Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
File: TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft (raw, json)
Hash identifier: cPFvzpEysofRwncrzWL1m/rphTljaKkCWQKm/C/jmOY=
Subject key identifier: 38:EC:D9:54:FA:BC:C4:57:21:F0:99:79:57:29:E2:8B:FF:AC:6F:51
Authority key identifier: 4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
Certificate issuer: /CN=4cca52610c77c24069c6a659f5f75862444d21d1
Certificate serial: 019D269634D24FB1907554A498BE53FAF659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
Manifest number: D2
Signing time: Wed 25 Mar 2026 20:01:11 +0000
Manifest this update: Wed 25 Mar 2026 20:01:11 +0000
Manifest next update: Thu 26 Mar 2026 20:01:11 +0000
Files and hashes: 1: 7zHV66w7Bkb2Ny1dDTCLE7Wl8ao.asa (hash: lHxtADA9XD8WHImnlrIbVNB8iNbIHqkbRGv2EysJnKE=)
2: TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl (hash: IOk3BImmoj1lEq/cgwtmnQdo8qDdUcxqtNm12s7uj7E=)
3: xG9NFV14N6jhxkLPrteP6dgm9Uo.asa (hash: j7yw0JA2orCei5mBZaM+jkEs+OnrVp/04Pg2/7YewKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:34:d2:4f:b1:90:75:54:a4:98:be:53:fa:f6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cca52610c77c24069c6a659f5f75862444d21d1
Validity
Not Before: Mar 25 20:01:11 2026 GMT
Not After : Mar 26 20:01:11 2026 GMT
Subject: CN=38ecd954fabcc45721f099795729e28bffac6f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b7:fc:fb:9d:7f:a8:c0:49:04:39:fe:ab:0f:
a3:2d:c0:d4:42:9b:be:b1:88:8f:6b:49:a3:aa:66:
18:b5:28:28:2c:52:27:ad:5e:c3:db:19:bf:52:23:
2f:27:ed:fb:4d:bb:39:32:55:97:da:25:74:03:20:
62:f2:ac:ea:db:3b:99:74:2b:02:8e:ec:70:cf:61:
5a:01:46:1c:0b:25:1b:5e:9b:b7:43:72:16:c4:2b:
d4:b6:fc:e7:1f:5b:22:70:22:05:65:b1:e0:41:69:
38:e8:bd:fa:8c:57:96:dd:d7:58:66:a1:7a:9e:86:
55:55:52:12:95:6b:c6:3f:c2:64:16:d3:5e:2a:64:
bc:20:16:2d:c7:2b:d2:25:38:bc:5a:16:b4:01:ab:
f1:4c:46:d8:62:0e:e9:e1:86:d1:2b:22:85:e5:16:
9a:fa:ac:ec:d6:c7:f8:49:8f:f1:04:c5:a0:dc:e6:
1e:89:f2:a5:aa:91:24:fa:a1:77:6b:de:be:13:9d:
f1:e6:d1:2a:f0:4b:98:9f:46:98:96:46:93:88:64:
22:78:b7:8c:5e:1e:af:a7:71:4f:ed:00:11:4f:9d:
5e:c3:0b:27:84:28:13:03:d4:a2:7b:33:1f:52:f2:
c6:80:19:eb:ae:cd:60:ce:b9:b6:15:b8:02:17:a6:
fe:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EC:D9:54:FA:BC:C4:57:21:F0:99:79:57:29:E2:8B:FF:AC:6F:51
X509v3 Authority Key Identifier:
keyid:4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a7:df:87:62:ff:67:40:ec:05:d1:a7:12:08:e1:f2:e1:4f:
2c:72:5b:c4:f5:02:0c:d7:58:78:2b:30:78:54:30:c7:fa:ae:
df:0d:7d:8d:24:c2:53:58:8e:d2:c1:b1:ee:29:1a:87:6c:d1:
94:4b:5f:ab:a3:b4:b4:a1:54:0f:0a:f2:be:a0:e6:20:31:ee:
1a:7b:0a:4c:58:31:ee:d8:82:2b:fb:49:f2:25:c8:c1:7e:0a:
23:d7:f4:65:48:50:e9:40:d4:a9:fa:d4:25:cb:0a:17:fc:55:
52:22:57:8b:db:2d:bc:b7:a5:d4:10:ce:41:54:7f:5b:4b:59:
d1:01:0b:62:9c:d6:fe:97:5f:00:24:1d:06:23:e6:45:89:ec:
95:9d:68:33:64:f6:de:4d:d9:66:a4:f5:02:42:bc:8e:e7:2b:
86:4c:89:01:a9:e5:50:44:27:38:33:d3:c0:4b:56:2f:5b:f0:
4d:9c:57:79:d5:c3:3d:c3:b4:05:af:64:4f:c1:bc:83:ea:34:
83:4c:a7:bb:3b:3f:72:36:4a:40:19:ee:47:ab:ce:7a:94:67:
2d:47:0d:15:20:e1:9c:fe:45:42:d6:13:da:1f:6f:2b:4f:9e:
19:bb:66:b1:d3:02:f1:b4:e2:de:56:58:5b:ee:b5:a4:a3:a1:
44:97:7b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:22:28 2026 by rpki-client