Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
File: TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft (raw, json)
Hash identifier: oqkUJF2iadM1dNWyAFZ7v+57G2a58h7rjkyIsfuzVOI=
Subject key identifier: 74:E9:4D:07:B0:B0:0F:B9:67:BD:BC:26:2C:FD:46:00:77:1F:4E:82
Authority key identifier: 4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
Certificate issuer: /CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Certificate serial: 019D322C154205708A48691B243050AEEA48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
Manifest number: 1441
Signing time: Sat 28 Mar 2026 02:00:42 +0000
Manifest this update: Sat 28 Mar 2026 02:00:42 +0000
Manifest next update: Sun 29 Mar 2026 02:00:42 +0000
Files and hashes: 1: HMo_pRRnRqJZqr644LvLDKbEvF0.roa (hash: iH4M3snvNj6PFU+GFjuRkofzdO0jGEo8rVExACKxHtk=)
2: TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl (hash: 9nDpmMMUjtAVBhJp9ShuIMuNU6tdVpgOsS3FAZ4vYCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:15:42:05:70:8a:48:69:1b:24:30:50:ae:ea:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Validity
Not Before: Mar 28 02:00:42 2026 GMT
Not After : Mar 29 02:00:42 2026 GMT
Subject: CN=74e94d07b0b00fb967bdbc262cfd4600771f4e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:cf:30:55:8a:1b:81:d3:ae:b0:7c:4b:71:
3b:bd:af:57:4b:02:3a:8e:99:61:91:11:83:34:c9:
27:e8:72:6e:dd:81:e2:cd:78:45:b6:9c:17:62:75:
ec:a5:76:e4:8a:c9:f6:bf:6d:f8:27:d5:77:37:03:
34:b2:4c:7a:0d:b2:34:c4:22:06:02:dd:3d:76:1c:
f7:04:5a:4d:26:93:9a:91:a9:bc:f4:f0:93:df:07:
e2:04:d3:fc:1f:69:6c:51:97:2f:a2:89:16:87:ce:
43:23:48:af:85:33:af:9b:47:ff:fe:41:de:9b:f0:
f9:28:39:6c:29:4b:54:30:7c:5d:7f:ba:71:ac:8a:
10:60:84:7d:bd:d0:66:d5:bf:45:4d:ff:d7:68:0e:
0c:53:ea:1b:55:d7:70:2a:96:5c:f4:9d:95:3a:c9:
4d:03:20:46:d1:db:a9:40:62:68:58:2c:5c:2d:88:
ff:eb:cc:6d:0e:38:9e:c2:2a:38:ee:ad:36:b8:2a:
d8:22:0f:65:7a:9d:51:4b:d4:79:9d:64:25:05:6c:
15:a6:7c:2d:05:55:7a:ce:0a:85:da:34:fa:76:ed:
31:61:72:f5:5a:85:e1:04:40:cd:af:1b:cf:45:c4:
d7:dd:ad:26:dc:93:ad:66:3a:08:57:25:0b:be:fb:
1a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E9:4D:07:B0:B0:0F:B9:67:BD:BC:26:2C:FD:46:00:77:1F:4E:82
X509v3 Authority Key Identifier:
keyid:4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:07:22:46:db:51:89:87:a5:08:64:ab:d4:60:22:11:c8:b5:
32:e3:cc:9e:1d:a3:78:09:f8:a2:ad:71:c8:a7:64:37:a2:2d:
ce:7b:2e:88:4f:54:c7:14:cc:db:07:85:72:e4:ba:61:af:c6:
11:3b:51:30:74:37:09:89:21:3c:70:6d:86:4f:f0:a7:c8:c0:
24:21:f0:cd:25:92:7a:82:e9:0a:35:a1:af:0e:17:4d:20:75:
c5:1f:9d:82:3c:d4:81:88:d6:09:67:1c:c2:b2:17:f4:02:80:
93:83:70:0b:f9:82:82:20:1a:9e:e7:50:d8:21:01:05:ab:1c:
f5:8c:32:c6:f2:06:4a:38:f2:c8:6d:f1:a4:1e:90:a6:58:46:
b0:62:bd:d2:00:ae:4b:b1:1f:1d:54:67:ca:3c:45:74:82:de:
16:66:d0:27:a8:7e:6e:e4:a9:9c:2b:c8:3c:4a:28:71:8b:cb:
62:39:45:66:dc:fe:49:a7:5d:b8:3c:64:c7:23:02:13:dd:4d:
36:ba:ee:ee:01:48:5d:58:45:51:41:f1:ab:93:13:83:18:a6:
d0:04:98:7a:03:a3:98:5e:b3:f3:c2:53:2f:e8:b6:67:66:28:
74:b0:1a:f2:de:95:96:b9:4e:8c:dc:c7:68:5b:89:21:2d:42:
9b:37:a5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:06 2026 by rpki-client