Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
File: TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft (raw, json)
Hash identifier: 7Kd8r4j8gFxyipIHX6TksVr6CXQ+gKR9KZS5R/6Lcs0=
Subject key identifier: 34:EC:66:EF:51:42:6A:89:3C:9C:64:D9:5D:96:3A:DD:48:B9:C8:D3
Authority key identifier: 4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93
Certificate issuer: /CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
Certificate serial: 019D288494BD43F3F1089636D3AF18AADC0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
Manifest number: 1281
Signing time: Thu 26 Mar 2026 05:01:10 +0000
Manifest this update: Thu 26 Mar 2026 05:01:10 +0000
Manifest next update: Fri 27 Mar 2026 05:01:10 +0000
Files and hashes: 1: TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl (hash: 5QWWkICoRZuZUILJcSUyvfE/aA9XtYehIjwaLIG89O8=)
2: ayBRUQ4XFp8ceqFrnVdH8JT32Pw.roa (hash: ydKdrH0HwWllY5B18eol6PUwxMhU2Jq/931IBDQs9IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:94:bd:43:f3:f1:08:96:36:d3:af:18:aa:dc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
Validity
Not Before: Mar 26 05:01:10 2026 GMT
Not After : Mar 27 05:01:10 2026 GMT
Subject: CN=34ec66ef51426a893c9c64d95d963add48b9c8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:04:e6:de:7b:f5:ef:f7:98:28:52:98:f3:b8:
5c:69:cd:3c:f9:df:c7:2c:fc:c6:00:64:2c:47:0a:
58:d3:06:8c:ce:cd:bb:67:a4:98:16:0b:bd:d2:30:
fb:25:ca:81:76:21:94:f3:d6:c5:7d:3c:66:7f:58:
06:97:e3:36:3b:24:d3:fe:3f:fd:df:91:19:a1:ce:
e8:75:1c:c2:c0:ef:eb:f5:fb:af:b4:f7:ea:cf:b1:
66:17:37:84:79:7a:8c:3a:9a:8a:df:04:1d:a4:27:
8b:69:1a:c5:4f:2a:8f:a8:a8:2d:a8:f6:73:25:a3:
9e:f8:1b:43:58:07:7e:3e:09:8d:06:84:5f:15:d1:
66:c6:01:08:cb:d4:44:ab:9e:dd:c6:8f:cf:7e:21:
7d:77:c5:30:03:2c:9b:ef:e2:cb:5a:48:c9:6f:3c:
b9:46:93:eb:2e:c2:d1:de:aa:76:bc:5c:37:3f:53:
a7:d2:15:1e:81:7d:e3:ea:7b:6f:ab:02:5a:54:2f:
d0:21:ff:9c:80:34:33:be:d5:7d:89:3c:e8:ea:e6:
9e:93:b4:79:63:5f:76:64:50:87:27:32:27:b7:f4:
51:59:bc:04:49:6b:26:55:8d:eb:d8:73:cf:56:95:
0b:47:3c:aa:42:01:da:9b:a6:6f:7a:4c:25:07:05:
cb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EC:66:EF:51:42:6A:89:3C:9C:64:D9:5D:96:3A:DD:48:B9:C8:D3
X509v3 Authority Key Identifier:
keyid:4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:8e:71:68:98:9c:55:c3:97:a2:c2:5e:cf:ca:10:c9:d7:b3:
e3:cc:27:28:cc:13:e1:58:0c:04:00:9e:f2:32:b5:0b:f2:29:
