
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
File: TJMhPYj6h060Rg4sXPG7GpHakHg.mft (raw, json)
Hash identifier: PI3haOyfUJ4BySGOOQ0h19D0GY3JtpKYMfwhKqw2/ms=
Subject key identifier: 2B:6D:AC:C5:7E:E0:10:F2:36:55:B4:24:34:28:44:3C:40:6D:01:42
Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
Certificate issuer: /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Certificate serial: 019D25BA35445CC9C630F2CC21D4C65D1587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 16:00:53 +0000
Manifest this update: Wed 25 Mar 2026 16:00:53 +0000
Manifest next update: Thu 26 Mar 2026 16:00:53 +0000
Files and hashes: 1: 1SMtyrFP6eFZxMb7PZMbKYGMJi8.roa (hash: XxgHh0JzLHhNi3/TyAFFwO5EFUtAwR/nBi3ICijq0Hg=)
2: TJMhPYj6h060Rg4sXPG7GpHakHg.crl (hash: WTkh/Bl57Zoixh6i/ExOuOkftwGFTWl9wkrj91EHl5g=)
3: hcvV5X31DOlZw_gVMi_djA-Z_mg.asa (hash: WAnv7aq02dLiZbIe0+xzCaSba+xJWqlxkJbqWJcgVKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:35:44:5c:c9:c6:30:f2:cc:21:d4:c6:5d:15:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Validity
Not Before: Mar 25 16:00:53 2026 GMT
Not After : Mar 26 16:00:53 2026 GMT
Subject: CN=2b6dacc57ee010f23655b4243428443c406d0142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e5:4d:d8:8c:ae:48:f4:e0:f7:d9:73:c5:05:
32:93:83:62:56:2a:ab:21:e6:30:44:e6:5b:48:12:
13:47:04:0e:58:73:d3:0e:1f:92:03:88:71:b2:01:
1e:38:45:2f:20:ed:de:ae:a7:54:96:70:8f:73:76:
0a:a8:01:1b:88:77:3e:ae:a2:9f:32:7a:3f:67:fa:
1d:48:80:85:af:4c:67:44:82:58:e5:47:6c:e7:19:
4b:1b:74:68:68:cd:56:81:e5:fc:32:e9:92:e9:ac:
2d:5e:29:5d:12:b8:26:ba:46:fc:44:f4:13:90:c9:
f9:1c:0c:56:3a:15:14:b5:5c:52:aa:de:a1:2d:de:
f8:17:98:b4:c5:e4:a1:30:bc:23:8a:57:b4:93:ee:
1f:7b:c9:6f:57:5f:35:c3:2f:8a:24:e1:aa:e4:b8:
a0:c1:9c:90:65:a2:22:f6:6f:9d:09:62:7a:27:45:
0c:82:78:36:ae:c4:ed:9c:74:78:e0:54:9f:b1:b7:
92:f1:e7:8e:f9:65:6c:98:b2:82:a3:99:c5:9b:ef:
6b:21:4d:7e:48:e1:58:e6:e7:39:4c:db:f4:ed:dc:
cf:86:04:2f:93:e2:13:23:4d:a2:3e:c7:19:bb:59:
95:e6:d0:46:bc:b5:4f:73:27:a3:82:95:d8:6b:7e:
b4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6D:AC:C5:7E:E0:10:F2:36:55:B4:24:34:28:44:3C:40:6D:01:42
X509v3 Authority Key Identifier:
keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:16:cf:ca:fc:d4:09:14:37:6a:04:17:02:54:f4:29:98:9b:
1e:43:6e:c2:5d:60:6d:65:c7:14:84:85:f5:1b:72:83:d7:fc:
97:3d:07:39:2e:9a:4f:08:fc:cc:78:0b:b7:b9:55:66:36:de:
0d:f4:3e:69:76:67:eb:8e:01:2d:b7:bb:6f:de:c2:fd:20:88:
6a:e6:1c:ef:4f:36:ad:75:dc:f7:6e:c9:53:b9:86:73:33:5b:
97:11:f0:e6:e5:b1:6e:7d:66:69:e6:df:f0:51:e4:d4:10:ee:
50:04:69:5c:c0:f9:98:0d:3a:1d:ad:bb:90:36:e3:4f:77:c9:
b6:c6:73:8a:6b:45:68:34:d2:15:bc:0e:20:d9:3a:43:97:3b:
7a:1c:3e:09:e8:be:a9:15:61:39:3d:49:be:12:d7:ae:b4:3d:
80:56:42:6a:af:86:c4:e4:04:15:9c:61:db:7b:f6:c7:a5:7b:
c4:a7:32:43:c5:a1:db:1f:a7:cc:f8:e7:df:0f:27:2e:4e:db:
3f:da:76:7b:6c:19:81:10:4f:16:cc:d8:99:17:dc:7e:27:fa:
8a:7e:49:8c:46:54:c1:db:84:91:de:b2:1a:4a:a0:67:9c:c4:
28:09:fb:18:94:22:d3:d6:36:29:de:00:db:e7:61:76:0e:a7:
3a:28:30:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:24:43 2026 by rpki-client