Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
File: TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json)
Hash identifier: n1+7RptIVR83egFB66FwmOMHOCfLADMLjd8n0lQvv0w=
Subject key identifier: BE:B7:69:51:73:69:17:97:1F:CD:89:CF:48:21:AD:E8:AE:19:FC:6E
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 019D2A048AF489557F1EAE97B16F1279F291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 12:00:33 +0000
Manifest this update: Thu 26 Mar 2026 12:00:33 +0000
Manifest next update: Fri 27 Mar 2026 12:00:33 +0000
Files and hashes: 1: BMJTX-1VIsJCIAKC_UCdqIb839w.roa (hash: AwaFPfahDvnxUQFxf1zHHxQY3shWXenV5hfHWr+eRSE=)
2: Bv2hzFMshraYJZMhKiNAPQW5yzo.roa (hash: mozy1oa9z+5oxHPkAdcnEjtIYIUHTFuELC5cUHnd2ds=)
3: GN5fvWr40gdv3JGN6vxjkZjGr-M.roa (hash: opZrG09Q9xFPvDT9n75han8TkL1qCnmykUVsSTdQ9Hw=)
4: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: 9Ti5X39nlVAr5kFQai43DyvYLQKKP++mLoqcqFm9iP0=)
5: l5bd30j_MQRGXqfWahBHTqJdoFc.roa (hash: t0VGEeZo8Fahoj1ko4o+rBeCd1Be3+5NalKn7WyM9tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:8a:f4:89:55:7f:1e:ae:97:b1:6f:12:79:f2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Mar 26 12:00:33 2026 GMT
Not After : Mar 27 12:00:33 2026 GMT
Subject: CN=beb76951736917971fcd89cf4821ade8ae19fc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:e9:1f:45:5b:9c:11:55:c9:d4:75:5c:d1:
e9:f2:54:34:b9:9d:be:15:19:96:bb:25:9d:c9:17:
32:af:d1:02:c8:d7:a4:a8:92:13:b1:35:5b:1c:d8:
31:0f:b1:37:58:8b:44:3b:59:7c:40:12:56:9e:da:
74:d1:6b:19:7f:fb:6b:77:9c:f5:d0:75:47:a9:5d:
ca:74:ea:07:7c:a6:76:d8:ed:f6:2a:ba:c0:8a:7f:
c6:57:28:b8:13:b2:44:09:8c:15:b8:df:a0:7b:bf:
2a:87:1d:18:db:d0:06:a4:9c:74:40:7d:0f:3c:e2:
47:42:2e:e5:66:10:81:aa:66:55:89:c7:d3:bd:78:
d7:a1:be:61:ae:2b:08:aa:7d:36:65:c1:1c:0e:66:
5e:aa:01:1d:c6:bc:9f:ca:dc:5b:19:ce:8d:5e:1f:
53:65:ce:61:2a:79:98:4e:84:3b:80:b4:c5:db:11:
b2:d9:94:f9:74:13:5d:06:8d:35:6a:81:a8:fc:a8:
60:69:34:56:73:73:00:a8:3e:60:63:38:83:c2:8c:
34:e9:e1:72:da:15:c5:ea:54:87:da:1d:37:08:d9:
29:d3:2f:cc:40:78:61:72:d0:ae:ef:c1:35:da:de:
de:14:d4:b1:4e:45:6b:0e:40:e3:ea:51:1a:33:06:
39:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B7:69:51:73:69:17:97:1F:CD:89:CF:48:21:AD:E8:AE:19:FC:6E
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:41:23:55:ed:38:0d:da:67:9d:7c:34:4c:4f:25:91:37:6f:
02:09:fb:4c:ca:8c:97:ab:5f:d0:d5:c5:e9:62:dc:d4:0a:08:
9e:94:33:8f:7f:74:f4:da:45:d8:1f:7e:dc:c4:7a:00:89:86:
46:33:31:cf:3e:e4:57:1d:13:60:c9:2e:11:1b:23:ff:85:45:
46:ec:d8:07:c5:17:5f:3c:7b:4f:16:e5:43:4b:98:2b:26:81:
a2:23:1c:3a:88:10:d7:e9:fd:45:b9:ae:e3:df:b4:e5:d1:b9:
a5:f0:51:7f:b6:33:f1:27:06:3b:4a:fd:75:51:3e:ed:80:c4:
f3:54:b1:d0:59:47:fc:88:74:21:03:3b:41:8a:90:8a:19:02:
95:97:a5:61:dc:b3:2f:4e:7e:02:c8:66:0a:12:9d:39:23:6a:
65:78:e8:a8:2c:71:23:b9:53:26:7e:91:5f:a5:1f:d5:c2:6c:
7a:2c:ba:d7:7c:09:83:e4:ad:6e:85:d9:e0:52:c0:2e:47:a9:
eb:fd:f3:e8:da:9a:90:a0:30:4b:c6:c7:61:4e:35:34:94:65:
2c:4a:19:4d:92:20:5f:32:f0:ad:74:c4:04:18:f2:86:ab:c7:
f4:dd:d7:c8:db:67:73:70:0e:63:31:e9:67:ef:07:92:43:8c:
91:56:eb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:15 2026 by rpki-client