Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
File: Tc_QAaZn4WRatAxbvtifWScAT4U.mft (raw, json)
Hash identifier: lLAFg0ArfabDfiNwg1/WydcU1mdP9aZGpybSuVsdOoQ=
Subject key identifier: 99:AD:00:DC:4E:D1:91:74:F0:80:B7:83:73:D2:5E:CA:54:1B:57:E7
Authority key identifier: 4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
Certificate issuer: /CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Certificate serial: 019CACEBC9C7A9C264C06969B41D123504ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
Manifest number: 0C72
Signing time: Mon 02 Mar 2026 05:00:59 +0000
Manifest this update: Mon 02 Mar 2026 05:00:59 +0000
Manifest next update: Tue 03 Mar 2026 05:00:59 +0000
Files and hashes: 1: Tc_QAaZn4WRatAxbvtifWScAT4U.crl (hash: BRE3y7fFs1fLFKiL8PpAnv97XPx/zsQmX7VKtPBznhk=)
2: UKP4TUcHQtGrFZOuVGeoJQ7WW6Q.roa (hash: 99B0w3hw/yKL8K1EFcdu+2H+KrVDmHXCwq/A1IUCotg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:c9:c7:a9:c2:64:c0:69:69:b4:1d:12:35:04:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Validity
Not Before: Mar 2 05:00:59 2026 GMT
Not After : Mar 3 05:00:59 2026 GMT
Subject: CN=99ad00dc4ed19174f080b78373d25eca541b57e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:57:52:3a:97:90:00:9a:cc:6a:85:3b:64:
1e:41:8a:83:cd:d7:9e:7e:f0:05:10:4f:0e:de:22:
3c:f4:d9:95:16:2b:1e:3c:b8:c3:60:c5:0c:fc:3f:
f4:24:29:7e:aa:8a:9e:2a:0b:2c:28:91:15:ed:68:
04:1b:84:1d:e4:e9:00:0d:16:6c:9a:72:ea:f3:39:
ff:66:d7:62:93:56:06:b7:26:56:f5:4f:79:7d:9e:
42:10:cf:c4:41:bd:df:71:89:fc:bf:4e:c6:57:80:
6f:c1:66:8f:2e:a7:ca:1f:2a:e1:37:8a:93:84:e8:
97:05:2d:4f:7c:57:d3:95:0b:f7:d1:ee:c5:ff:ae:
39:75:7e:ff:89:23:3f:bb:e1:bc:66:19:81:e2:ff:
af:52:a6:cd:c7:91:49:32:76:62:83:7b:63:fb:5f:
29:0f:aa:df:c2:ca:51:a7:08:0c:bf:ad:6f:c7:29:
81:3c:6a:9e:98:d3:64:8f:6c:db:b7:cb:b4:8c:35:
b0:da:97:70:07:3f:e1:7a:52:79:ec:e1:39:93:d9:
bb:20:8f:49:b3:24:ff:41:17:df:3f:aa:9e:4a:60:
6b:a7:30:c1:ae:37:30:10:df:c3:cd:ff:fb:27:4b:
ad:38:04:00:9e:f4:a6:67:60:55:3e:6f:8a:cc:1f:
f8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AD:00:DC:4E:D1:91:74:F0:80:B7:83:73:D2:5E:CA:54:1B:57:E7
X509v3 Authority Key Identifier:
keyid:4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4f:4e:c2:5f:79:00:e7:6e:61:95:ca:c1:de:b8:ce:3b:82:
df:5b:ae:30:5c:55:08:76:30:06:af:f8:6e:2d:94:6e:33:a4:
32:53:dc:eb:47:a0:14:0d:2f:fe:8c:57:a3:36:7b:35:91:9b:
e4:14:64:0c:e6:c3:90:5b:6a:32:ce:92:2f:5d:00:99:da:ff:
19:47:a2:20:cf:ec:1e:22:73:a7:02:6b:64:aa:8f:95:b6:79:
19:11:2f:85:ed:89:4f:a4:d5:90:b3:29:fb:85:34:30:29:73:
95:01:8b:f7:c9:81:3d:d2:0b:4f:01:f8:f3:fe:10:96:82:3b:
b0:be:ff:a4:ec:68:96:1e:66:aa:da:33:63:bb:a9:18:b8:94:
e5:87:73:a4:f4:a7:5f:fe:eb:f1:3a:3f:7a:e5:3b:3d:d8:22:
e1:da:c9:db:83:d9:90:40:98:18:60:50:ff:67:82:38:63:22:
4f:5b:58:5a:83:85:89:ad:42:4b:f4:6f:6d:13:d1:ee:ed:a2:
29:64:b1:97:8a:8d:88:a2:be:b3:ae:64:72:9b:e9:f1:01:22:
b3:7a:ad:88:dd:26:cc:7b:d3:03:b1:0b:61:e3:ff:35:10:a7:
da:3a:4d:6a:75:bb:d8:91:b3:59:4c:c4:56:88:63:f5:56:22:
b3:92:07:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:34:20 2026 by rpki-client