Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft
File: TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft (raw, json)
Hash identifier: nOD+/Wwv/g+qgOly2U4aYAJxc03P7HRoSN9TiUxV7OI=
Subject key identifier: 68:1E:5D:E6:9B:D3:C9:8D:55:78:CC:F0:54:24:02:32:BD:73:F5:41
Authority key identifier: 4E:78:56:D2:95:58:09:36:91:6A:55:3F:B9:BF:B5:9F:3A:17:68:04
Certificate issuer: /CN=4e7856d295580936916a553fb9bfb59f3a176804
Certificate serial: 019D26CCC3B6AE6F9B790158FB38AE0F1FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft
Manifest number: 032D
Signing time: Wed 25 Mar 2026 21:00:46 +0000
Manifest this update: Wed 25 Mar 2026 21:00:46 +0000
Manifest next update: Thu 26 Mar 2026 21:00:46 +0000
Files and hashes: 1: Ns32wREZDoYfJNViYzKanjGGcVY.roa (hash: ocFxy8ShgvilXSa3rSwC0D5vcssnTH48yUdQOR/8oDQ=)
2: TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl (hash: O/k9kjsija1gmJJ9aLWFFc5JK4VzVRrSX5WOi//HTVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c3:b6:ae:6f:9b:79:01:58:fb:38:ae:0f:1f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7856d295580936916a553fb9bfb59f3a176804
Validity
Not Before: Mar 25 21:00:46 2026 GMT
Not After : Mar 26 21:00:46 2026 GMT
Subject: CN=681e5de69bd3c98d5578ccf054240232bd73f541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:25:1f:5f:02:75:e2:37:13:b8:e4:96:61:5c:
0a:96:ea:01:ed:18:ed:d9:62:49:34:cb:6e:6d:12:
b3:cc:a0:35:d8:63:5e:c7:6e:dd:55:03:7a:75:21:
8c:8b:db:6c:61:45:2b:ae:d0:2f:75:a7:7d:75:64:
f0:ca:73:a3:66:0e:9c:eb:4c:90:29:57:18:87:7a:
7e:e7:d3:27:81:0e:f5:2f:80:88:8c:4b:7b:f6:5a:
8d:48:c9:79:ff:fa:28:d5:1c:f8:23:91:10:da:2f:
da:d0:3a:49:ec:76:8e:ec:24:02:40:c9:87:73:48:
07:d1:90:1e:6d:1d:c9:ba:dc:75:70:fd:8b:9c:a6:
a4:53:c6:f0:94:16:61:52:8d:f1:bd:44:d6:9a:ff:
49:ba:1c:1d:4c:23:06:11:be:76:09:f3:9b:90:0c:
31:09:62:ee:ff:2d:7c:7f:28:47:97:6a:4c:92:03:
e1:fc:c8:91:52:db:46:fc:09:3d:70:45:86:cd:d6:
92:39:f6:f5:32:58:63:87:66:a9:0b:8c:55:f5:da:
1d:05:9b:54:57:f4:a8:82:97:0b:76:88:48:61:9f:
20:ab:fc:fb:c4:d8:8a:b8:89:1f:53:74:19:68:25:
19:ee:84:09:64:18:26:0d:5f:f5:ce:e8:10:d9:b6:
f9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1E:5D:E6:9B:D3:C9:8D:55:78:CC:F0:54:24:02:32:BD:73:F5:41
X509v3 Authority Key Identifier:
keyid:4E:78:56:D2:95:58:09:36:91:6A:55:3F:B9:BF:B5:9F:3A:17:68:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:53:4b:81:d5:38:15:ac:8f:01:f5:b7:14:73:4e:8e:c3:4c:
f2:0f:e2:21:e2:a6:b0:a6:18:b8:9b:8c:37:e4:de:2f:84:08:
4a:fb:07:3b:2d:07:28:e5:c4:7d:09:9b:67:6d:b3:49:b2:a8:
a2:58:24:47:1c:b4:95:b4:18:e6:c0:e2:e9:2a:cf:33:56:57:
11:2e:9c:5d:68:71:44:15:84:9d:f5:dd:a6:93:68:7c:07:bc:
f2:d4:82:f8:6f:d6:c1:15:f6:fe:73:49:5f:52:ff:9c:70:0f:
77:bb:c2:27:bb:72:bd:e6:fa:5d:75:66:0a:d3:b7:ac:25:da:
a5:b7:22:9c:e0:7d:f2:c2:bd:84:42:f8:fd:8e:0c:68:7f:d8:
cc:e9:5e:eb:fc:d2:93:23:f1:10:f7:e7:46:f2:96:ad:9a:40:
57:78:75:90:50:1f:2d:02:49:5b:b5:4c:51:1c:ec:09:dc:93:
f1:46:a8:3e:35:9a:8d:78:bb:0e:3f:0e:ca:e7:67:bd:44:57:
cc:97:d7:1c:56:8d:56:e1:ae:73:eb:33:31:d0:8b:ed:9c:27:
51:be:ea:5f:44:09:bc:59:be:51:18:a1:28:82:4c:11:18:2a:
22:19:29:8e:8d:18:fc:23:a5:a4:87:0d:46:1d:2f:e0:fc:3e:
9e:4c:d2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:12:38 2026 by rpki-client