Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
File: tznE4_6GnZeDui2t9mDczQ-lNwc.mft (raw, json)
Hash identifier: XaeYxca9JfzA3c2YxB7D77I0FSeokLMuDiVQskQCB0A=
Subject key identifier: B4:79:59:ED:92:5D:B0:3E:E4:31:26:6E:F3:DD:E8:F9:83:18:2B:02
Authority key identifier: B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07
Certificate issuer: /CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707
Certificate serial: 019CAC46830E2E68290AAAD0B75ED5A0E3CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
Manifest number: 1292
Signing time: Mon 02 Mar 2026 02:00:28 +0000
Manifest this update: Mon 02 Mar 2026 02:00:28 +0000
Manifest next update: Tue 03 Mar 2026 02:00:28 +0000
Files and hashes: 1: fp6e1oWTW6ERgaYTNaPCSf0ibbk.roa (hash: cfY9W6Oc4CWCMHNddhZlxoGOHOxJVO+wjS65/vUgYTs=)
2: tznE4_6GnZeDui2t9mDczQ-lNwc.crl (hash: aYFizyXrkITmpLpodXGA7oAFtpOpCacq+clTYtQIbI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:83:0e:2e:68:29:0a:aa:d0:b7:5e:d5:a0:e3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707
Validity
Not Before: Mar 2 02:00:28 2026 GMT
Not After : Mar 3 02:00:28 2026 GMT
Subject: CN=b47959ed925db03ee431266ef3dde8f983182b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:71:f6:98:45:ee:7d:79:23:3a:b1:8d:85:ad:
01:e3:dd:45:23:ab:20:1d:8c:44:21:65:6e:25:4d:
1f:af:f6:cf:2b:2d:b2:d6:98:97:c1:e7:9d:e3:29:
ec:d3:d9:e2:d6:36:f4:dc:3c:77:20:4a:54:5b:fe:
0d:5a:9f:5d:39:d2:20:46:b4:aa:3d:10:e1:e5:0b:
7e:e9:ea:61:1f:be:b9:d9:ff:61:3e:63:5b:6f:7e:
50:7d:3c:a2:a9:e5:15:13:8d:58:47:26:ad:7b:d3:
22:3d:8b:e4:e1:24:59:7f:ce:ff:69:8b:3e:c8:95:
43:13:cd:ea:02:48:a1:63:63:90:d0:12:ac:84:6c:
21:8d:a5:ca:78:89:1c:71:74:fc:34:9b:0e:d5:ae:
86:a1:ce:6d:94:6b:51:55:eb:cb:5e:73:83:7f:07:
0e:72:b0:cd:fb:24:48:20:63:93:c4:31:bd:a7:a7:
c2:ed:ae:09:e2:34:e1:0b:ba:a0:4e:8b:9c:c7:a3:
43:39:13:b7:fc:ab:06:aa:a8:5a:19:31:57:6b:a6:
cc:3f:ce:70:2b:f9:31:69:95:df:e4:b5:2a:09:c1:
9f:fa:bc:1d:26:67:8b:fb:3e:e4:e7:22:98:55:17:
b8:13:af:fe:22:5d:a9:8e:15:f9:bb:3a:3f:0f:de:
a0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:79:59:ED:92:5D:B0:3E:E4:31:26:6E:F3:DD:E8:F9:83:18:2B:02
X509v3 Authority Key Identifier:
keyid:B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d0:e0:3a:b8:18:fb:01:b5:60:f9:01:f1:22:df:bb:ac:80:
dd:3f:2a:dd:61:07:8f:ca:08:27:82:2d:48:80:41:7b:12:93:
0d:c4:6c:f4:ff:bc:6c:00:b1:ef:90:d8:60:85:bf:3e:f0:88:
a3:85:09:b1:c4:bb:9c:54:a9:7a:fa:7e:33:45:b9:62:ab:35:
f3:aa:b3:17:f3:32:c1:5c:99:50:f0:b5:3b:c4:e6:17:7c:8b:
44:11:d3:8f:30:bf:8b:bd:42:96:2f:04:14:f2:d9:25:cf:8b:
0e:89:e3:45:36:d0:1c:ff:f6:4a:a0:60:40:b4:4b:32:66:25:
3e:18:44:89:48:98:98:b3:99:70:b2:30:c1:5a:d9:30:22:63:
45:3a:76:bc:09:59:26:c5:e7:ad:41:56:e3:e9:c9:e1:d6:ea:
f1:3d:81:ca:00:59:8a:c3:6c:c4:f8:bc:31:29:cb:e9:7a:60:
db:73:92:1a:bc:01:ac:e8:7c:ec:08:f2:72:3e:49:b2:83:ba:
80:d6:f5:82:4d:bc:36:ac:cc:60:db:30:f7:a1:ee:de:75:88:
25:cf:0d:75:e7:82:4d:88:95:8a:0a:25:58:96:b7:4f:1f:8f:
2b:b4:1d:f5:f5:6c:21:0b:54:d6:72:80:09:4f:d6:be:e7:11:
96:26:a0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:48:55 2026 by rpki-client