Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
File: Tg854squjizxS8xBsj88huGnIPg.mft (raw, json)
Hash identifier: BOG9tkZ+H1rIWkVcU3UZhFeUqmPaZMwDz/1LWr2ynf4=
Subject key identifier: C3:EF:C8:8E:EA:08:33:D1:22:EC:3D:66:42:10:8E:3A:F8:67:CC:A6
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 019D2583FB2951E2CFB92B779A20EDE09291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 15:01:39 +0000
Manifest this update: Wed 25 Mar 2026 15:01:39 +0000
Manifest next update: Thu 26 Mar 2026 15:01:39 +0000
Files and hashes: 1: Q_cKojzZsCR7sHqcACX5_Xsszdg.roa (hash: 13DJN0AYMyq7FKRePbvdklWh/SNv0jTV2Z45dv8uucM=)
2: RBXH0ektt1CQc3W3hp-LoPyoFDI.roa (hash: n7TnoGzFQ9ajRDTZ9C84X5KWHPVtB0cd7T1ju2YPzsI=)
3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: AK+U6s1Kl/BrDA8IYbUWPKyE0DA82tSTjktMRLD0Dds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:fb:29:51:e2:cf:b9:2b:77:9a:20:ed:e0:92:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: Mar 25 15:01:39 2026 GMT
Not After : Mar 26 15:01:39 2026 GMT
Subject: CN=c3efc88eea0833d122ec3d6642108e3af867cca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:98:19:cf:64:6f:b1:b6:9b:09:9b:de:ea:63:
77:01:14:19:44:05:c4:6a:c5:f6:3c:b2:94:e6:22:
78:1e:c1:3e:3e:56:d5:9d:32:8d:3e:62:c4:89:1c:
6c:de:95:81:53:4b:ac:ce:4c:ae:9b:b0:cc:c8:46:
76:7b:70:c8:91:28:84:9b:3a:6e:1e:df:98:4d:67:
e2:9c:f4:79:0c:98:e0:c7:47:4f:fb:d5:68:c5:3c:
c3:ce:ff:d6:11:90:f0:7c:1c:8f:50:4d:8c:7d:c1:
54:2b:6d:37:d4:29:11:4f:ca:42:b7:58:fd:01:fd:
16:0c:fe:c7:69:18:1c:dd:ff:16:b2:00:31:b3:97:
ec:6a:e4:33:85:1e:af:f9:45:3c:a6:bf:41:46:bf:
bc:db:84:79:80:6a:65:bb:da:22:8a:ae:ae:3a:0f:
c7:0c:bc:f1:9e:9c:5a:bf:e1:ff:64:3d:0a:37:57:
e1:cb:6f:f5:db:c6:af:94:5f:24:e3:f1:36:08:c4:
c9:ae:95:44:82:e3:21:8c:83:fc:8c:85:16:91:8f:
48:ee:be:76:4f:65:f3:59:0c:98:5b:82:22:83:09:
a9:e5:d6:e2:38:8f:c0:58:13:88:ba:6a:fd:0b:8c:
3e:50:7e:39:81:03:b3:12:50:8d:ca:dd:76:84:f0:
03:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EF:C8:8E:EA:08:33:D1:22:EC:3D:66:42:10:8E:3A:F8:67:CC:A6
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8b:c8:9a:5f:75:ae:1e:1e:c0:e1:be:eb:6e:66:99:15:22:
93:e2:66:10:a9:9c:e4:ca:bf:f4:81:b3:bd:4e:c8:03:32:b4:
3f:8a:df:4a:ff:5b:d0:34:f5:fc:06:12:ce:d9:e1:4d:ef:d2:
b5:6d:e6:14:1d:93:36:6f:95:87:d2:59:a0:47:32:c7:bc:49:
74:86:d7:22:c3:cf:29:89:59:c6:5b:d0:ef:da:72:50:1d:1e:
ba:a9:4b:81:c5:78:90:51:28:15:f4:5a:19:69:16:e5:45:16:
fd:27:10:02:89:5f:a3:9d:ae:82:a9:dc:0b:fc:89:46:6e:e2:
e1:99:d7:41:d4:c3:9a:44:7b:28:c0:09:73:53:f8:9a:e2:27:
12:3f:2e:51:f6:fc:05:e6:05:c7:82:da:61:87:9d:f2:77:4e:
c5:50:0d:c7:c4:51:80:9c:85:ad:28:34:07:d6:65:59:0a:ee:
ac:33:53:c0:73:62:4b:e5:28:f6:92:e7:2d:1a:2e:8f:cb:d8:
d3:0b:01:d8:d3:cf:00:94:64:23:39:4c:43:84:46:2e:70:4e:
b7:8f:69:51:dc:3d:24:fa:2b:45:70:6c:16:aa:93:77:65:91:
77:9a:80:ee:02:3f:52:ae:e8:88:0e:70:ce:4e:0f:af:7c:ac:
68:4a:38:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:12 2026 by rpki-client