Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
File: TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft (raw, json)
Hash identifier: yVufNJyFjHf2UMzQ1S2gjKUapDGvovjcbmpTwmpz2VY=
Subject key identifier: B8:8D:3A:17:61:9D:4F:0C:77:9E:83:A8:EF:9A:83:0A:B8:16:BE:DF
Authority key identifier: 4D:C0:23:0C:D4:15:D8:6E:86:FD:88:93:13:42:87:CE:54:A6:87:D7
Certificate issuer: /CN=4dc0230cd415d86e86fd8893134287ce54a687d7
Certificate serial: 019D26963A39563A862644233C57F4CBC047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
Manifest number: 034C
Signing time: Wed 25 Mar 2026 20:01:12 +0000
Manifest this update: Wed 25 Mar 2026 20:01:12 +0000
Manifest next update: Thu 26 Mar 2026 20:01:12 +0000
Files and hashes: 1: TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl (hash: +AQH/mZrpPPvR9/cD4L/yN/IIuIqGG3ze/gap73znzA=)
2: xxSghRy6AfEWa4Xp9hCtVJwXq8Q.asa (hash: tkVbLxXuAlB5/ytsjVKiIz1hk9lX1sqQHSPlQ6fiMgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:3a:39:56:3a:86:26:44:23:3c:57:f4:cb:c0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc0230cd415d86e86fd8893134287ce54a687d7
Validity
Not Before: Mar 25 20:01:12 2026 GMT
Not After : Mar 26 20:01:12 2026 GMT
Subject: CN=b88d3a17619d4f0c779e83a8ef9a830ab816bedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:35:6d:9c:36:e5:d2:44:68:29:99:92:a3:74:
d4:c0:33:b5:f6:dd:8c:7a:d8:17:de:5c:ea:7e:48:
15:13:0d:82:4f:57:01:6f:ae:05:5e:f8:25:f2:43:
60:95:a2:0f:63:14:5b:04:25:5c:93:57:77:ff:61:
88:24:ba:ec:4b:c6:7f:a4:3f:af:56:a6:cf:d7:96:
73:e6:4b:be:03:f9:b1:11:42:20:cc:27:68:00:c2:
51:b8:b3:ad:e2:a0:d3:24:ae:e0:99:eb:4a:00:a2:
40:a7:28:a1:18:40:a8:62:87:e1:dc:1c:d2:7a:b9:
da:52:86:1e:cc:c1:d6:90:65:fe:38:23:aa:1b:87:
3b:aa:c4:4b:ac:e8:37:04:fe:8a:6e:21:01:6c:c7:
45:a4:43:1c:c2:86:35:04:24:7d:03:d6:8c:f4:22:
89:b3:95:00:ac:62:a8:0a:b9:a8:c0:01:c5:e8:02:
99:3c:70:8d:99:60:42:1c:ce:26:11:ea:83:ef:eb:
38:85:97:7b:7b:36:3d:c4:71:7f:d1:2f:30:20:65:
0d:05:88:8a:08:56:77:5e:ce:38:d9:f0:55:2d:05:
99:a8:02:0f:99:e6:ea:0e:3a:bf:81:e7:60:b9:65:
1c:4a:c6:6d:12:d0:04:d6:b8:e6:a1:41:c0:aa:a3:
5b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8D:3A:17:61:9D:4F:0C:77:9E:83:A8:EF:9A:83:0A:B8:16:BE:DF
X509v3 Authority Key Identifier:
keyid:4D:C0:23:0C:D4:15:D8:6E:86:FD:88:93:13:42:87:CE:54:A6:87:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a3:da:f0:73:2e:42:2a:a5:7f:2f:ba:46:42:a0:32:48:fb:
f6:b6:2e:09:35:d8:00:d2:39:0c:87:2a:f0:c7:d0:db:ad:ed:
33:c2:e2:d4:c9:e5:8d:b7:bf:90:fc:a6:bf:2a:77:d0:c5:f8:
e6:12:3d:9b:97:42:84:45:36:22:5a:2c:8e:d8:f5:7f:6d:5d:
ae:7d:a3:d0:e4:5a:76:55:28:01:88:67:b7:85:53:4b:c3:18:
9a:68:89:19:d8:c9:ac:cc:87:78:f9:78:5b:10:41:56:93:6f:
98:92:52:c8:47:e2:45:7e:13:bc:06:01:c5:bf:46:30:7b:fb:
7d:70:69:4d:d1:60:4a:cd:19:df:a3:a8:cc:fd:88:76:74:5f:
c8:b1:e5:24:80:57:1f:c6:a9:01:b7:7a:35:ac:9b:1d:44:6c:
cf:c7:1a:ed:51:1d:a4:fc:65:b1:c0:59:c9:f1:26:8e:41:10:
a4:86:0f:fb:07:f6:3b:78:42:d2:e1:a9:a3:05:06:56:63:b5:
6c:f9:7c:df:54:2a:1b:b7:76:f9:36:40:5f:36:77:70:18:5e:
e1:ec:ff:02:d9:f6:35:91:21:7c:53:89:16:05:a7:47:41:d0:
35:c3:14:71:f9:28:f0:22:be:3c:27:7a:15:2e:ef:c6:87:a4:
34:4a:00:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:14 2026 by rpki-client