Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
File: TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json)
Hash identifier: 21MyNEfSwyaqirQ+Gg22SG/TPIJHR3YyS8McHMLxVcA=
Subject key identifier: A8:4B:BB:16:68:22:47:8C:86:30:39:38:51:DC:08:1B:B5:55:2D:31
Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
Certificate issuer: /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Certificate serial: 019CABD9776203B034B7CD5D6C675E19829D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
Manifest number: 0640
Signing time: Mon 02 Mar 2026 00:01:21 +0000
Manifest this update: Mon 02 Mar 2026 00:01:21 +0000
Manifest next update: Tue 03 Mar 2026 00:01:21 +0000
Files and hashes: 1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: 5a8XTb5YVR5bPscxE0AwpKX3UWTLeNN9Bf6yM6B08uI=)
2: s8uoBmRDwT1I6UHn-j9HLjE26mE.roa (hash: 93nVEqAB+I5Wpe2PdQ+LQC2FT2DxNkUueoInceH3LxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:77:62:03:b0:34:b7:cd:5d:6c:67:5e:19:82:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Validity
Not Before: Mar 2 00:01:21 2026 GMT
Not After : Mar 3 00:01:21 2026 GMT
Subject: CN=a84bbb166822478c8630393851dc081bb5552d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:bc:31:bd:28:be:99:c0:a5:e3:b4:ea:73:
29:75:ee:7a:ff:94:92:31:8b:a0:e8:27:da:a9:36:
bb:c9:90:3f:6d:df:45:26:31:15:1a:55:03:03:7d:
c5:ac:c6:59:2b:64:35:01:e7:3f:79:f9:b1:0d:9b:
3d:6d:60:d7:4c:f1:b9:8e:8c:d0:76:d2:65:5f:6d:
53:9b:d2:d7:a7:37:cc:5c:b4:de:39:6e:59:1d:df:
e6:4e:77:ae:e6:11:c1:bd:e6:dd:27:9e:91:39:d5:
b2:cc:42:2c:0e:07:3f:d0:17:0a:15:7d:d7:7e:05:
aa:37:5c:9e:4e:ed:5b:5e:c6:2e:fd:5b:09:af:18:
c3:7b:80:57:99:cc:e0:25:a8:86:bd:bf:95:e7:19:
7b:d6:07:2f:1d:6b:93:ce:5a:a5:12:36:c6:0c:af:
68:54:2e:6c:ef:77:e2:c6:95:88:87:8a:ef:b8:14:
e8:58:3a:be:c3:ad:ab:0f:fb:8b:a7:ea:18:64:67:
a8:43:50:5e:3d:5f:a0:e4:96:be:a1:2e:90:9e:6b:
56:bb:2d:02:5b:05:7e:4d:b5:4e:9f:04:d0:67:e8:
95:ec:e3:c8:45:69:31:81:76:ca:e2:87:19:c1:1c:
19:42:ac:b3:33:03:98:bf:be:51:b9:a9:ff:a2:2f:
1f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4B:BB:16:68:22:47:8C:86:30:39:38:51:DC:08:1B:B5:55:2D:31
X509v3 Authority Key Identifier:
keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b2:42:ab:da:af:82:4d:fc:a9:fc:0f:f6:05:3e:b9:c2:af:
05:96:28:0e:f5:9c:f4:91:3c:36:a0:c0:c1:5c:32:b7:3a:3d:
77:73:45:46:ac:10:e2:18:89:e7:71:15:9d:67:79:22:7a:27:
fc:2d:ac:ce:7a:9d:63:80:5a:99:2b:e1:20:44:ab:ab:d4:ab:
dc:33:0e:1a:f6:7c:a6:6a:61:d6:ab:0f:ff:b3:4c:b5:76:c2:
3d:7f:b2:8f:1f:b5:24:4e:c2:4f:ed:39:b7:27:95:19:f0:8c:
39:6a:fe:4d:87:68:11:4f:5f:2e:7a:13:8b:01:b8:b1:02:f0:
40:d0:33:00:11:b1:71:a5:37:dc:7b:cb:d4:cb:d5:e7:dd:39:
bb:75:6a:ed:1a:ce:f7:f4:89:6d:fc:f3:22:f4:b9:74:62:c8:
ac:48:cb:2f:f5:c3:b7:e3:37:ec:87:78:f8:f7:83:2d:92:4b:
a4:00:d7:1c:e1:19:fa:6d:78:0c:19:f7:3c:cd:11:d8:a0:ae:
e5:a5:71:59:8b:d9:9e:07:eb:98:49:fb:4e:1d:71:53:35:bd:
9e:10:b0:ca:a3:20:7d:6a:0f:03:70:24:c2:5f:01:e9:6f:38:
d7:5d:bf:0a:78:ba:cd:07:61:a8:eb:a2:08:78:29:ed:aa:4c:
32:01:5a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:28 2026 by rpki-client