Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
File: TIEnPcsDw0V7eSUL4Qnhml508P0.mft (raw, json)
Hash identifier: qe1Q3htLttSLiVB6LNPkDQy8G72xyzSoKAO+uJpPoj8=
Subject key identifier: 58:C3:23:4A:2B:B3:70:1B:B0:80:18:BF:BA:39:A5:65:10:64:84:3B
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial: 019CAA5905A06A42CBA48FD24C4B4FFC11F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
Manifest number: 0A40
Signing time: Sun 01 Mar 2026 17:01:26 +0000
Manifest this update: Sun 01 Mar 2026 17:01:26 +0000
Manifest next update: Mon 02 Mar 2026 17:01:26 +0000
Files and hashes: 1: 1-07ZjHZQ4JAS_TNnMMIuiuGHUu0.roa (hash: Wh4hYAahHN1SwbCKEhKPBAVeToja3QYblB0SUbJdjis=)
2: DnIOOoGWRavp5IqwW9ySIPh79lk.roa (hash: rq7BHpoO+/BSPP6hcjEqbUgUHas+lRS8Sfpjq0LOIgU=)
3: G2MOc8TWFDIMMJqGe6NYQzJGJRc.roa (hash: 6e+/w4+tJC0z0SxMPZdExM5pB9/UDFdAttq+Dk7OWZs=)
4: TIEnPcsDw0V7eSUL4Qnhml508P0.crl (hash: 1FLUYuGaiC7X9TmnqB7wq5skqg36rCn/D8UQfxdyCks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:05:a0:6a:42:cb:a4:8f:d2:4c:4b:4f:fc:11:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Validity
Not Before: Mar 1 17:01:26 2026 GMT
Not After : Mar 2 17:01:26 2026 GMT
Subject: CN=58c3234a2bb3701bb08018bfba39a5651064843b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:66:89:6c:95:c7:67:e4:3a:94:a2:d5:4e:
18:39:f6:61:b7:86:21:f5:97:06:19:db:03:c0:95:
a8:0d:63:96:d9:42:d4:c1:e1:16:33:79:15:6a:20:
1c:57:1d:09:0c:3d:74:c6:12:93:2a:35:a5:9b:83:
5d:e5:a9:f6:66:17:7b:bb:c7:3b:b5:43:4a:57:b8:
ef:ee:95:66:90:4f:fa:0e:18:51:33:10:8d:49:ac:
2b:3e:69:6f:2a:36:5b:a3:3e:1c:73:49:6e:fc:c8:
54:7a:b8:99:51:66:ff:fb:d3:87:99:1e:2e:4b:c5:
7f:4e:3a:f0:70:86:7a:7a:6c:32:0a:53:35:94:fd:
9a:d6:6d:d2:b9:1e:64:14:30:0e:dd:a7:89:92:5a:
19:7f:a6:1f:a1:a6:6c:dd:3b:06:13:65:43:1d:16:
f5:6f:84:bf:3f:ed:29:69:99:41:e9:6b:7f:e7:78:
00:b7:1a:e1:30:fe:8e:d0:3f:e4:38:c2:8e:01:34:
46:58:8d:24:e7:7c:57:0f:51:5b:d3:d6:64:66:dd:
df:62:a6:d0:35:d8:f4:e7:70:d0:b1:a9:01:16:7d:
2e:9b:34:ec:54:9a:3c:9a:15:f2:2f:88:18:a7:03:
3d:ee:1d:09:a0:62:ca:a2:08:04:8b:63:5c:eb:42:
bc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C3:23:4A:2B:B3:70:1B:B0:80:18:BF:BA:39:A5:65:10:64:84:3B
X509v3 Authority Key Identifier:
keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:eb:fb:29:59:f8:bd:3b:c7:cf:98:13:07:52:d0:c2:a6:fa:
41:23:c3:e2:89:5c:1c:73:9a:02:cd:dd:4f:44:a9:6a:2e:c5:
0f:da:9c:e2:2e:2f:65:dc:bf:c3:f1:f8:03:74:dd:ae:40:6d:
1a:bf:ec:2b:7e:77:8b:2d:24:da:fe:62:a0:16:7d:cd:bc:40:
b2:7f:1c:08:64:0e:37:d3:5c:3d:ac:65:8f:19:69:fa:50:14:
ad:cb:d1:c3:df:ba:40:50:64:11:7c:c0:87:a7:f9:b8:8b:96:
49:24:b8:55:31:e9:18:75:24:c8:29:f3:ec:09:e5:f0:5f:e3:
71:00:36:84:d8:a3:c7:0b:c2:8e:da:32:77:fa:7e:7b:9c:9b:
02:4b:be:d6:50:e0:12:65:54:c5:97:56:10:56:02:f9:d6:e6:
35:99:ea:71:65:28:28:38:ba:dd:80:14:52:9e:8d:ba:9c:34:
0a:63:79:00:c9:14:3f:2f:a5:ea:db:fb:aa:cc:ce:18:73:42:
83:8e:4e:8f:ca:d9:90:ea:62:c9:a0:0c:30:6c:c5:c0:fb:8c:
fa:14:8a:58:85:dc:33:ce:a8:cf:6d:96:60:3e:5a:35:e8:c9:
48:e3:44:c3:d1:62:51:c6:d2:11:59:01:24:e2:99:a8:9d:c8:
e9:3d:a7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:54:25 2026 by rpki-client