Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File: TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier: ANR8Kzds6ND35+GdD66UTK10RS61DdPzcTqpjISRLig=
Subject key identifier: 4E:2D:44:75:79:4D:42:98:D3:3B:BA:CD:0E:83:04:F5:B1:76:66:B6
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 019CAAFD2265F1AD4190A07406DBDF7FDDFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number: 1834
Signing time: Sun 01 Mar 2026 20:00:41 +0000
Manifest this update: Sun 01 Mar 2026 20:00:41 +0000
Manifest next update: Mon 02 Mar 2026 20:00:41 +0000
Files and hashes: 1: 87ELvGR-tVd6OIalv11-VasMdI0.roa (hash: GT+ViPlDKtnswlta2ucK3jOCqFPeg5F12bpU1G0NLyM=)
2: 9HtQbFiuMYK5vn6ZdJ9A8WN33CU.roa (hash: NhpPo4MiaM2h+3uIW+206u04bojlNWdCKr/u5d1izOo=)
3: EgoHat_Mmduzy9sVoMLljVSWe1M.roa (hash: sKWx6PYAthDawxft6PEnQMKdlybWEO/LK5TV06bp3aI=)
4: Kdv421FxArGX_lR7dnoK8dbBkd8.roa (hash: QF5wI0hLNiGqV5YB/2mk9biUU4gFL01FMlpDcSvN+Dk=)
5: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: 3LV490EIXI2BR5GYKOcMa6y4WUeNSv2huUO1zC8ijFs=)
6: VOy2pqg45DcbaU8g-AYkzB6uwX4.roa (hash: VFjQyoH7Ml5NUEDn/pVO3lEP5cH7fnzrRe/Tnl0alSQ=)
7: jueFlTq5Wpmf63P1qlwF3ekSIBo.roa (hash: 73q0Fc/38Tfq14N513XX+nWtiK95t2QQLqH0dSyYsFc=)
8: weCSLgcy81oriQwLxEbz5cBeJzg.roa (hash: TJPfh6TbLdnCL07UGvGbszVyYvuSMqDOujw1k7u6TFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:22:65:f1:ad:41:90:a0:74:06:db:df:7f:dd:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Mar 1 20:00:41 2026 GMT
Not After : Mar 2 20:00:41 2026 GMT
Subject: CN=4e2d4475794d4298d33bbacd0e8304f5b17666b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f3:75:22:fd:20:9e:a3:06:38:7f:64:a7:23:
81:bd:52:c5:62:c3:ab:18:89:c5:e8:64:9a:bd:75:
e3:12:a4:48:d3:6f:c6:d0:ea:29:d0:ae:1b:03:6b:
e8:24:61:e5:11:76:0f:1b:06:a3:5c:b1:b7:6d:97:
33:17:58:ea:25:df:d6:e8:55:49:4a:92:9e:14:52:
33:21:c7:1b:72:8f:11:0f:29:f7:27:86:e0:4e:01:
4a:f7:fa:3a:2b:46:4c:ec:1c:1b:3d:fd:c2:1f:df:
34:f8:58:68:ac:9f:bb:c3:a3:6d:b2:83:66:a1:9c:
2e:a0:e0:6b:39:4b:7b:ee:9d:b1:ff:8a:c6:63:dc:
d2:3c:1e:f0:37:a9:86:6c:bc:14:41:48:ca:c3:82:
98:89:e4:8c:07:a7:3a:5c:20:06:2d:7a:70:59:0f:
42:d0:1f:3c:9d:8d:fc:c1:b0:8e:52:54:d7:e5:81:
6d:d7:07:80:77:87:66:f4:2b:96:bc:11:18:87:e1:
0d:24:44:95:64:b1:80:4d:3d:29:d4:03:8b:7e:4d:
c2:0a:ce:61:ed:b9:fa:06:a2:45:cb:d5:68:d4:dd:
ef:d2:f0:44:a2:03:b0:fb:a4:ea:6d:7c:14:44:9d:
9c:6a:03:72:ec:f5:f7:47:c6:e9:82:21:89:3f:7c:
36:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2D:44:75:79:4D:42:98:D3:3B:BA:CD:0E:83:04:F5:B1:76:66:B6
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0a:4b:50:c2:95:7a:71:65:d3:ec:79:38:76:54:15:9f:73:
55:b4:32:78:4e:07:2e:b5:e9:86:e1:f3:b8:9d:7b:93:c4:2e:
ed:2b:4d:43:a1:2f:26:26:32:39:75:4b:d1:25:2f:f3:8b:77:
41:8b:04:c9:7c:a7:0e:c1:47:59:c7:b5:b7:e4:a9:13:44:c9:
48:bf:1d:2a:30:83:72:83:cd:a0:4d:91:00:80:67:03:c5:f7:
ac:4b:5b:b3:8c:91:79:08:c7:71:03:9a:92:7c:f6:18:d8:b6:
2e:df:ed:07:02:e8:0f:b7:1e:50:66:20:d3:9e:a0:14:53:11:
3c:e7:22:26:ad:b0:47:d1:82:f8:7a:8b:71:48:1d:be:19:fc:
80:30:f0:f5:09:f8:ce:f6:2d:fa:d1:bd:cf:b4:6d:9d:06:1b:
13:7f:31:d9:41:42:65:5f:32:4f:30:17:86:6f:33:7e:fb:6b:
84:de:cc:b1:1e:e9:c5:77:b9:15:02:a3:f3:71:87:d0:02:6a:
9d:d1:47:c4:01:15:b5:4b:4a:72:b9:f8:a3:bd:47:14:e4:68:
55:52:21:cf:43:f7:cd:44:79:7d:83:96:22:28:de:f5:d1:cd:
a3:3e:cf:4d:19:fb:ff:05:eb:f4:ad:73:47:3a:05:55:ef:ba:
9e:3d:2f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:44 2026 by rpki-client