Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
File: tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft (raw, json)
Hash identifier: o1eZWKaVUqbXkrRForQqmOqU9O5/3+ak2OE0OerQ5Vk=
Subject key identifier: CB:59:2E:3B:86:CA:8D:D8:2A:B7:B8:F3:B3:D6:A8:62:25:E4:55:D6
Authority key identifier: B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
Certificate issuer: /CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Certificate serial: 019D27E0182D0640A8D27F85AAB1B5D6EB0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 02:01:30 +0000
Manifest this update: Thu 26 Mar 2026 02:01:30 +0000
Manifest next update: Fri 27 Mar 2026 02:01:30 +0000
Files and hashes: 1: jl1Gy7ca20_j2KWNsOiG_HyzyKw.roa (hash: ErKY/69zjGb+XdFCBodBK2CXOv9JRDcTgwXpmXZI5JY=)
2: tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl (hash: 5nAWaUdgMA0fS90HTfAZ4pXHuhD2s7PoEjvtbwiCmvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:18:2d:06:40:a8:d2:7f:85:aa:b1:b5:d6:eb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Validity
Not Before: Mar 26 02:01:30 2026 GMT
Not After : Mar 27 02:01:30 2026 GMT
Subject: CN=cb592e3b86ca8dd82ab7b8f3b3d6a86225e455d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:12:2e:14:13:69:6c:1f:aa:65:b4:f4:4d:56:
ab:a8:35:36:09:17:33:52:48:98:53:31:4e:24:dc:
30:3f:54:19:3d:73:e6:19:77:d7:77:05:76:2d:fb:
de:74:65:49:24:b7:e6:7d:09:ba:7b:86:34:81:04:
9a:de:0b:99:ce:51:80:71:1f:48:3e:0a:25:e8:66:
e7:60:24:9b:aa:5c:a0:14:ed:44:22:17:2c:99:bb:
37:08:60:ac:39:af:4d:47:ea:ba:f3:4f:53:9d:fe:
1a:7e:a8:bb:2d:c4:93:b7:56:c4:31:fb:d7:09:a2:
47:fc:aa:72:a7:76:8f:b0:b8:92:08:61:91:65:0a:
d4:48:fe:c2:e6:83:7b:5b:40:14:8a:fd:b8:ba:33:
59:4f:92:41:7c:de:0a:17:43:87:a2:11:77:fd:54:
60:b9:0c:bc:00:cf:f6:40:7c:8f:b6:b5:72:10:db:
e5:56:b2:5f:c1:88:5e:0e:b2:4d:2e:37:05:46:f0:
11:f7:29:0c:6a:c4:68:c2:8c:50:af:3b:ca:d8:25:
f4:f8:71:1f:56:b2:07:ec:5c:3a:1c:65:d6:61:74:
88:71:91:5f:fb:91:1d:50:42:1c:a2:fb:e9:d2:fd:
8a:e2:5e:3a:02:f1:47:b5:ba:39:28:46:78:45:01:
ce:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:59:2E:3B:86:CA:8D:D8:2A:B7:B8:F3:B3:D6:A8:62:25:E4:55:D6
X509v3 Authority Key Identifier:
keyid:B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:65:47:56:5d:0b:62:11:8f:5a:23:9b:08:aa:84:c3:a5:5e:
13:9c:cc:1c:97:69:9f:b7:60:ed:0e:69:cb:f0:73:26:2b:c3:
d0:1b:0f:cf:b0:07:14:4b:21:d3:60:ea:a1:61:74:d1:60:ea:
fd:b9:ec:cf:1c:87:58:02:28:d3:9c:66:6e:11:58:45:0a:bf:
e1:c1:37:42:4a:71:98:86:07:db:cd:58:7f:25:63:f4:1d:27:
4d:99:75:65:e8:a4:37:48:9a:2f:0d:64:6e:e5:ea:31:0b:40:
70:ba:96:f6:66:71:48:9f:d2:02:f0:e9:3e:00:ff:c2:32:aa:
f7:3c:0e:1e:92:fb:c6:a2:36:3f:ee:c9:ef:56:91:8f:dd:d2:
32:b8:d9:9b:28:bc:0d:7b:e0:f9:91:bc:f4:8e:a6:30:4d:fa:
99:71:0e:51:e0:72:61:64:c3:e8:5d:7a:c6:c4:ce:ed:0f:85:
21:0d:a1:d3:cd:d8:d6:30:8f:6e:b9:07:2d:d1:ff:82:5b:00:
ab:3b:75:fc:03:23:1e:a3:ec:ee:37:cf:d2:f6:a9:15:64:5a:
e5:51:18:94:55:e5:f2:af:1e:42:17:83:05:78:81:d6:45:1e:
8b:9a:42:dd:37:ba:eb:0c:9e:fe:af:bf:1a:19:91:4f:72:15:
7b:3b:ae:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:23 2026 by rpki-client