37:0d:9e:a3:cc:f7:b3:fc:de:6f:52:cb:31:f9:dc:37:0f:10:
28:e7:82:4e:45:69:44:0c:a7:8e:59:ff:fb:b0:26:2a:20:2e:
b5:99:64:8b:9b:46:cd:22:33:f0:02:9f:90:86:40:b1:45:0b:
01:8a:86:3e:70:82:1d:d0:75:6c:8b:63:21:35:ae:a4:3d:24:
0c:11:0f:14:21:eb:8d:e3:77:3b:04:08:4a:a8:0f:91:aa:f4:
d2:5e:2b:24:16:84:b4:10:da:16:8b:ba:66:b6:ab:d8:3a:df:
8d:f4:17:07:29:7f:14:4e:5f:a1:5c:02:9e:db:50:ac:77:64:
83:d7:a4:4b:ce:0b:6d:2f:82:7c:99:0e:55:f7:2c:ad:e8:ca:
3a:aa:f3:5f:1f:06:ff:85:fc:fb:8e:77:ed:e7:5e:89:6f:8d:
44:0d:76:c4:7a:dc:89:ca:5e:12:2a:3d:83:92:3f:d9:d9:56:
aa:d0:2a:c6:d9:29:4b:ef:31:0b:78:b7:45:39:bc:be:b5:3a:
8b:c6:d8:63:62:cd:27:38:02:36:cd:42:5c:a0:c1:ee:af:c4:
42:7a:e3:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohJS9Q/PxCJY2068YqtwKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjM2Y0MjhmZDk4MzRjZDVlYzliYjE2MGY4YjZkY2Y0NDZl
ZjVkOTMwHhcNMjYwMzI2MDUwMTEwWhcNMjYwMzI3MDUwMTEwWjAzMTEwLwYDVQQD
EygzNGVjNjZlZjUxNDI2YTg5M2M5YzY0ZDk1ZDk2M2FkZDQ4YjljOGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjATm3nv17/eYKFKY87hcac08+d/H
LPzGAGQsRwpY0waMzs27Z6SYFgu90jD7JcqBdiGU89bFfTxmf1gGl+M2OyTT/j/9
35EZoc7odRzCwO/r9fuvtPfqz7FmFzeEeXqMOpqK3wQdpCeLaRrFTyqPqKgtqPZz
JaOe+BtDWAd+PgmNBoRfFdFmxgEIy9REq57dxo/PfiF9d8UwAyyb7+LLWkjJbzy5
RpPrLsLR3qp2vFw3P1On0hUegX3j6ntvqwJaVC/QIf+cgDQzvtV9iTzo6uaek7R5
Y192ZFCHJzInt/RRWbwESWsmVY3r2HPPVpULRzyqQgHam6ZvekwlBwXLkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTsZu9RQmqJPJxk2V2WOt1IucjTMB8GA1UdIwQY
MBaAFEw/Qo/Zg0zV7JuxYPi23PRG712TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEQ5Q2o5bURUTlhzbTdGZy1MYmM5RWJ2WFpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy85MmJlNmEtOTJjNS00NTM3LWFjMzIt
MTM5NTM2OTUyODk2LzEvVEQ5Q2o5bURUTlhzbTdGZy1MYmM5RWJ2WFpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy85MmJlNmEtOTJjNS00NTM3LWFjMzItMTM5NTM2OTUyODk2
LzEvVEQ5Q2o5bURUTlhzbTdGZy1MYmM5RWJ2WFpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl45xaJic
VcOXosJez8oQydez48wnKMwT4VgMBACe8jK1C/IpNw2eo8z3s/zeb1LLMfncNw8Q
KOeCTkVpRAynjln/+7AmKiAutZlki5tGzSIz8AKfkIZAsUULAYqGPnCCHdB1bItj
ITWupD0kDBEPFCHrjeN3OwQISqgPkar00l4rJBaEtBDaFou6Zrar2DrfjfQXByl/
FE5foVwCnttQrHdkg9ekS84LbS+CfJkOVfcsrejKOqrzXx8G/4X8+4537edeiW+N
RA12xHrcicpeEio9g5I/2dlWqtAqxtkpS+8xC3i3RTm8vrU6i8bYY2LNJzgCNs1C
XKDB7q/EQnrjKA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:11 2026 by rpki-client