Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
File: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft (raw, json)
Hash identifier: BIvoWrOmp9CDK3n3Iob5MbU+ZN0uRlpq2PjfqlsIlIs=
Subject key identifier: 8A:C8:56:F8:95:77:FC:52:D8:A6:2F:59:63:AB:A3:5C:E0:C0:4F:58
Authority key identifier: 4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
Certificate issuer: /CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Certificate serial: 019D27E04916C508211DD6FF7756C08E0744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 02:01:43 +0000
Manifest this update: Thu 26 Mar 2026 02:01:43 +0000
Manifest next update: Fri 27 Mar 2026 02:01:43 +0000
Files and hashes: 1: HJM8ar8o7Ms178YqtLEfQB0QhN4.roa (hash: zeFiOMksTar7c+X+HOnRK9Kyf2IXPD5S69TV2amNtAY=)
2: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl (hash: UjnpqgCtpvF3OfMF7lk2fvRua1zke4qZrFAPWe2m0j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:49:16:c5:08:21:1d:d6:ff:77:56:c0:8e:07:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Validity
Not Before: Mar 26 02:01:43 2026 GMT
Not After : Mar 27 02:01:43 2026 GMT
Subject: CN=8ac856f89577fc52d8a62f5963aba35ce0c04f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5d:0f:fa:be:ff:0f:6c:6c:55:04:af:67:a4:
17:40:1e:b5:59:5f:f2:80:37:5c:d2:7a:5e:69:1a:
3d:d4:9d:db:13:15:ea:01:84:2c:a5:0e:ab:89:f4:
03:eb:11:f9:7a:c7:3f:c7:e3:77:23:d7:2e:97:35:
df:a4:e0:d3:b2:28:3f:a7:b1:53:33:17:49:5d:f5:
46:99:da:7a:c9:80:4d:12:40:57:11:3a:46:bf:92:
b3:60:d6:e5:19:82:41:d1:26:36:ac:3a:50:fa:d7:
ea:9c:9e:14:0c:a8:16:73:5e:0c:83:cf:14:f6:93:
85:f0:6e:06:07:be:d8:33:ea:0a:4e:63:0b:1c:7b:
7e:80:3c:9e:86:c4:5d:d0:c3:98:29:0d:bc:4b:56:
21:cc:14:f0:5c:4e:01:43:cd:ac:3d:21:dd:f1:3d:
ad:67:e0:8f:a5:17:8e:65:32:89:95:a8:82:33:fc:
26:ed:55:76:4a:35:5b:a0:d3:97:39:17:3e:93:61:
63:e3:f0:6b:9d:ad:79:06:8a:a5:97:cd:29:02:94:
1e:cd:b7:db:18:37:87:f9:0e:62:30:95:7f:00:41:
99:3d:3f:17:aa:93:34:77:f3:6a:0c:39:a1:1c:3b:
45:23:95:00:73:37:8a:03:f8:fd:4a:7e:1a:b7:5e:
b3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C8:56:F8:95:77:FC:52:D8:A6:2F:59:63:AB:A3:5C:E0:C0:4F:58
X509v3 Authority Key Identifier:
keyid:4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:28:02:f8:d3:b7:7a:0d:25:05:73:71:a5:50:74:ea:c1:35:
11:7a:80:63:5a:87:90:3f:e5:61:b4:94:5a:39:17:39:ef:df:
c7:ee:9e:00:86:1a:b1:d5:ab:85:bd:9a:eb:d9:07:b5:b9:c6:
46:e2:82:b0:31:ec:f2:bc:63:f1:6f:64:d4:b2:79:14:7c:88:
fc:01:c7:e6:9b:e9:a1:3f:d9:28:9e:95:4f:f9:85:11:e4:8d:
e6:d4:20:c6:b7:7a:e6:26:23:b2:5b:54:e1:06:e2:79:0b:b6:
da:e1:a3:4c:44:81:a1:70:80:ba:2a:0a:ac:d2:39:6e:fc:4b:
b7:57:46:de:c0:dd:d9:3b:64:72:56:02:ee:4c:11:20:e8:d1:
e6:bc:82:2b:8a:2f:18:0c:cf:8f:4d:b2:70:fa:7a:8b:dd:b2:
8c:99:b8:4e:92:3b:9c:77:e1:a7:31:a9:7a:60:5c:a8:7b:14:
71:26:ca:72:f0:b2:05:0d:04:df:20:58:59:11:21:9f:a4:9e:
30:8a:aa:25:47:f6:62:c9:8c:1d:3a:ba:fa:33:c4:66:45:b5:
7a:7e:78:1b:84:6a:46:9f:56:44:49:07:db:ca:9b:99:c4:0a:
89:fe:27:5d:dc:d2:87:5a:5f:00:af:89:19:6e:f3:b2:2b:11:
46:d5:f8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:40 2026 by rpki-client