Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json)
Hash identifier: po/26ZFrdtVt6KYoEcLGektteq7ET+o5dBblStUU8Gk=
Subject key identifier: 3F:0A:82:07:A4:D1:98:AF:36:D3:DC:C2:4D:B4:6D:59:B0:FB:B2:A4
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 019D2A3B3DFBCF2B156D1B01D7DDE42A498F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
Manifest number: 119D
Signing time: Thu 26 Mar 2026 13:00:18 +0000
Manifest this update: Thu 26 Mar 2026 13:00:18 +0000
Manifest next update: Fri 27 Mar 2026 13:00:18 +0000
Files and hashes: 1: WMqwkkOCeJIiDGczokQt6OKgfpo.roa (hash: 6yCQ2yXVHO2BxnZqJR1Rvu8adOAClmHZ2J60vDEAoZw=)
2: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: 6XE40UyIghOTYmMqlLsp7GA4Jk7iLURA5EIaWVmFlaw=)
3: ydyTTB3FHmlgmrUF4u_cEkdDzws.roa (hash: sm5RJb+IplkwipOY1e61+aLvM0eV38hivV05zuDbU50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:3d:fb:cf:2b:15:6d:1b:01:d7:dd:e4:2a:49:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Mar 26 13:00:18 2026 GMT
Not After : Mar 27 13:00:18 2026 GMT
Subject: CN=3f0a8207a4d198af36d3dcc24db46d59b0fbb2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:25:55:4d:8b:09:be:e0:b6:1b:fb:12:63:65:
aa:b0:cd:76:2b:97:e9:9b:e7:6f:c6:42:17:c9:61:
26:df:d5:0c:ef:ca:6a:0a:27:ef:15:3f:8c:d7:09:
8c:6f:03:74:d7:bf:e9:bd:27:8d:4c:95:61:cc:9e:
5f:63:a0:6b:fa:58:3a:b4:0b:fa:32:e8:39:d9:21:
87:d4:40:9a:04:fe:ff:b1:35:79:59:33:a3:fa:7e:
2f:8c:67:c5:ad:ff:21:8b:fe:50:33:d3:ce:bd:c0:
29:39:7a:a3:af:61:80:81:2e:60:16:a1:ad:d3:55:
73:1d:77:ff:2b:7a:fc:b9:18:32:69:e8:cf:fa:e9:
b8:cd:3e:1f:fe:d6:9a:38:28:fa:02:a8:12:2b:62:
7c:c0:9f:77:1e:9b:f8:ab:95:1a:b5:41:75:22:ca:
93:af:92:9c:37:5d:7b:3b:b2:85:82:0e:ab:f1:e2:
6d:2a:61:aa:ec:3a:92:de:3c:05:d5:5d:de:c0:85:
dc:48:f7:6e:d6:02:75:e1:e2:5b:af:92:95:90:db:
2a:35:54:c5:36:6f:e2:1c:0b:24:e3:e5:88:ea:08:
2c:19:fc:d8:32:b8:a1:3b:ce:4b:fe:f7:82:29:86:
d9:c3:9f:e7:62:96:66:73:32:8a:ff:c1:9c:6b:2b:
21:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0A:82:07:A4:D1:98:AF:36:D3:DC:C2:4D:B4:6D:59:B0:FB:B2:A4
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:bd:81:8d:ba:ed:31:46:97:45:86:80:3d:29:f5:65:8b:28:
6d:f2:6b:09:46:f5:8a:37:44:86:30:89:13:43:6c:f9:73:91:
12:86:28:a0:8d:03:8c:9d:d0:76:20:d2:95:32:a0:f4:d0:84:
e5:db:79:ca:7b:b7:03:3d:39:5b:83:68:4c:2a:0c:73:51:40:
a6:49:aa:71:89:d1:6d:9f:4a:ba:29:25:31:a8:8c:15:ac:42:
a0:b5:c9:23:21:99:aa:af:d2:44:67:f8:3e:8a:08:ec:23:63:
99:d7:c3:5c:ac:08:8a:0c:31:f6:58:58:2a:22:d5:cf:79:1c:
c4:50:81:8a:6e:5e:b4:bd:2a:5d:95:3b:b4:40:78:0e:19:5e:
62:e6:d0:50:65:f4:ed:ef:d0:ab:ac:c5:46:7f:3f:67:c3:20:
21:0b:db:aa:3d:76:30:6c:60:e4:3c:4e:a8:c4:d5:5b:5c:a0:
4a:e4:df:a8:d1:93:73:80:f6:ec:ed:17:53:25:53:fd:98:5b:
f3:a9:fe:b7:47:72:b4:48:d5:f2:1d:72:87:c8:01:4f:0a:e9:
f9:a8:b4:b1:c7:6f:94:3c:c6:84:02:a3:e3:54:1e:8c:14:9f:
6c:7e:43:21:cb:8d:1f:ea:cf:b5:24:fa:fc:4d:c2:b0:37:1d:
33:32:98:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:04 2026 by rpki-client