Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
File: Tk9mXUbWoqvwUh5csffEUcozeoc.mft (raw, json)
Hash identifier: T+BQiZooABSox5UpuI568lZDf3rcPoRl2m5B+EZ1AMA=
Subject key identifier: CB:2C:5E:76:AF:79:A7:74:86:3D:1C:B8:89:EA:87:20:4D:04:4A:D7
Authority key identifier: 4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
Certificate issuer: /CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Certificate serial: 019CAD5A2130780BC8785A464E5768462A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
Manifest number: 0429
Signing time: Mon 02 Mar 2026 07:01:30 +0000
Manifest this update: Mon 02 Mar 2026 07:01:30 +0000
Manifest next update: Tue 03 Mar 2026 07:01:30 +0000
Files and hashes: 1: Tk9mXUbWoqvwUh5csffEUcozeoc.crl (hash: UYL/AcvzBA8G+BmZjbgpqjr6elDP8BTUFK14Hyx1Ug8=)
2: bl7MJdXz_EhEovm2UbN_gTDULoY.roa (hash: d4NySi+tNKI3bH93zeiTjj+HNhdoL7gliIMJmvtOe7U=)
3: cLXri-wviIsJ5iHidksAtpZN5SY.roa (hash: UtWyYW3E/+2IaDZ2hwPVOR71jr9t19OookjTmPk0g7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:21:30:78:0b:c8:78:5a:46:4e:57:68:46:2a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Validity
Not Before: Mar 2 07:01:30 2026 GMT
Not After : Mar 3 07:01:30 2026 GMT
Subject: CN=cb2c5e76af79a774863d1cb889ea87204d044ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:df:54:de:ba:97:0a:53:95:bf:d2:b3:c9:
97:7f:e7:ee:9d:fd:24:61:60:a9:e8:a3:75:38:0f:
bf:25:7e:36:fb:15:f4:98:e3:e7:5a:04:c4:21:eb:
6a:b4:56:49:2f:74:4a:35:4b:bd:88:09:6e:94:5a:
17:39:5a:63:41:3c:21:2c:e4:6a:a8:f4:44:04:38:
ee:60:60:bc:82:51:1d:b2:0d:ee:10:8e:44:1e:f0:
5a:da:8b:bf:9d:02:03:db:13:8f:a9:57:86:8c:48:
b3:8d:ea:6e:58:ae:75:61:8d:ca:cc:9d:f0:93:60:
f3:17:26:77:9d:85:b0:38:25:0f:50:c9:fa:e6:29:
12:7e:ac:38:92:42:1f:aa:30:a9:34:f6:40:e4:9e:
ec:5e:7a:3e:60:e9:3e:cb:d0:46:8d:02:3b:b4:c2:
3d:f2:14:3e:8b:66:45:e5:eb:de:77:12:03:9d:93:
44:08:78:34:53:f2:61:07:74:4c:c0:75:7d:58:bb:
c1:60:72:e6:67:66:d4:d6:53:3a:0f:16:e1:82:f8:
06:b3:65:1e:91:d0:43:64:8a:47:bb:d2:27:3e:9d:
d7:81:d3:34:ca:58:53:4c:74:1a:a0:d8:89:eb:e9:
a0:da:5e:61:60:a0:37:8c:5b:ea:fe:ca:c8:84:e9:
92:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2C:5E:76:AF:79:A7:74:86:3D:1C:B8:89:EA:87:20:4D:04:4A:D7
X509v3 Authority Key Identifier:
keyid:4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:47:2b:a5:6e:92:93:03:b8:1b:88:09:59:d8:f2:23:ea:87:
e9:ce:ba:f8:be:29:8f:c5:08:92:e0:63:52:c6:db:31:dd:68:
0f:cf:c8:5d:93:9e:03:54:91:33:d2:98:8d:ac:e8:20:11:7a:
3a:5a:ce:97:78:05:5d:fb:fb:c0:9d:ed:7b:98:c7:11:5b:a2:
24:02:65:02:f2:33:dd:b9:67:0c:72:cb:d3:a6:f5:c6:ff:9b:
99:75:49:32:7c:7a:af:f2:30:12:93:63:21:f6:73:d8:76:14:
1a:17:33:d4:7e:b9:a7:39:1f:4f:ae:ab:5c:43:85:8d:be:ea:
73:49:25:34:1c:8c:66:4b:8f:8b:92:77:02:4a:9a:a1:05:40:
23:6f:7b:6e:d8:c8:5b:62:c5:c8:b0:e7:40:bb:06:8c:ba:8c:
46:77:43:ae:9e:66:d9:ed:20:99:2e:a1:46:f9:8a:8e:83:c9:
9b:e1:83:db:a2:20:5a:91:01:5f:39:b4:e5:bf:89:a0:06:44:
87:29:95:ec:55:0f:8f:90:a5:d9:6f:d6:c0:a2:30:65:0c:71:
ee:6b:4d:bc:7d:a2:5a:d0:33:d0:f4:fe:18:7c:47:8c:82:ba:
3b:7a:18:0b:c5:9f:1e:10:5e:9d:52:d7:b0:0a:2e:c2:ee:7e:
45:b8:57:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:17 2026 by rpki-client