Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
File: Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft (raw, json)
Hash identifier: 71/zmgcn++S213Bb4foIxpUMeEttv/LIMmuQHj7aNig=
Subject key identifier: 5A:3D:F7:2F:69:17:19:61:D3:B8:C4:88:BF:8E:F6:3F:84:7A:AC:61
Authority key identifier: 4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8
Certificate issuer: /CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8
Certificate serial: 019D26965A7030AA530A8197531B0D220C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
Manifest number: 064F
Signing time: Wed 25 Mar 2026 20:01:20 +0000
Manifest this update: Wed 25 Mar 2026 20:01:20 +0000
Manifest next update: Thu 26 Mar 2026 20:01:20 +0000
Files and hashes: 1: HW5RUStuLbxYQOe8Gu-H_E5aWV0.roa (hash: x07LEmxGJBV5xPNSCMiyKaX4u86SUnl4qoOBSfBpXEw=)
2: Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl (hash: WHL7oeyt9sLs7z1rYHWszywi/1ppXtns7y08Q84Tmk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:5a:70:30:aa:53:0a:81:97:53:1b:0d:22:0c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8
Validity
Not Before: Mar 25 20:01:20 2026 GMT
Not After : Mar 26 20:01:20 2026 GMT
Subject: CN=5a3df72f69171961d3b8c488bf8ef63f847aac61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:e4:49:2e:2f:b5:e2:80:66:73:87:27:42:
13:82:ba:5f:13:4a:46:32:73:d7:de:4b:59:6f:1d:
f7:67:30:fd:89:46:73:52:eb:72:0e:c1:c1:17:17:
ec:0d:ea:ab:49:81:a7:39:c4:37:e5:d9:97:f4:3f:
cf:d7:b4:52:0c:e2:62:4a:c2:1b:da:1c:a6:2b:4a:
ab:5e:ce:56:ec:ea:aa:bd:fc:0f:82:13:87:1f:24:
99:1c:fc:ad:ee:aa:c8:72:59:34:3c:9b:2c:d9:8a:
3b:13:11:37:34:e9:42:86:87:8b:f4:fc:24:6c:c1:
03:d2:c5:12:7e:be:c9:09:98:63:70:14:18:ee:df:
8b:16:19:e6:f5:62:59:7f:92:bb:94:88:60:ed:9d:
c7:e9:1f:3b:09:96:ba:82:b4:98:9b:3d:d1:5c:96:
63:33:1e:6e:c7:a3:7c:6a:79:82:a6:89:f5:7e:f3:
ea:ce:f4:08:be:f8:a1:70:21:83:0f:c4:a5:f1:08:
92:63:22:ba:3a:54:53:13:96:46:81:6a:a8:19:33:
42:2c:34:47:5d:99:8a:4e:b3:e5:9d:71:a6:dc:d5:
f4:ad:56:9e:73:bc:a8:9d:08:da:9d:ee:db:54:bd:
27:dc:4c:14:fc:9c:43:cc:22:df:eb:93:50:64:a4:
60:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3D:F7:2F:69:17:19:61:D3:B8:C4:88:BF:8E:F6:3F:84:7A:AC:61
X509v3 Authority Key Identifier:
keyid:4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2c:e9:71:7b:be:b0:c7:32:ab:2d:c5:b6:af:49:97:d4:fe:
ba:f9:0e:93:8d:b8:65:f6:ce:31:31:7b:06:b4:06:98:07:7f:
50:d6:90:bb:70:ca:b8:9a:8f:5b:01:a8:76:62:9e:25:6e:0a:
cc:86:74:f7:7d:f5:d5:11:11:8e:c2:f4:59:80:cf:5d:76:9b:
ab:89:95:fc:b3:58:e0:f2:c4:e3:2e:89:f0:d6:b0:dd:49:c1:
65:f4:3f:4b:28:c0:4e:27:e0:e3:c3:9e:9a:a8:c6:96:84:30:
d4:e5:89:15:8c:ab:ff:dc:58:73:d8:64:48:42:27:23:7f:28:
e6:aa:33:27:08:1b:99:4a:d5:ec:90:ca:a7:f5:4d:02:d3:47:
55:ae:05:e9:de:d8:aa:f6:39:9e:37:7a:07:cd:ff:ff:15:a1:
cb:c7:bf:a5:59:67:a9:01:d1:6d:81:ad:71:60:bd:86:43:5f:
ec:e3:02:a2:d3:6e:3a:07:67:4c:d3:21:2b:3a:fb:e1:85:c9:
22:47:dd:20:a2:b8:14:46:70:ae:d0:5c:12:98:79:da:ee:9e:
78:aa:20:8a:66:a6:4c:ab:97:fe:d1:ae:6d:9c:11:80:81:87:
d8:01:66:eb:f2:ea:b8:0f:92:06:32:88:e7:d5:ad:dc:2b:cb:
21:96:b2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:40 2026 by rpki-client