Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
File: TS-f1cihTNyfMcRYXNYNtXz_tMI.mft (raw, json)
Hash identifier: SqIRMM5Z4uhak0w5L7l8hsJGn9RbJ5IYneAMwF1ERD8=
Subject key identifier: 3F:03:A9:93:3F:5B:42:9E:75:A0:B3:1F:92:14:1D:6D:BB:02:CF:E9
Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
Certificate issuer: /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Certificate serial: 019D25BAD8841879118BFD959AF79C302A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
Manifest number: 0F49
Signing time: Wed 25 Mar 2026 16:01:35 +0000
Manifest this update: Wed 25 Mar 2026 16:01:35 +0000
Manifest next update: Thu 26 Mar 2026 16:01:35 +0000
Files and hashes: 1: 1-PcZA739O5jfsTyXtX2e6TIscS4.roa (hash: 8TW2rD12HBFWQAtxdbCJfapV59e5j+ulrB4BqMjg04I=)
2: 3bJDocgywntndtsfu_qK9cHpMt8.roa (hash: yNfaNNmmyD1SlEI3Ljm5OugJbl2m1Klcep+P5DT4G+s=)
3: O7SMXsiP2jcDC8ds3aHzihHcVV4.roa (hash: dRUITjUibnbbNquhA0z/5LyEKxqqyfiN2wuu/O3f8z4=)
4: TS-f1cihTNyfMcRYXNYNtXz_tMI.crl (hash: MgNwdv526zCF2Ymum6Qe/7KJBb5rtCSYA1KyCmMY5gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:d8:84:18:79:11:8b:fd:95:9a:f7:9c:30:2a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Validity
Not Before: Mar 25 16:01:35 2026 GMT
Not After : Mar 26 16:01:35 2026 GMT
Subject: CN=3f03a9933f5b429e75a0b31f92141d6dbb02cfe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:0d:e5:f8:7d:d6:d6:43:fc:de:e7:ac:96:
bd:2f:02:fb:ac:40:a1:6f:4b:58:c0:05:44:ab:cb:
f2:40:b4:43:4a:3d:07:d3:d0:c3:a7:23:ce:48:14:
3c:d5:11:3b:5d:ba:47:34:c2:fc:6c:05:30:96:e5:
87:70:5e:9f:3e:70:c9:5d:01:87:f8:3b:b7:41:0d:
7c:d9:ee:dd:8d:dc:38:6f:87:3b:49:49:91:88:16:
bc:4b:96:b6:f7:71:54:9c:60:4e:4f:53:76:4b:6d:
92:2f:49:98:12:ff:50:f4:e6:d9:de:17:47:4c:e0:
e4:ae:5c:18:8f:ee:d1:45:87:14:46:fc:b5:06:b0:
dd:29:6e:dc:70:b5:0a:cc:88:4f:a8:f1:68:95:36:
6b:8d:dd:45:62:1d:be:10:fd:61:22:bb:d9:62:e1:
9c:6f:c4:6c:0d:32:d7:95:77:25:64:bf:fa:88:10:
38:1e:8c:9c:0f:08:95:6f:5b:61:20:7e:7d:4e:2a:
b7:b0:d0:8b:8a:6c:bb:cd:d6:91:65:4f:53:79:df:
9d:f7:35:9b:24:d1:3c:cf:14:50:ed:e5:4d:85:26:
b2:00:36:e7:05:40:ee:76:7e:47:24:fb:b2:1d:63:
3a:45:bc:da:e7:84:6d:a3:30:ab:db:b8:58:78:17:
e6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:03:A9:93:3F:5B:42:9E:75:A0:B3:1F:92:14:1D:6D:BB:02:CF:E9
X509v3 Authority Key Identifier:
keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e0:8f:53:65:59:fe:3c:24:b6:37:7c:be:f2:44:20:b3:0d:
60:0a:3c:a8:a3:15:56:c0:e4:8f:84:5c:1d:eb:17:19:8e:5a:
2c:8b:ad:23:ac:02:00:c1:b8:52:45:dd:a6:d8:b2:0e:9b:97:
7c:52:3e:c4:ea:1c:eb:cf:22:67:82:56:d2:c8:50:35:5d:93:
91:fe:d3:b9:81:de:b9:b5:a4:fa:e8:9f:84:a3:50:21:d6:71:
c2:8c:e9:58:87:33:f0:5c:d2:66:21:68:38:79:51:1d:07:ab:
9d:83:f7:c1:13:ca:84:af:bc:ef:21:26:d4:01:95:c4:8a:97:
8b:ea:d9:48:08:19:20:0e:43:14:ac:c6:5f:d5:ad:9d:59:c8:
12:fb:eb:28:6d:3d:77:2a:ea:cd:0f:71:5e:e2:90:cd:e6:f1:
3a:38:89:61:ef:c1:9b:de:df:0e:de:f4:21:5f:0e:fb:86:7a:
3b:09:ba:e2:84:3a:aa:e9:50:33:6d:9b:1c:dc:80:5f:49:65:
22:bb:db:39:f7:18:a5:a6:ad:aa:8e:6e:2e:5f:9f:68:5b:4a:
70:f7:e5:d2:c9:1b:5c:5c:a8:1e:16:56:1c:44:81:40:ee:3d:
d3:44:82:3b:6f:32:54:33:53:9f:db:e7:f8:76:d3:8c:aa:2e:
2b:0f:0a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:01 2026 by rpki-client