Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
File: TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json)
Hash identifier: URZWIwJH6AOvjMlAB615YaiNcaean/yRKegJftnm+EQ=
Subject key identifier: 81:62:B0:D4:B9:6E:04:B5:5E:6A:D6:F4:77:C3:62:63:E0:9A:4E:96
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial: 019D265FB4419ABD9B933FC622B935238E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
Manifest number: 08DB
Signing time: Wed 25 Mar 2026 19:01:39 +0000
Manifest this update: Wed 25 Mar 2026 19:01:39 +0000
Manifest next update: Thu 26 Mar 2026 19:01:39 +0000
Files and hashes: 1: 75HOIa64fDxinyOIx01Blej1elM.roa (hash: EnalwxHiL7Yvbfzav+WqLHXQw4xqRSm24VA6Qft2ERI=)
2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: lPl9qP7USiudPn30solsKSd9odaoINOKM9M8742rckA=)
3: gNIwlQhqrQHrAmcQt_v7U7yPQls.roa (hash: m7SKJRURhbOe8VuRCSBhxT8f7MRPwICOeiYwoIYek9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:b4:41:9a:bd:9b:93:3f:c6:22:b9:35:23:8e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Validity
Not Before: Mar 25 19:01:39 2026 GMT
Not After : Mar 26 19:01:39 2026 GMT
Subject: CN=8162b0d4b96e04b55e6ad6f477c36263e09a4e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:d5:e4:0b:0a:c5:9d:45:f1:f6:8d:95:75:
48:37:b8:7f:27:89:4f:fd:1a:a7:5d:a7:28:0c:46:
8f:74:fc:5c:c4:d5:80:69:f7:8a:59:ee:57:04:2b:
d9:49:fa:04:ab:10:3f:37:1a:39:1b:66:ec:10:80:
df:ae:a0:b3:83:9b:13:97:99:b9:1f:aa:96:e0:0c:
8e:eb:b7:32:28:b8:49:d4:cf:b5:ba:48:ae:59:3d:
36:f4:c4:9e:f4:41:20:48:97:cb:68:4e:0e:77:c8:
d3:44:51:f0:0b:95:5f:ea:d8:cb:85:e3:15:07:78:
ad:92:48:27:20:8b:03:d2:da:b0:23:c6:bb:36:fd:
ce:46:38:5a:a5:5b:e3:1f:4f:4d:a8:da:ec:92:c1:
68:4c:14:86:77:46:b5:79:b3:b7:b0:cf:72:39:47:
85:48:18:92:77:a7:9a:12:67:a6:63:53:d4:a6:1e:
59:38:d2:78:10:0d:05:9b:38:b9:0a:ec:82:1f:a7:
1e:77:31:d7:81:57:b7:ee:0a:28:00:e5:23:05:e4:
cb:d1:02:3e:40:ae:3a:70:a3:cb:04:bf:df:93:09:
ca:4d:e8:ad:37:45:72:b9:05:23:62:c9:de:9d:65:
68:55:2f:05:3e:ac:cc:2f:a0:1e:73:72:8f:f3:b5:
41:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:62:B0:D4:B9:6E:04:B5:5E:6A:D6:F4:77:C3:62:63:E0:9A:4E:96
X509v3 Authority Key Identifier:
keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5c:03:50:39:28:bb:9f:47:6c:68:7b:df:9a:e2:7c:c1:9a:
1f:15:57:b4:be:5e:df:7d:3e:86:e7:e9:66:4b:5d:6f:8b:ce:
cf:e8:ef:77:23:d7:23:98:b1:23:6c:e8:bc:af:de:ac:09:82:
04:61:b9:9f:31:28:72:95:9a:69:7c:20:5c:2f:97:c2:f4:a8:
a0:8a:11:e2:fc:52:34:a1:d1:33:18:e5:d1:03:9a:a5:3d:3a:
01:33:f2:50:11:20:ae:2a:e9:18:6b:87:13:66:8b:0f:5e:09:
8e:13:94:58:e1:01:96:42:f8:09:2f:2f:1e:61:df:5d:60:35:
f9:40:28:a7:4a:d6:11:97:6f:00:d3:06:c7:4a:d3:ba:85:99:
f9:74:88:34:00:04:e5:a1:1a:0f:63:e4:56:47:b8:6e:b2:ee:
19:26:1a:f3:c7:f1:ed:2f:e5:93:bf:53:42:e8:71:ca:9e:ab:
18:37:02:1e:a7:b0:8b:96:2c:1a:b2:63:cb:ed:6f:b4:48:0d:
23:d7:5b:31:a8:73:a0:8e:e5:37:1e:fe:a1:cd:cc:0a:fe:40:
f8:47:2b:df:b9:93:55:dc:3a:35:77:b5:e1:30:2a:cc:53:b7:
07:55:07:f1:22:68:1c:6f:6f:97:27:ae:a6:e1:d1:16:b9:40:
76:11:00:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:28 2026 by rpki-client