Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
File: TnKscetFB6wKZSpUWY2uRR_jP0c.mft (raw, json)
Hash identifier: ByAjXQELJmLbaYjDJ99r18oMCws1CCYfvDVwkR3OtYk=
Subject key identifier: 1A:CF:9C:44:08:F6:84:CC:BF:87:18:FD:98:AB:F5:61:29:9D:1C:DF
Authority key identifier: 4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
Certificate issuer: /CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Certificate serial: 019D2772D33F7D725E60A0184834E3120DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
Manifest number: 15B2
Signing time: Thu 26 Mar 2026 00:02:09 +0000
Manifest this update: Thu 26 Mar 2026 00:02:09 +0000
Manifest next update: Fri 27 Mar 2026 00:02:09 +0000
Files and hashes: 1: QE8bcggi0VZyHRPBfYdhoFDqJM8.roa (hash: wboN+pw+KvvkFtiFgOQIE2+tkc1MrMcN64l5TflOk5g=)
2: TnKscetFB6wKZSpUWY2uRR_jP0c.crl (hash: TNuEWu8zrk0Fk4GbPXOOSDgKfddMeg5s+lDE5CMohrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d3:3f:7d:72:5e:60:a0:18:48:34:e3:12:0d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Validity
Not Before: Mar 26 00:02:09 2026 GMT
Not After : Mar 27 00:02:09 2026 GMT
Subject: CN=1acf9c4408f684ccbf8718fd98abf561299d1cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7f:1a:d3:18:86:a2:e4:4a:4e:cf:52:47:ef:
c8:4f:6a:c9:45:82:c7:5d:e4:94:3d:a1:b8:c0:b4:
c0:4e:a3:da:30:ea:f9:89:79:26:11:6d:26:bc:7c:
ff:f9:1a:00:61:60:91:5e:73:03:ca:10:f5:f4:79:
03:4c:40:bf:4a:8e:32:09:b5:2d:66:01:0d:21:1c:
4f:8b:5e:91:c1:c6:f1:db:6c:aa:8c:25:5b:9c:d5:
c1:bd:18:fd:9b:e9:fb:92:8b:57:c3:f3:22:8b:3e:
b9:ca:8c:7b:06:00:a8:ce:e1:78:ab:ce:f0:8a:1b:
75:9f:5c:30:6c:da:cc:63:4e:5e:94:68:31:3b:8e:
6a:98:15:59:a1:f7:13:66:51:0f:1a:d0:f2:02:92:
51:7e:67:f3:0d:16:fe:bd:b8:39:5f:d5:ff:df:ca:
86:4d:9e:08:d7:d3:3d:8a:1f:3d:76:41:02:9d:62:
68:92:a2:e5:95:00:ff:4d:65:ce:b9:f6:e2:d4:fc:
e2:70:6d:fd:e8:cd:8e:81:0e:d3:64:11:58:26:be:
29:53:a1:93:35:1f:8a:d4:98:15:80:cf:0e:08:a8:
ce:56:31:f1:b0:28:84:95:ac:ae:67:dd:64:0e:4d:
33:a4:01:1e:e1:aa:81:63:00:5e:c6:48:e4:76:cb:
79:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CF:9C:44:08:F6:84:CC:BF:87:18:FD:98:AB:F5:61:29:9D:1C:DF
X509v3 Authority Key Identifier:
keyid:4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:79:67:b5:e7:e5:77:d9:a6:41:e8:98:85:d9:17:44:83:c4:
55:8c:65:8f:7b:fb:7e:b7:66:53:1d:af:1d:0a:1a:77:37:a2:
2e:02:d0:99:82:ee:88:ca:0b:a1:46:2e:b6:36:d3:bc:44:10:
a8:5f:43:63:3d:4c:90:7f:01:4b:62:26:ad:e9:ac:4d:08:43:
ca:31:d3:33:7c:b9:8a:88:69:ff:47:2d:0b:2a:70:6a:0c:e2:
9a:b7:0c:84:50:27:8b:8c:a0:6c:31:62:03:ca:bb:44:da:a7:
48:98:ff:80:90:26:1f:6b:c6:03:3a:9c:26:ad:58:4d:33:07:
e5:89:a6:5c:f7:59:d3:0f:19:75:b3:72:35:f8:89:35:55:ed:
b3:d9:33:26:1d:db:49:26:90:d6:82:24:d7:c1:0d:97:c8:d0:
2e:ab:6c:d7:9b:d4:e3:96:af:09:31:69:dc:ba:bc:f0:43:df:
6c:2f:86:71:f7:e1:80:52:74:1a:73:99:12:1f:63:78:59:3c:
34:de:a5:4f:60:07:cb:06:03:a7:67:38:09:2d:18:4b:74:43:
82:e3:33:a3:cd:9f:a5:f1:5a:63:a3:f3:c0:aa:10:f4:a4:21:
13:f7:a8:2c:89:10:da:93:4a:d2:a0:85:fd:91:6c:08:1d:95:
5b:07:44:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:21 2026 by rpki-client