Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
File: TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft (raw, json)
Hash identifier: MZODtfHz0UR23YEi/E/1HNNbnY9hQJxdW7RbyqKllx8=
Subject key identifier: CC:88:DB:D0:9B:58:5F:A3:93:19:5A:9B:E8:92:AE:65:9E:F0:7C:60
Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
Certificate issuer: /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Certificate serial: 019D284D3B4CF78CEBA4B250209AB21CBB91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
Manifest number: 0947
Signing time: Thu 26 Mar 2026 04:00:43 +0000
Manifest this update: Thu 26 Mar 2026 04:00:43 +0000
Manifest next update: Fri 27 Mar 2026 04:00:43 +0000
Files and hashes: 1: 5cyx45wBsDWUW4HLBveZ_qT2fcI.roa (hash: 8zrBvmy9ZVUIH/JDFlTLI0bEMjkf56i51k/bt1Lb1pQ=)
2: BGnZrxh766n-RwiVyZM8GwNTqh0.roa (hash: /zWDyCDhQQVXOZUHRipaDLFDgbYWX/UYPO8XJtBp0uE=)
3: JI6F6sKwmFDB-S9XODKhAA660AM.roa (hash: /b/qNAizl4V5sFYHPlaPbBReehGSPPstai3HlyE9iGo=)
4: OB0voxOvgqvD6w4CwDmCo19dJlY.roa (hash: 9mhFY39YjN1Cc/funyTGbxD0WJvEdMakoR8u2Fsujz0=)
5: TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl (hash: 5407r4eVogw+5/nEBQ77izWXoYqp6seobdrW2+11FVw=)
6: X14l7kvlYYBF3EHNWSg-svsFuOQ.roa (hash: Y9BNprLjsgal1cKXYYlZbO0fiea/j/rMdHY3dC/wqFY=)
7: sGobVjVtmpTG3eIQoRngSBlxcMU.roa (hash: UMoTBGpuj0hrOh47PvNUlOhwfEbv/t4MSoG5XZ2RuSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:3b:4c:f7:8c:eb:a4:b2:50:20:9a:b2:1c:bb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Validity
Not Before: Mar 26 04:00:43 2026 GMT
Not After : Mar 27 04:00:43 2026 GMT
Subject: CN=cc88dbd09b585fa393195a9be892ae659ef07c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5d:66:84:50:74:f6:05:93:6d:c1:53:13:1f:
cb:35:be:c8:8d:fc:f9:df:06:c1:c0:4e:c2:5c:71:
01:6c:99:4a:21:b3:61:b4:b7:e6:5c:3f:55:6b:94:
fe:ec:37:b5:63:f5:e0:84:1b:a6:cf:07:12:48:86:
45:73:3a:aa:7d:0a:b7:80:58:c3:e9:8c:94:8a:d9:
12:ef:85:59:b9:62:bc:48:e6:2d:ad:58:c3:5c:95:
05:06:e2:a8:ab:83:c5:68:45:eb:d6:fc:f7:00:bb:
c9:0c:74:d2:4d:81:a7:dc:77:9a:08:a0:96:72:0d:
97:ed:d4:91:1a:fe:ec:90:76:8c:16:00:72:c8:66:
14:3c:7b:ca:22:29:7d:ff:81:86:b0:c4:9c:55:14:
bc:da:d4:8a:54:e8:7f:43:b1:a9:a6:7f:c2:16:31:
98:bf:fb:f0:4e:b8:ce:26:67:bb:dd:7b:e4:af:63:
6e:6d:ab:a6:a2:c2:e6:27:a7:06:86:30:a1:13:50:
7e:cc:30:27:e9:87:77:fc:67:26:69:8c:ee:67:1e:
99:52:f0:d3:6f:81:ef:68:95:07:eb:6d:71:8a:59:
17:d7:71:b6:0e:ce:d2:4a:7c:76:4a:d1:cb:4d:8a:
8a:39:4e:fa:f6:4d:38:9f:48:33:17:95:99:f9:aa:
38:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:88:DB:D0:9B:58:5F:A3:93:19:5A:9B:E8:92:AE:65:9E:F0:7C:60
X509v3 Authority Key Identifier:
keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2c:65:c4:8d:f0:f4:53:4c:cc:bf:91:e8:31:c4:c3:cf:43:
72:f4:d5:4f:15:9b:46:e0:f3:34:cf:09:ab:d6:a7:3c:6c:05:
00:b0:92:fb:07:d9:14:4b:76:55:39:1f:7b:51:b1:b5:38:a2:
a4:2c:6b:ad:15:6e:24:fd:0d:8e:fa:3c:b2:b7:72:80:a5:7e:
dd:45:77:26:f3:ec:59:df:b0:29:16:70:31:81:76:2f:f2:01:
bc:37:4d:45:24:70:b5:54:1d:68:73:c1:a8:0d:c0:df:c5:59:
73:28:20:03:70:5d:19:6c:3a:b2:74:4b:5c:0a:ed:37:c2:d4:
7c:62:f6:65:2a:89:06:18:58:5e:5a:0d:87:18:f7:cb:49:6b:
7a:d3:e1:95:23:48:ee:05:97:1a:db:c9:f1:a0:a2:be:01:c4:
6a:67:c5:df:88:16:0a:ab:0a:1e:3d:db:6b:78:ee:a7:22:f5:
5e:45:ad:5d:28:48:17:4f:f2:f0:2d:f0:9a:1e:18:b4:86:8d:
b8:22:81:d1:5a:32:34:25:63:53:1c:8a:ef:a9:e1:be:86:ea:
5f:64:81:de:a9:26:52:f3:ac:be:93:1e:af:41:c6:e6:4d:00:
12:94:3f:d8:e2:dc:a7:8d:93:92:8b:ff:08:70:38:87:3d:57:
1b:32:60:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:06:39 2026 by rpki-client