Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
File: TJMCnFsmOc0pufndUpTMlO9S1q8.mft (raw, json)
Hash identifier: V/hfc/ynTgs4D/EnJNNW2Dll3xTKFPI5KkeM/bWOMT0=
Subject key identifier: 3A:45:CC:B1:F6:9C:17:10:07:28:2C:80:C3:0B:A1:D7:7C:1B:C9:F5
Authority key identifier: 4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
Certificate issuer: /CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Certificate serial: 019D26CCF33D2F68292C3049089DDF73C782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
Manifest number: 0EB8
Signing time: Wed 25 Mar 2026 21:00:58 +0000
Manifest this update: Wed 25 Mar 2026 21:00:58 +0000
Manifest next update: Thu 26 Mar 2026 21:00:58 +0000
Files and hashes: 1: MmCHZ1tigLx6qv-0vdY9p2DTybw.asa (hash: q4g5QLnj5C7tBM9YSoS7cbGeaJrSGDWbXD0wfTvKfKk=)
2: TJMCnFsmOc0pufndUpTMlO9S1q8.crl (hash: kDC8tkfSIq5BPbTW3yusq4TEVvRTihlmVXHDK/bMTFs=)
3: o-GuySAZav0PksHcDzno-EypQJ0.roa (hash: /pzSPA6PGMWrOD+vCeL5sGDbZ/TBSHFZKj+LgOJi0Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:f3:3d:2f:68:29:2c:30:49:08:9d:df:73:c7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Validity
Not Before: Mar 25 21:00:58 2026 GMT
Not After : Mar 26 21:00:58 2026 GMT
Subject: CN=3a45ccb1f69c171007282c80c30ba1d77c1bc9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:f0:10:fa:6b:b6:97:47:e8:22:c1:dc:a2:
08:3b:02:43:03:37:2f:a6:f4:61:f3:02:db:ad:f7:
ef:cc:a1:dd:81:d8:e4:c2:88:b2:27:d7:56:1a:09:
d3:55:c7:5a:13:55:72:06:24:72:00:e6:4b:0b:18:
5f:a0:fa:53:38:a5:ef:0a:a9:b1:7a:e1:29:87:90:
08:27:a8:d7:dc:e3:40:7c:56:0a:6c:bf:ac:3a:10:
49:a8:80:83:f0:b9:ce:62:bc:24:ad:26:eb:7d:56:
72:e6:55:8f:9f:17:47:bb:c1:4a:82:18:7c:4b:5a:
0e:48:bd:a1:5d:d3:cd:31:e6:c7:cf:e5:bf:9a:89:
22:1b:62:96:31:12:d3:62:e9:60:74:2f:af:0a:62:
99:7d:10:3e:9f:c8:c3:d1:12:c7:5b:a7:ae:f6:7e:
99:a5:5c:4a:88:52:14:ba:8a:79:78:77:57:2d:e7:
63:66:45:1d:fe:fd:17:24:e1:22:15:b9:78:82:49:
4e:de:95:7a:d6:9b:1c:07:11:ac:77:fc:5b:7d:14:
94:8a:59:e1:bd:db:a2:3d:f3:8a:0f:ea:53:37:f2:
f2:58:c1:59:ef:16:10:5f:cc:48:0c:3d:f5:92:0f:
0f:5d:ce:0f:5d:5a:22:f5:a6:7f:32:d1:f1:21:c2:
b1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:45:CC:B1:F6:9C:17:10:07:28:2C:80:C3:0B:A1:D7:7C:1B:C9:F5
X509v3 Authority Key Identifier:
keyid:4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:56:2b:27:c2:47:95:f8:d2:42:a7:d9:34:26:e4:91:a1:74:
