Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
File: TOmGBryaXUQHT_jL7cvbz8NfBWI.mft (raw, json)
Hash identifier: L1gR3nRak7Th1y7wWjhxFQmnOOhQ0dBjf6eSb7qboUw=
Subject key identifier: 92:CD:D1:B2:F6:CE:02:D7:41:5C:00:8E:DB:14:D2:B3:BE:21:68:20
Authority key identifier: 4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
Certificate issuer: /CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Certificate serial: 019D2696105B90C5AC8809B3BE4C5BA5499B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 20:01:01 +0000
Manifest this update: Wed 25 Mar 2026 20:01:01 +0000
Manifest next update: Thu 26 Mar 2026 20:01:01 +0000
Files and hashes: 1: C5Z-09c-UNKANhS9Y8455wChPaI.roa (hash: kwkm/1oRmvGWA+6dVE+pHfwpAhyhTdzdAoLVyPCKLrg=)
2: TOmGBryaXUQHT_jL7cvbz8NfBWI.crl (hash: WwsSWiM+U3fMI67tc7S16bP9ndjn5hhpLN5X/j6L34g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:10:5b:90:c5:ac:88:09:b3:be:4c:5b:a5:49:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Validity
Not Before: Mar 25 20:01:01 2026 GMT
Not After : Mar 26 20:01:01 2026 GMT
Subject: CN=92cdd1b2f6ce02d7415c008edb14d2b3be216820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:9e:81:c8:7c:8d:05:08:89:6e:bb:aa:51:
79:2f:c9:25:51:bb:d3:a4:bc:2d:f2:a7:b6:fb:17:
c9:9f:6a:9a:85:1b:20:b0:47:83:7b:44:77:71:c6:
5c:5b:95:88:e0:ba:5d:b1:82:19:c8:df:37:4a:32:
e8:28:19:7b:04:9a:8c:39:db:82:5c:9e:bd:27:92:
d4:f0:7a:7c:d2:09:af:b9:fa:a0:16:d7:a9:20:cd:
6f:9f:30:cc:c6:44:18:ac:66:15:20:01:8c:09:58:
7e:93:ab:ff:8e:90:7c:8f:7c:25:ca:dc:1a:e7:8e:
ca:c4:9e:9a:5d:a4:93:d9:81:21:6e:a4:f3:c7:16:
30:ee:07:53:92:a3:40:1c:c1:9e:15:10:bf:a2:94:
b3:83:74:c8:2f:29:c1:96:98:0e:c0:a3:8b:1b:10:
36:80:6b:e1:d5:b0:1e:b9:8b:1f:ee:28:27:2a:72:
3a:68:5a:a8:ec:86:f8:ec:43:e5:18:71:3e:7b:47:
71:cd:85:13:2d:ce:02:84:b5:5b:26:bd:b4:1a:e3:
14:c3:00:74:b9:79:1f:88:e0:43:8a:4d:8e:8a:e3:
4d:b3:0d:e7:90:39:6f:2e:a3:c0:5f:37:43:f7:20:
09:35:f7:60:67:ee:c3:76:c8:99:e9:cf:e5:0b:7e:
aa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CD:D1:B2:F6:CE:02:D7:41:5C:00:8E:DB:14:D2:B3:BE:21:68:20
X509v3 Authority Key Identifier:
keyid:4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2b:ed:92:10:06:e9:be:76:eb:c7:5e:3b:94:f1:b3:34:cb:
e5:70:52:30:75:ee:b8:cb:15:e1:8a:a0:9a:67:af:bf:df:26:
0b:3c:aa:f4:62:ab:cd:9e:2d:fd:e0:1a:96:95:5b:5a:e5:02:
48:4b:75:29:15:50:ff:79:a1:f1:21:7a:5d:37:78:23:ae:2b:
41:d4:cd:0a:86:76:e1:b8:8b:c5:44:15:36:6a:9a:40:e4:dd:
ee:d1:5c:9c:56:e3:38:ba:71:1c:38:74:ee:33:b7:39:b6:7b:
45:bf:47:b3:1e:57:4a:08:e8:8f:37:12:d7:28:3b:57:65:7b:
68:51:8f:5a:8d:98:e0:ae:39:6f:56:67:c1:0f:bb:50:a5:d0:
01:56:94:68:b3:d8:05:e4:c8:55:6c:2b:60:ed:61:ab:87:59:
4c:ab:d1:bb:6e:b5:ec:18:05:13:d8:e4:f0:ff:bd:46:78:9c:
2d:62:fe:01:4b:c6:04:64:27:ac:40:9d:e2:07:e4:63:1f:da:
17:ff:9f:71:8d:40:4b:0f:76:1a:ee:a8:39:76:cd:da:29:97:
a5:ce:73:ce:83:b1:54:f9:8a:9c:5e:2d:63:dd:ae:a6:41:ed:
0d:e5:92:be:06:4e:7d:c6:29:b5:bb:38:24:ea:3a:8a:62:fe:
93:72:1b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:05 2026 by rpki-client