Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
File: TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft (raw, json)
Hash identifier: UPCsfyHtknGSuPUgCQqqnAxqYFfdt5p+WhIryOL14ys=
Subject key identifier: BE:3B:3A:14:B7:A3:D8:E5:AF:01:A8:B0:4E:6B:24:C5:76:9A:94:82
Authority key identifier: 4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
Certificate issuer: /CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Certificate serial: 019CADC85E421D9C9DE22211AC707F977CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
Manifest number: 0908
Signing time: Mon 02 Mar 2026 09:01:55 +0000
Manifest this update: Mon 02 Mar 2026 09:01:55 +0000
Manifest next update: Tue 03 Mar 2026 09:01:55 +0000
Files and hashes: 1: PqzFQQ5sES2MqGglMugWf_lMxyY.roa (hash: khSqFydqj9KZQBk9HYnRXgBI+ueTAb2xBqHtEX2tAzU=)
2: TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl (hash: 8hdRybyJTFjyW5LvuNd/05eHs47Pah4ltpoq166FmYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:5e:42:1d:9c:9d:e2:22:11:ac:70:7f:97:7c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Validity
Not Before: Mar 2 09:01:55 2026 GMT
Not After : Mar 3 09:01:55 2026 GMT
Subject: CN=be3b3a14b7a3d8e5af01a8b04e6b24c5769a9482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:41:32:5c:00:31:a6:1c:36:f0:93:13:07:ef:
8f:ec:48:06:14:3c:1a:96:47:10:7a:a9:3f:5d:7e:
d2:4b:10:8c:8a:70:93:92:50:e8:60:4b:90:1e:bd:
0d:44:86:cd:7f:5f:a2:c4:5b:c8:e9:d2:c6:d4:e6:
ed:8e:a4:3d:f1:54:f0:ea:65:02:19:9c:bb:6f:b6:
fe:dd:94:a1:75:0e:c3:b5:13:c3:89:a7:b4:5f:a9:
84:d1:42:7b:5b:e5:45:41:6a:1e:37:1f:90:51:d4:
ab:b5:d0:65:d1:c1:88:8c:66:17:ae:1c:46:1a:39:
3c:0e:9d:38:82:c4:d0:95:5e:7c:a3:8b:5c:de:4d:
36:7f:3a:f0:a3:f3:4e:b2:6c:b7:93:e1:22:8f:82:
23:cc:0f:b8:a5:3a:19:18:f2:b4:b3:ae:ec:31:a0:
eb:11:55:e0:db:dc:2e:e3:94:d7:a5:81:09:dd:c9:
7d:e0:e6:b3:a8:df:b3:dd:c6:62:c6:ec:8d:be:dc:
a6:03:7d:d5:6a:f3:31:3a:f9:39:0b:90:b4:03:3a:
e7:2e:a7:8e:47:f8:30:74:a2:67:ed:02:1a:91:44:
5e:ae:d6:0e:65:6d:b1:26:42:cd:8c:0b:33:98:0b:
09:2d:b6:b1:54:51:5c:d5:44:e0:24:41:d2:6e:40:
08:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3B:3A:14:B7:A3:D8:E5:AF:01:A8:B0:4E:6B:24:C5:76:9A:94:82
X509v3 Authority Key Identifier:
keyid:4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:30:ed:94:09:07:42:53:55:ef:a3:1d:04:ad:82:ac:e8:21:
a4:ea:36:bf:5a:a5:52:7c:92:e3:45:6f:9d:8e:f7:d1:ea:cd:
0e:28:92:40:5a:4d:78:4d:24:e0:36:79:a7:0c:b9:cd:1a:a1:
cc:0d:f5:f8:d8:3d:93:28:d2:64:92:3f:f5:64:dc:f6:fb:9d:
1f:57:68:26:3c:0d:fb:53:87:3a:43:48:37:94:6f:19:d9:bf:
06:9c:20:6c:08:71:49:86:2b:e4:b2:37:5a:94:51:e2:ed:89:
f8:b7:c9:3f:bc:43:b8:7f:d6:3f:02:e2:23:da:da:fe:f8:f4:
bc:ad:00:57:1e:39:3c:d9:d8:1f:34:3b:59:fd:00:1e:72:f0:
73:8f:89:fa:07:de:6d:24:e1:48:00:ea:90:5b:9a:75:0f:a4:
38:81:07:45:63:90:92:ff:c6:59:91:dc:97:56:41:bc:1c:80:
50:c0:ad:07:e9:ea:1b:d5:08:1c:1f:03:1f:f8:5c:68:35:98:
71:2a:cd:b0:a5:75:7e:6a:2c:b3:f3:9a:a4:1a:13:d4:92:9c:
20:d3:e4:7a:03:c2:d2:98:f3:31:19:dd:b5:23:78:e0:d5:14:
d3:6f:bd:75:c0:51:4a:8e:48:c9:63:77:5a:e7:b6:e7:b2:c7:
5f:64:cc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:54 2026 by rpki-client