Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft
File: TLbePNkQ87_3_4Xe1FLEMbHopSA.mft (raw, json)
Hash identifier: Itktq0mOZGgxmVP38cAE+VHVdp/j0UHdX5m5z7DIF60=
Subject key identifier: C7:CF:E5:98:24:9F:58:B6:6E:89:FD:D6:BF:3F:3F:D6:2D:8D:32:67
Authority key identifier: 4C:B6:DE:3C:D9:10:F3:BF:F7:FF:85:DE:D4:52:C4:31:B1:E8:A5:20
Certificate issuer: /CN=4cb6de3cd910f3bff7ff85ded452c431b1e8a520
Certificate serial: 019D2704DB379C2D9BF2D248818B51F1064C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 22:02:02 +0000
Manifest this update: Wed 25 Mar 2026 22:02:02 +0000
Manifest next update: Thu 26 Mar 2026 22:02:02 +0000
Files and hashes: 1: 3s9WMYEcQ2eeR7WmEF0cPyYnnoc.roa (hash: I5I/yKJ6+N12F+Oii5+qZSRYetGEm6Nazf/isv9EOH0=)
2: TLbePNkQ87_3_4Xe1FLEMbHopSA.crl (hash: CThhO6RLyli+XupVdURkLLkYGach+EBFL1NpeNv68gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:db:37:9c:2d:9b:f2:d2:48:81:8b:51:f1:06:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb6de3cd910f3bff7ff85ded452c431b1e8a520
Validity
Not Before: Mar 25 22:02:02 2026 GMT
Not After : Mar 26 22:02:02 2026 GMT
Subject: CN=c7cfe598249f58b66e89fdd6bf3f3fd62d8d3267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:46:77:6a:37:ae:b4:26:44:2e:0f:a9:4c:aa:
07:d2:b7:48:1e:fe:1e:63:d5:dc:4c:ae:60:06:f8:
bb:0d:dc:2d:73:22:42:50:5d:c3:cc:70:02:e4:e1:
7d:58:16:e8:ff:6e:22:de:d3:9f:43:a2:c7:dc:70:
c1:02:63:09:12:94:ff:1f:ea:5c:5d:cd:6e:9a:63:
55:7e:35:b5:8f:9c:97:95:2f:e2:ed:f5:b1:b9:2a:
84:eb:36:10:dc:25:3a:c0:ae:48:42:5c:79:fc:43:
36:3d:36:d8:2b:10:51:21:23:e5:c2:51:7d:dc:60:
f8:42:03:5d:98:ca:89:5a:db:a4:6d:d4:04:18:b6:
f1:57:d5:fe:90:e9:b1:63:e1:0d:74:cb:fa:1a:2d:
d6:8b:15:40:e3:62:6e:8a:cf:aa:3e:62:46:d9:c7:
dc:bc:54:64:0d:dc:1e:d7:c0:ed:77:04:75:0a:52:
a0:99:b8:d7:af:8c:8c:c4:9b:34:e0:8e:45:b1:d7:
2b:49:c2:c3:ac:28:04:d8:1e:a3:81:37:fd:f7:08:
3a:27:7b:13:53:cc:da:3c:33:c0:a1:ca:41:cb:d0:
82:d7:88:36:47:f1:31:b2:a7:04:71:6c:a1:43:cd:
5a:1c:18:7a:5c:74:b6:d2:8e:fa:b3:87:b9:15:b9:
89:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CF:E5:98:24:9F:58:B6:6E:89:FD:D6:BF:3F:3F:D6:2D:8D:32:67
X509v3 Authority Key Identifier:
keyid:4C:B6:DE:3C:D9:10:F3:BF:F7:FF:85:DE:D4:52:C4:31:B1:E8:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:28:ed:a4:e0:4f:20:66:4e:02:02:7e:be:88:82:f0:02:89:
f4:52:14:ce:18:9c:8a:ef:d8:8c:39:e9:2b:d4:42:4f:ad:3f:
46:7f:b2:89:60:a5:7c:a4:ba:e1:96:30:a0:40:c2:66:dd:7e:
86:cb:56:af:88:31:aa:69:b2:85:c9:d8:60:00:58:eb:4c:86:
d1:a4:33:d1:f9:96:bf:b9:9d:51:f7:b7:cf:ab:41:ac:fc:dd:
e2:a9:4a:2d:c7:a1:ff:4c:71:a4:c0:87:72:fc:62:28:cc:7d:
c9:10:2a:f9:f6:ae:bc:bb:4b:49:79:f0:60:09:24:21:9f:19:
16:1d:6b:f0:a1:56:57:3e:04:c3:62:2c:86:6d:7c:22:6a:4f:
7f:28:5c:39:e8:c0:9a:f8:71:34:2a:11:52:a2:75:d1:99:b9:
83:68:46:54:31:db:82:aa:2d:78:97:8d:12:8b:41:cf:32:1d:
f4:d9:b3:fc:a6:ef:45:af:bd:41:5c:30:f6:7b:5b:06:86:52:
d2:4a:01:82:ae:17:5c:f1:3e:35:2e:9e:76:76:ca:88:27:dc:
00:35:b5:17:6b:67:c2:7a:cd:ec:78:78:33:aa:6c:82:5c:2e:
6a:73:b2:93:80:62:26:e2:03:b0:49:09:58:1b:8d:ae:51:dc:
e7:1d:db:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:44:23 2026 by rpki-client