Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.mft
File: TpisyG9BxHFbEMHdUmMcMqgZSjA.mft (raw, json)
Hash identifier: YwfJID35GkhweJ0r8TVOnJEbUJsHz6LOmpx3PSs/3TA=
Subject key identifier: 9D:BD:D3:8C:FA:70:08:27:3B:60:2B:BB:4A:EA:7C:87:C7:EB:7E:E1
Authority key identifier: 4E:98:AC:C8:6F:41:C4:71:5B:10:C1:DD:52:63:1C:32:A8:19:4A:30
Certificate issuer: /CN=4e98acc86f41c4715b10c1dd52631c32a8194a30
Certificate serial: 019D284DC983DEC84F93BA1F0B982C0702FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TpisyG9BxHFbEMHdUmMcMqgZSjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.mft
Manifest number: 1370
Signing time: Thu 26 Mar 2026 04:01:19 +0000
Manifest this update: Thu 26 Mar 2026 04:01:19 +0000
Manifest next update: Fri 27 Mar 2026 04:01:19 +0000
Files and hashes: 1: TpisyG9BxHFbEMHdUmMcMqgZSjA.crl (hash: yd+nxGoJOYzVu5IKmx27QqkNj2Y1kx+t111u6sfC000=)
2: h6PxJ4P9fw2mPiB1bzbloLD9ySY.roa (hash: +EZ5CMikkFb7fdg5EIxG+t8LZY1EVs5DyG4OFvuf94U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TpisyG9BxHFbEMHdUmMcMqgZSjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:c9:83:de:c8:4f:93:ba:1f:0b:98:2c:07:02:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e98acc86f41c4715b10c1dd52631c32a8194a30
Validity
Not Before: Mar 26 04:01:19 2026 GMT
Not After : Mar 27 04:01:19 2026 GMT
Subject: CN=9dbdd38cfa7008273b602bbb4aea7c87c7eb7ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8d:6f:9a:26:dc:28:a8:e9:12:f0:14:44:d1:
5c:3e:f3:bf:26:08:1c:34:6e:5b:f7:7a:3a:aa:79:
93:cc:52:a9:3e:16:70:f4:97:b9:78:bf:40:3d:cc:
73:fd:01:8f:b5:13:ec:3c:b6:52:86:38:96:1c:32:
2f:b5:25:bd:d8:27:22:bd:90:6a:79:2e:bd:5e:97:
02:3d:89:71:f2:fe:e6:ca:14:96:c1:9d:df:c4:69:
14:2d:16:fb:c6:e1:37:c5:1b:b7:02:7a:a9:f1:c9:
1f:b1:00:3d:3b:88:4a:13:7e:9f:35:46:10:c5:9e:
b1:ee:1e:dd:31:26:d0:d6:ed:28:3a:95:dd:7d:b3:
05:69:1b:1b:86:d6:18:d2:2c:af:c4:21:4b:4e:92:
fd:ff:4d:ac:9c:33:75:11:bb:8a:ca:16:ee:ce:80:
b5:a9:63:f7:68:b7:e2:fc:19:0d:de:57:6d:50:d8:
2c:56:ae:94:41:e4:c6:48:c4:c7:62:ab:e3:44:47:
c1:3d:a3:3f:cf:c1:ed:7b:26:fe:c3:27:e9:e0:33:
c3:92:bf:7c:4b:65:1e:30:74:e5:f0:f9:25:7c:8b:
10:dc:7c:c2:c4:70:ff:59:bf:20:96:56:ec:95:99:
de:5c:46:12:88:6f:bf:3a:3e:b0:a6:df:51:41:d9:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BD:D3:8C:FA:70:08:27:3B:60:2B:BB:4A:EA:7C:87:C7:EB:7E:E1
X509v3 Authority Key Identifier:
keyid:4E:98:AC:C8:6F:41:C4:71:5B:10:C1:DD:52:63:1C:32:A8:19:4A:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TpisyG9BxHFbEMHdUmMcMqgZSjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:08:e1:04:05:d3:ce:3d:87:2b:aa:f0:91:94:af:cb:e1:fb:
b8:63:34:ca:c7:6f:99:3b:81:f7:7e:c1:65:ce:66:cb:a9:0b:
7a:9f:26:c9:f9:f8:a6:d8:b6:4c:04:56:bf:5b:a2:3e:d8:84:
8b:b0:09:cd:59:9b:0d:94:12:4b:23:e2:11:64:a4:ac:3a:9f:
38:87:3c:25:a9:f1:39:4c:e3:67:39:94:e5:6f:8e:47:79:aa:
d6:b2:f4:61:ac:1f:bf:96:69:22:12:1a:7c:73:c8:0b:00:42:
8e:4c:1b:cf:39:18:bd:30:61:4c:7b:0e:8a:4a:fa:8d:e3:1a:
fa:49:c5:61:8c:5d:a5:3b:c5:50:0f:33:37:5c:18:c3:58:59:
7d:28:c9:56:5a:7b:59:01:21:19:65:b7:76:a7:5a:91:bf:4d:
fb:7d:0c:a2:d3:af:8a:69:7b:03:ce:89:50:f3:03:ca:f4:0c:
01:a7:4d:93:03:3c:36:42:17:44:fc:55:d3:ea:a7:fa:87:cc:
63:b5:f2:df:cd:2a:b5:d5:8c:ce:21:12:d2:7d:a5:f5:8a:d1:
a6:65:83:c0:50:75:b8:8a:b4:37:df:bb:3b:3e:e4:0d:24:14:
a4:7b:fb:ce:ac:6e:22:00:17:75:82:36:5c:13:2f:44:67:3c:
ab:c7:28:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:51:43 2026 by rpki-client