Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
File: _TSxP72Tgd-Exofwa80HTkp1WAM.mft (raw, json)
Hash identifier: UYK6xldiIJEWAFH16ObCBdMuDAA9a1bH0oLPzV0SvNU=
Subject key identifier: F2:28:BC:00:23:52:2E:BF:9F:6E:0F:A2:59:7A:C5:2D:71:DD:39:DD
Authority key identifier: FD:34:B1:3F:BD:93:81:DF:84:C6:87:F0:6B:CD:07:4E:4A:75:58:03
Certificate issuer: /CN=fd34b13fbd9381df84c687f06bcd074e4a755803
Certificate serial: 019CAAFD98D30093185004DC4CF1F1790139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 20:01:12 +0000
Manifest this update: Sun 01 Mar 2026 20:01:12 +0000
Manifest next update: Mon 02 Mar 2026 20:01:12 +0000
Files and hashes: 1: _TSxP72Tgd-Exofwa80HTkp1WAM.crl (hash: A5/i4YeBrSvfYogvvgaHqogLwfZxFbSgddoC2Cxhe/8=)
2: q0EJWTGDwVco__jebUVu3D5kU9c.roa (hash: tb42uJpdP5nMQK249exHWZcGEWgXf/qYgSBE+LChXnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:98:d3:00:93:18:50:04:dc:4c:f1:f1:79:01:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd34b13fbd9381df84c687f06bcd074e4a755803
Validity
Not Before: Mar 1 20:01:12 2026 GMT
Not After : Mar 2 20:01:12 2026 GMT
Subject: CN=f228bc0023522ebf9f6e0fa2597ac52d71dd39dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:71:82:bd:78:16:b6:43:81:11:40:b0:b2:
84:17:b6:34:cc:08:17:1b:4a:5f:16:b8:3b:e9:60:
bc:89:fe:9b:07:f1:d5:1e:33:fc:1f:df:73:0a:ab:
52:db:36:bc:da:bf:bb:fd:ac:57:72:7d:f3:10:05:
f0:4e:72:1e:5e:b6:30:8c:34:24:46:57:9a:b6:39:
6d:e8:c8:c6:3e:9d:67:9a:82:53:ed:1d:c9:78:23:
26:46:5d:a7:66:1d:db:16:c9:dd:0e:88:c2:d0:a4:
4d:05:07:49:a9:3c:e3:93:9f:44:53:0e:17:56:c4:
7b:8a:33:db:8c:1d:94:36:87:47:4e:fc:7d:99:55:
58:92:8b:fe:2e:57:99:81:42:88:96:9f:05:56:87:
fc:24:17:51:10:3d:89:9d:12:75:00:6b:2f:68:a4:
4f:c0:a5:24:8f:8c:29:f7:0b:4d:da:20:d9:bd:b7:
1e:0e:08:03:10:92:3e:6a:21:23:d0:a6:e1:8c:83:
85:a6:c9:7d:26:4e:42:51:3a:51:6a:9a:ab:52:87:
02:90:4d:aa:1f:53:ea:a4:bb:36:7b:cb:ac:4f:33:
9a:20:70:4f:5d:b7:8e:90:4e:80:d4:6c:10:e7:5b:
ec:20:f2:c1:ec:b1:44:ad:35:10:1a:9c:05:7b:c7:
e9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:28:BC:00:23:52:2E:BF:9F:6E:0F:A2:59:7A:C5:2D:71:DD:39:DD
X509v3 Authority Key Identifier:
keyid:FD:34:B1:3F:BD:93:81:DF:84:C6:87:F0:6B:CD:07:4E:4A:75:58:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:67:98:2c:7a:85:bc:e4:af:34:02:bb:65:d9:3e:22:a6:43:
e2:8d:99:3b:61:ae:db:43:cf:0e:07:b1:dc:81:8b:59:b0:75:
2e:83:42:6b:ff:49:8b:ab:dd:3f:e6:d1:6e:80:2d:da:af:c3:
a7:74:d4:f1:d3:92:60:7d:d5:34:a9:8d:7e:7e:76:68:b3:8d:
27:c8:d1:21:3e:d0:1f:ce:e6:79:87:f5:8b:f2:dd:99:ac:eb:
4e:f3:a5:f4:4c:c0:d6:d5:61:62:31:c4:4e:d3:bd:21:d5:2d:
a8:cd:a2:19:b0:63:b8:dc:2f:e3:20:b7:1d:63:b1:d3:b9:60:
6a:32:34:3c:e9:6c:a1:1e:ad:93:a5:05:57:98:6a:63:e8:58:
2f:27:2b:05:4b:d4:07:ba:63:2c:f4:5b:de:1d:f2:7c:a4:c3:
27:3e:e5:7d:ef:5c:d6:27:8b:e4:c0:38:ed:dc:2e:18:2c:7a:
3f:ed:84:8f:ac:be:0f:b3:a4:6b:d7:66:87:6b:59:56:a9:d0:
2a:e6:cb:b7:94:4a:2e:32:e1:76:00:41:48:28:52:39:9a:61:
4d:25:25:c8:c0:5e:8b:89:7d:10:62:b9:c6:71:51:fe:85:34:
e6:6c:eb:b9:50:b4:c6:ac:41:cf:31:f6:83:08:31:c8:fa:68:
42:0f:76:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:09 2026 by rpki-client