Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
File: TjwBugxcvyCuPpPKPTeeYt9clZo.mft (raw, json)
Hash identifier: rMEJ3RtSNiCYn+3hqfoTlxSZ8i1nN0PpK4FMVJyjT0Y=
Subject key identifier: 39:8A:4F:B8:4B:8F:EF:E3:48:67:19:66:F1:DE:56:4E:07:4B:01:E3
Authority key identifier: 4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
Certificate issuer: /CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Certificate serial: 019D27A9024EC51141DEC5BA2B2751D0D9EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 01:01:20 +0000
Manifest this update: Thu 26 Mar 2026 01:01:20 +0000
Manifest next update: Fri 27 Mar 2026 01:01:20 +0000
Files and hashes: 1: FjQD5obfjitF4TyVNiOnrUuu6ko.roa (hash: 4qN5nXtzPSFJUF4nfX9RAWVMRw9xA5tlQvP0vuood6U=)
2: TjwBugxcvyCuPpPKPTeeYt9clZo.crl (hash: c8Y/jg+yNPJCV7f3mWDvvY1qXoR37MHJ7swep72Rw1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:02:4e:c5:11:41:de:c5:ba:2b:27:51:d0:d9:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Validity
Not Before: Mar 26 01:01:20 2026 GMT
Not After : Mar 27 01:01:20 2026 GMT
Subject: CN=398a4fb84b8fefe348671966f1de564e074b01e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9c:03:6f:2d:91:bb:99:00:3e:4c:21:38:3d:
1a:17:a9:23:4e:68:bd:59:58:27:bb:50:bd:5d:b8:
0c:3b:17:dc:84:eb:7c:8e:b3:7f:91:32:33:24:e3:
4f:9e:67:f0:42:25:a3:cd:75:41:71:b3:db:41:d9:
27:3e:24:35:90:5e:05:8b:67:ab:4e:a9:31:c2:d1:
08:46:59:5a:3d:9e:d1:29:8a:5d:79:99:ba:9c:c7:
3e:7f:04:e3:07:06:2e:3a:1f:3f:37:ba:d3:f0:13:
f6:77:2b:16:29:5c:1e:02:5b:9f:b0:bc:8e:29:8a:
51:9d:60:04:1e:b9:6a:ab:28:85:65:c7:3d:1e:77:
c2:05:2f:02:ed:3e:94:59:58:c9:51:88:5a:f2:be:
d8:61:3f:ff:5a:02:f3:42:a8:5b:e9:a1:92:5a:46:
81:2b:61:ed:7b:55:a4:37:91:fc:96:97:d3:12:73:
ac:70:55:b7:3b:1d:70:c3:e7:04:6b:86:c1:ec:a4:
0e:c0:18:7f:84:ee:7e:4b:d5:4d:1c:ca:ba:85:d4:
e3:04:78:28:21:5c:f0:57:20:02:a5:11:0e:49:64:
1f:10:22:48:a9:ef:fb:a8:1e:96:8c:0e:11:cd:79:
fe:8d:58:44:97:e7:18:59:71:10:76:16:b7:9e:76:
89:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8A:4F:B8:4B:8F:EF:E3:48:67:19:66:F1:DE:56:4E:07:4B:01:E3
X509v3 Authority Key Identifier:
keyid:4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7d:ff:38:f2:83:c7:9a:4f:5c:c6:11:0f:ee:ae:9b:71:ba:
d9:42:c6:65:93:a5:1e:4b:e0:0c:ee:d9:5a:4a:f1:a6:2a:b1:
7a:f4:13:29:23:50:a6:ab:a4:c0:dc:61:67:b9:43:0f:dc:46:
5c:73:0c:5d:f4:bd:a6:74:ae:d2:e6:5c:c6:d5:80:ec:65:bf:
46:8b:da:05:c2:28:2b:53:e6:cf:6c:c2:4b:ee:a3:ba:9f:73:
38:24:1e:6f:06:57:a8:7d:13:cf:05:36:9b:6d:77:92:e5:e1:
38:55:c5:dc:4c:29:f4:71:2e:02:70:b4:55:37:a4:c2:da:c9:
3a:ad:e8:81:6c:11:34:2c:da:4d:6a:2e:84:6c:a6:9b:16:18:
e3:ed:72:52:25:23:d6:d9:4d:44:62:e0:72:ac:82:0b:15:0b:
81:5a:0d:01:2f:65:d7:3e:4a:c2:52:33:fe:09:b3:10:3d:74:
e1:81:e3:ff:56:62:60:9d:af:14:59:3d:79:0f:8b:0e:78:a6:
8c:b4:d6:42:75:bd:3c:23:8e:dc:57:d1:e6:3a:91:e0:d6:e7:
47:9c:f8:b5:9e:ba:cb:e5:09:d4:b8:3a:de:fd:64:b2:db:5f:
1d:f5:f5:01:25:6f:0f:8b:6e:7d:b8:29:6c:a0:da:2c:79:25:
7d:0f:be:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:50:27 2026 by rpki-client