Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/599e76-0180-4022-afb9-fb1722974d03/1/TzmENXhbUGdc8ug2sUTtOEyGz50.mft
File: TzmENXhbUGdc8ug2sUTtOEyGz50.mft (raw, json)
Hash identifier: L1Nmbf5uv72cJgvFMEjNSxeGYCQ/ThXrY2bKVyZUWxc=
Subject key identifier: 45:76:E7:4A:D7:13:34:2F:BC:98:99:A0:F3:71:2A:29:E7:46:F0:31
Authority key identifier: 4F:39:84:35:78:5B:50:67:5C:F2:E8:36:B1:44:ED:38:4C:86:CF:9D
Certificate issuer: /CN=4f398435785b50675cf2e836b144ed384c86cf9d
Certificate serial: 019D2C609DECD68B3B80955F4950FDA960BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzmENXhbUGdc8ug2sUTtOEyGz50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/599e76-0180-4022-afb9-fb1722974d03/1/TzmENXhbUGdc8ug2sUTtOEyGz50.mft
Manifest number: 28
Signing time: Thu 26 Mar 2026 23:00:22 +0000
Manifest this update: Thu 26 Mar 2026 23:00:22 +0000
Manifest next update: Fri 27 Mar 2026 23:00:22 +0000
Files and hashes: 1: TzmENXhbUGdc8ug2sUTtOEyGz50.crl (hash: nmMzH2c4nUOabq1ZYha/P563Q3h+T5fgnBJPqM+XgaQ=)
2: pHEIZFspQTjsjYLm3Qx_BC5u-70.roa (hash: k1BBayDiKn0+v/pWcw45P5PZb9zXUPIRn4LGVR+EvUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/599e76-0180-4022-afb9-fb1722974d03/1/TzmENXhbUGdc8ug2sUTtOEyGz50.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/599e76-0180-4022-afb9-fb1722974d03/1/TzmENXhbUGdc8ug2sUTtOEyGz50.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzmENXhbUGdc8ug2sUTtOEyGz50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:60:9d:ec:d6:8b:3b:80:95:5f:49:50:fd:a9:60:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f398435785b50675cf2e836b144ed384c86cf9d
Validity
Not Before: Mar 26 23:00:22 2026 GMT
Not After : Mar 27 23:00:22 2026 GMT
Subject: CN=4576e74ad713342fbc9899a0f3712a29e746f031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:52:88:50:11:6a:17:0a:3a:78:80:d6:91:f0:
3c:cc:7d:ec:12:bf:e0:70:8d:22:5a:01:93:0a:0f:
ca:d6:da:26:40:70:0f:31:46:60:44:49:d1:bd:58:
65:3f:54:f3:ce:ea:55:77:dd:4b:e1:f5:f3:2b:f8:
58:bf:82:53:e5:31:c2:c0:bd:38:98:c1:4b:18:86:
c0:5d:82:cb:c7:1d:80:82:ce:70:79:eb:31:bd:53:
b0:e6:8f:91:e3:5b:09:60:1c:10:0e:09:f0:c6:70:
f0:96:ef:ae:0e:ba:60:e7:c9:8c:d2:1a:73:ff:e9:
33:c5:db:1c:c2:51:cb:39:6f:73:7d:87:4c:59:15:
77:7e:61:f5:d1:fa:0e:6c:f5:39:bd:55:3a:57:4e:
58:84:66:6a:ef:73:a9:d9:2e:f7:c5:4f:03:68:f9:
8a:dc:bc:f3:71:02:eb:98:f8:ef:e9:37:08:d5:e7:
7a:50:c0:8b:bc:b5:bb:e7:2e:4a:3a:b2:ff:ee:58:
f0:a7:9a:28:cb:9c:b9:ef:b4:ce:a0:f8:8d:e7:67:
01:94:52:86:14:04:8b:2b:ac:ea:2a:ec:e7:ad:2e:
09:10:3a:62:bb:77:c5:8e:20:81:bd:7a:1f:e3:64:
a4:3a:2c:b8:41:bf:a8:c5:7c:ff:25:cb:44:f8:9b:
97:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:76:E7:4A:D7:13:34:2F:BC:98:99:A0:F3:71:2A:29:E7:46:F0:31
X509v3 Authority Key Identifier:
keyid:4F:39:84:35:78:5B:50:67:5C:F2:E8:36:B1:44:ED:38:4C:86:CF:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzmENXhbUGdc8ug2sUTtOEyGz50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/599e76-0180-4022-afb9-fb1722974d03/1/TzmENXhbUGdc8ug2sUTtOEyGz50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/599e76-0180-4022-afb9-fb1722974d03/1/TzmENXhbUGdc8ug2sUTtOEyGz50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b1:f1:d3:96:98:61:6d:15:0b:05:a5:6f:ab:20:d5:cf:7f:
54:6b:77:b9:3e:48:bc:93:8f:06:32:e2:f7:9e:3c:c5:30:2b:
38:0f:00:51:a7:04:4d:dc:14:1d:5c:6d:ca:32:40:31:94:28:
4d:d6:d2:e6:78:b0:30:8f:96:97:c7:4d:b6:e1:59:4c:c4:c3:
99:24:14:b2:97:98:7e:74:a7:43:15:76:6a:ef:3a:e4:4f:f0:
d2:f7:7b:c7:a9:cd:d9:8d:00:1b:b2:74:6a:ed:a7:02:7e:2c:
e5:bd:3f:d0:a6:e4:4c:b2:4b:4b:48:fa:89:8a:96:24:83:32:
01:c0:95:27:c8:f5:b0:33:21:f7:77:66:57:94:3a:c0:73:23:
51:13:4b:80:a3:83:c3:fc:5f:cc:03:c4:be:42:3c:65:8b:29:
05:a9:79:5b:f7:2f:0d:32:c1:f6:3a:f8:d3:89:bb:45:de:a8:
6b:5a:f4:81:9a:c7:2c:4d:81:a7:29:94:c0:43:0f:54:62:f3:
8e:fe:f1:cb:f1:9d:6c:4d:fc:bd:75:b2:90:0d:45:89:be:7b:
d2:6d:dd:b9:0f:e8:e5:03:28:1e:b3:a9:af:24:42:59:a0:4d:
7f:8d:d6:a4:d4:76:00:f9:b7:bf:69:9f:ef:15:d3:48:a8:ba:
5c:a2:f1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:02:59 2026 by rpki-client