Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
File: TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json)
Hash identifier: kiDkUfmgHw2gQ5+I4byWP/N8uXH5h2c8C9jiNAs2Ruk=
Subject key identifier: 25:9C:E2:E2:94:EC:18:99:EF:0A:F0:2C:DC:26:61:63:FA:07:D9:14
Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Certificate serial: 019D2816D4A81FFF77E2E017128FEE992E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
Manifest number: 050F
Signing time: Thu 26 Mar 2026 03:01:17 +0000
Manifest this update: Thu 26 Mar 2026 03:01:17 +0000
Manifest next update: Fri 27 Mar 2026 03:01:17 +0000
Files and hashes: 1: 8xG2LUgGMoQo1E0oFZXCsLklpt8.roa (hash: P+5MDoFv+VPER4lMcHzaG5Ao7rqloC0fCfPVJFO8gkg=)
2: NNU8m-ZbGaDewKa80bazCk_gHuc.roa (hash: jNBremlwULSnHvNbBnehGqtceTysa0l4mhsoPRNxZdE=)
3: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: ByUc+Vr6WINqjSNZbChOkW7ayB+j3By8I6gesdpyjR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d4:a8:1f:ff:77:e2:e0:17:12:8f:ee:99:2e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Validity
Not Before: Mar 26 03:01:17 2026 GMT
Not After : Mar 27 03:01:17 2026 GMT
Subject: CN=259ce2e294ec1899ef0af02cdc266163fa07d914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1d:76:5f:ae:41:4e:b9:58:c4:e7:df:e5:25:
ad:14:49:a6:3c:f0:f7:00:2b:db:88:38:dc:51:ea:
1c:e0:2e:02:bd:d4:05:30:51:f9:8f:24:76:9f:ff:
9c:1e:7c:39:a4:c3:4a:33:b9:ca:50:22:90:79:3b:
9c:41:c1:02:31:9b:36:1a:73:0b:e4:7f:32:11:47:
2c:0f:57:83:53:06:4f:2e:b6:21:a4:33:90:89:a1:
05:7e:fc:f7:37:76:49:00:e5:11:ad:45:2d:c8:72:
10:9d:2e:f7:5e:9a:b1:44:8f:68:a1:0d:07:a9:bc:
d8:fa:a3:5d:26:a8:b1:22:a0:18:be:ef:aa:e7:99:
2c:f4:fe:ff:b9:4d:cf:ca:7a:7d:25:15:74:61:9f:
c2:ff:4f:6f:bb:6a:b3:ed:44:27:11:eb:81:b1:83:
da:d2:7f:29:d3:6b:cd:d7:8f:bd:17:c3:60:52:9c:
e8:69:bd:f3:29:ea:4d:3f:8d:a6:0b:c1:5e:19:d1:
a9:a5:a3:50:97:30:00:07:a0:d1:a4:95:80:f7:09:
f0:b3:67:d0:7c:5c:39:7c:03:31:d0:39:08:38:58:
79:b9:77:ea:d8:cc:93:97:ac:6e:90:bc:b0:a2:0c:
d3:dc:37:29:02:0f:3e:0a:88:73:cd:8d:62:ff:f0:
d8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9C:E2:E2:94:EC:18:99:EF:0A:F0:2C:DC:26:61:63:FA:07:D9:14
X509v3 Authority Key Identifier:
keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:59:dc:5c:0e:8e:b6:ca:60:e5:4e:03:6a:20:4a:7d:92:f9:
e5:04:2e:98:f2:4f:74:f2:de:42:1d:29:2f:d2:33:ab:a4:7e:
4a:4a:47:4b:2c:d3:da:ad:84:18:b8:31:8f:0b:d6:83:e2:89:
26:79:d1:6b:1e:5a:5b:e7:38:e0:0d:49:6b:28:69:df:6d:14:
a9:82:9b:8c:a2:2f:09:de:bf:23:4c:9f:d7:65:63:fe:02:63:
43:48:fe:bc:e0:84:95:fe:48:b5:44:50:d9:0e:69:53:f6:52:
e3:28:e7:a0:be:6b:de:42:e9:95:1d:37:a8:e7:fa:5d:0f:cb:
64:46:9b:0b:cf:9d:98:5b:aa:45:b2:3a:10:e7:ae:4a:31:2d:
0b:b9:51:47:5d:5e:2f:b5:f8:3a:2f:68:e5:a0:47:cf:f0:36:
23:42:78:09:f9:78:05:11:06:9f:f2:bb:4d:59:10:78:9a:2d:
cd:e3:25:00:16:1a:52:8c:ff:9a:79:bc:02:ca:95:4f:ae:b2:
7b:ed:46:24:77:70:83:7a:95:e2:ae:e2:75:82:0d:2c:e5:a6:
45:a2:b5:a9:aa:35:fd:00:56:f9:ec:0f:ea:55:14:d0:67:11:
b8:77:a6:39:ae:d7:92:1d:eb:c6:3c:88:84:72:88:c7:03:8a:
53:f2:fa:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:39 2026 by rpki-client