acad710424c2a05fc6e0bef59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7b:30:0d:3b:55:63:34:c1:0b:e2:55:89:a2:
d1:81:2c:97:5e:95:16:f8:53:1d:ec:a9:00:3a:d9:
a0:01:41:76:cb:f8:aa:6b:86:c5:6f:3b:0a:f0:e1:
9e:0d:fc:40:1d:b9:13:23:62:76:f3:6a:85:08:fc:
f6:1a:79:2f:a3:a7:97:4e:04:f5:81:e6:ce:c6:18:
61:ad:7f:d1:15:26:09:ed:f5:40:7f:b4:50:c0:67:
34:24:8f:b7:d6:fc:68:f0:12:6b:b2:e6:a2:7d:a6:
4c:c5:b8:53:21:75:a9:65:93:3a:19:66:11:b8:5a:
13:07:06:ab:bc:86:2d:72:18:99:ca:51:4e:45:63:
3d:37:e3:6c:67:3d:74:45:22:cc:08:2a:a5:23:11:
8f:25:b3:70:50:69:9d:72:31:b4:fe:02:6b:a4:22:
a8:e3:2e:b9:48:b0:d0:68:f7:6c:18:60:21:fa:fb:
a3:b4:47:e0:cd:d5:94:11:97:55:1d:18:95:83:a1:
99:32:8c:48:c2:6c:d2:d3:e2:11:de:db:ec:37:24:
ab:14:21:a8:e2:d7:34:f1:f5:84:c1:97:78:0f:f1:
73:c9:e3:a9:2d:7c:b5:94:a9:1f:92:4c:ab:ea:fd:
d0:2c:7e:8e:35:0b:24:d0:18:1e:ee:7e:ed:03:96:
e4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FE:F3:D2:11:F5:37:0A:CA:D7:10:42:4C:2A:05:FC:6E:0B:EF:59
X509v3 Authority Key Identifier:
keyid:4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:c8:d0:4c:e3:1d:e2:e8:51:c3:01:9c:8b:5a:7f:a1:41:e1:
12:f4:f2:ca:88:88:b6:01:5d:28:ad:e7:8b:97:b1:5d:3a:4c:
c8:77:33:52:d2:fc:5b:b9:18:50:41:1a:5e:62:a0:8f:35:83:
c2:5c:46:91:e7:ff:50:68:06:68:78:11:f0:cf:6a:01:84:70:
d3:d4:05:e5:99:1e:3e:d7:ee:66:3e:38:22:55:ef:7e:ea:e1:
c1:15:66:71:74:3d:8b:a6:ca:0d:77:ab:e6:c3:0c:d2:1a:d1:
c7:16:3f:2e:68:00:1b:6c:b9:bc:a4:71:64:1a:da:25:4f:5a:
95:30:aa:f5:6f:cd:62:88:1a:63:4e:4a:3d:23:41:da:ea:54:
95:24:cf:de:10:cb:52:54:1d:2d:77:56:cc:59:ee:06:d6:d2:
41:fd:c2:93:2e:67:4b:b1:34:98:47:00:f8:aa:ce:17:a5:42:
a7:90:41:ea:9d:02:89:06:32:3c:b5:33:40:46:02:8f:54:41:
b2:aa:1c:25:03:45:ad:cd:e9:95:0e:86:f2:e6:18:16:ea:29:
dd:1b:af:1d:92:2a:6d:e6:65:b0:c5:3a:81:c1:df:57:31:23:
0a:fd:ea:36:76:e7:69:f4:93:bc:46:18:66:72:a5:b9:29:5e:
a9:58:d0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:01 2026 by rpki-client