Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
File: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft (raw, json)
Hash identifier: Ca2cR3ZClvn1ipNx0TjOaqGir2PkiFyH4IMbEf4I8I4=
Subject key identifier: 4C:20:33:ED:39:D3:32:BC:27:99:93:63:90:D9:FD:80:20:63:45:8A
Authority key identifier: B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
Certificate issuer: /CN=b48184549e12e9934bffb7615bca3d0c25681360
Certificate serial: 019D28168E67982C367E0E94733B5297378A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:00:59 +0000
Manifest this update: Thu 26 Mar 2026 03:00:59 +0000
Manifest next update: Fri 27 Mar 2026 03:00:59 +0000
Files and hashes: 1: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl (hash: bDNnL60x/qSHCjzNxh05tzD9AcLNP/mqn3C10o/s1nE=)
2: tuDCv4lvmfDzJRQ3OOYakiJXpLk.roa (hash: B9WwSI4TdVDoQmekvK0lWtI32JXbnkCFS/fzwW4JyBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:8e:67:98:2c:36:7e:0e:94:73:3b:52:97:37:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48184549e12e9934bffb7615bca3d0c25681360
Validity
Not Before: Mar 26 03:00:59 2026 GMT
Not After : Mar 27 03:00:59 2026 GMT
Subject: CN=4c2033ed39d332bc2799936390d9fd802063458a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:b2:b5:ac:ed:56:10:61:c0:ea:b7:4f:7f:
17:68:a4:a7:be:c3:dc:d5:0f:34:98:81:35:a6:8a:
91:a3:c5:d9:7d:59:57:89:24:77:65:7a:99:2d:a0:
a0:a1:d0:59:79:f0:1b:be:7e:15:d9:0b:8b:f6:f7:
13:63:e0:96:af:79:f4:17:1f:7c:c2:0b:70:03:27:
bc:da:16:09:94:c9:31:e2:a5:6f:ba:89:e2:ef:51:
de:76:95:38:c1:4d:87:c5:50:19:0a:cc:bf:e6:7a:
13:f0:f5:3b:2e:c7:83:d7:cb:63:b4:eb:b6:ba:38:
12:aa:7c:55:18:58:64:95:bb:73:76:9f:d1:16:5a:
f7:65:8c:9c:2c:a6:7a:4b:d9:f4:14:09:87:29:3c:
89:1c:84:5d:65:63:67:b3:da:22:3a:cd:5f:4a:48:
de:23:b9:d1:34:77:b2:93:c0:d6:dd:42:0d:10:8f:
6d:a0:69:47:39:ab:fa:1a:18:da:9a:b8:4e:a3:17:
f4:bd:60:6f:c4:b7:07:7d:d0:36:ec:13:a7:86:75:
56:78:bd:74:6e:2d:c8:93:a0:fa:f5:a9:82:65:09:
f2:96:02:4a:65:b8:c1:dc:ce:d8:42:6a:f4:15:b0:
02:99:4b:12:0d:a5:a4:9b:c7:4a:84:2d:dc:f6:f0:
60:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:20:33:ED:39:D3:32:BC:27:99:93:63:90:D9:FD:80:20:63:45:8A
X509v3 Authority Key Identifier:
keyid:B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:05:60:f2:8f:ce:43:af:ba:e7:b9:a7:73:85:0d:33:2c:b5:
40:d9:c5:51:aa:39:41:51:ce:ff:6e:a5:66:6b:f9:3f:07:f7:
22:52:9b:c1:07:da:99:d6:b1:a0:7d:72:68:58:ba:73:20:5c:
01:93:22:06:15:ec:0e:80:96:70:0f:38:e3:ce:55:ee:0c:dd:
d9:ad:87:57:30:6b:d0:ce:da:24:b6:01:61:55:77:d0:c6:fc:
9b:07:eb:d5:06:77:4a:6a:2b:92:82:db:01:95:33:40:2d:ba:
c5:55:8c:a9:62:b5:94:7e:23:f2:eb:32:7b:97:b7:8f:03:aa:
10:1b:04:b8:e5:0c:40:fc:17:b1:94:79:b6:f2:7a:b9:a7:5a:
45:df:58:30:dc:66:e9:bb:89:00:08:b2:37:61:d7:c1:12:2a:
97:70:db:fb:cf:63:3f:a7:39:bd:e4:6c:74:06:09:a8:1d:5c:
6e:dd:ad:72:5d:8c:6e:38:5c:16:0f:f0:28:ba:13:e4:33:db:
6e:c8:66:41:52:c0:12:00:59:95:e1:b1:20:04:f6:a6:8f:c2:
12:cd:62:be:c3:55:c6:b0:fe:f0:76:c5:11:bb:7e:e9:37:d1:
89:16:3f:93:22:df:10:e4:41:75:d7:a4:6a:a4:4d:7a:ec:ec:
48:a2:2e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:40:31 2026 by rpki-client