7d:27:b8:ec:a2:56:f3:f6:20:2c:86:64:27:c3:fb:68:8d:ff:
ea:f9:91:1c:2a:26:66:40:f5:19:2c:80:e5:9e:13:c4:ae:2f:
d2:ed:db:76:63:5b:ed:0c:f2:6c:b7:60:f3:58:83:3a:59:f6:
7c:55:34:76:06:3d:31:e0:01:63:94:a4:79:48:e5:e9:f7:4e:
3e:89:41:5a:d1:03:5b:b0:db:66:9e:74:04:54:bc:8e:3b:4e:
b2:b4:c9:b0:62:41:c5:d6:65:de:58:4e:d9:7f:47:f8:a9:83:
8b:00:fa:94:8e:a2:86:40:39:7d:31:1f:25:11:e0:15:52:72:
d2:85:12:5f:03:1e:5a:63:98:45:df:53:ee:24:8b:cd:3d:c8:
09:4c:ea:3b:2a:a4:a6:c0:4d:12:4e:2c:6f:08:85:8c:e3:c9:
36:81:35:a8:35:d8:24:c6:46:9c:f1:d0:05:5a:33:2a:c1:83:
f3:5d:2f:d6:9b:1f:f4:06:b3:fb:1b:07:dc:13:0b:88:66:5f:
ba:ac:de:fd:de:fa:be:e2:2b:37:e2:40:e4:1d:c1:ad:c5:ba:
c1:9f:67:97:b0:47:34:a0:7b:18:35:79:4b:71:6b:12:3a:c2:
3e:fa:da:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzPM9L2gpLDBJCJ3fc8eCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOTMwMjljNWIyNjM5Y2QyOWI5ZjlkZDUyOTRjYzk0ZWY1
MmQ2YWYwHhcNMjYwMzI1MjEwMDU4WhcNMjYwMzI2MjEwMDU4WjAzMTEwLwYDVQQD
EygzYTQ1Y2NiMWY2OWMxNzEwMDcyODJjODBjMzBiYTFkNzdjMWJjOWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph/wEPprtpdH6CLB3KIIOwJDAzcv
pvRh8wLbrffvzKHdgdjkwoiyJ9dWGgnTVcdaE1VyBiRyAOZLCxhfoPpTOKXvCqmx
euEph5AIJ6jX3ONAfFYKbL+sOhBJqICD8LnOYrwkrSbrfVZy5lWPnxdHu8FKghh8
S1oOSL2hXdPNMebHz+W/mokiG2KWMRLTYulgdC+vCmKZfRA+n8jD0RLHW6eu9n6Z
pVxKiFIUuop5eHdXLedjZkUd/v0XJOEiFbl4gklO3pV61pscBxGsd/xbfRSUilnh
vduiPfOKD+pTN/LyWMFZ7xYQX8xIDD31kg8PXc4PXVoi9aZ/MtHxIcKxgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpFzLH2nBcQBygsgMMLodd8G8n1MB8GA1UdIwQY
MBaAFEyTApxbJjnNKbn53VKUzJTvUtavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEpNQ25Gc21PYzBwdWZuZFVwVE1sTzlTMXE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC83YmQ3MjktOThlNS00M2ZmLWFmZTYt
MTg3YjFmNzdjMWE1LzEvVEpNQ25Gc21PYzBwdWZuZFVwVE1sTzlTMXE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC83YmQ3MjktOThlNS00M2ZmLWFmZTYtMTg3YjFmNzdjMWE1
LzEvVEpNQ25Gc21PYzBwdWZuZFVwVE1sTzlTMXE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVYrJ8JH
lfjSQqfZNCbkkaF0fSe47KJW8/YgLIZkJ8P7aI3/6vmRHComZkD1GSyA5Z4TxK4v
0u3bdmNb7QzybLdg81iDOln2fFU0dgY9MeABY5SkeUjl6fdOPolBWtEDW7DbZp50
BFS8jjtOsrTJsGJBxdZl3lhO2X9H+KmDiwD6lI6ihkA5fTEfJRHgFVJy0oUSXwMe
WmOYRd9T7iSLzT3ICUzqOyqkpsBNEk4sbwiFjOPJNoE1qDXYJMZGnPHQBVozKsGD
810v1psf9Aaz+xsH3BMLiGZfuqze/d76vuIrN+JA5B3BrcW6wZ9nl7BHNKB7GDV5
S3FrEjrCPvraIw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:11:11 2026 by rpki-client