Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
File: Tj_pDw-taiXUa9fDNbki2gMbLHg.mft (raw, json)
Hash identifier: CXkpk+hDrusY7/fyzF6AwF/jvJ0m9TEr6QCxzEP+6e4=
Subject key identifier: FF:3A:08:D6:C4:25:DD:B7:FC:9D:21:A9:A7:4D:93:F9:E9:66:60:E4
Authority key identifier: 4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
Certificate issuer: /CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Certificate serial: 019CAB6B94147C867971B18F3CD0351A9B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
Manifest number: 0CEE
Signing time: Sun 01 Mar 2026 22:01:20 +0000
Manifest this update: Sun 01 Mar 2026 22:01:20 +0000
Manifest next update: Mon 02 Mar 2026 22:01:20 +0000
Files and hashes: 1: Tj_pDw-taiXUa9fDNbki2gMbLHg.crl (hash: U1be8+/NMkeu0mk7arRwDgEb3vFx8ACRYtu10+ihvL0=)
2: uglZN3e0ur2TkFYxywC2Q5oDa8c.roa (hash: W5cX7fhh2nzjYIuvg0tzN9PC2FGwU2Yio9kqI45+MPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:94:14:7c:86:79:71:b1:8f:3c:d0:35:1a:9b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Validity
Not Before: Mar 1 22:01:20 2026 GMT
Not After : Mar 2 22:01:20 2026 GMT
Subject: CN=ff3a08d6c425ddb7fc9d21a9a74d93f9e96660e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:05:8e:81:52:d3:d6:8f:0b:5a:9d:d3:21:32:
c0:ce:ff:58:b7:55:cb:aa:50:00:fc:a8:4c:82:67:
6d:c5:81:29:5c:2a:a9:9d:4e:c7:bc:16:86:29:9c:
0f:20:d7:c2:30:e5:15:ac:34:58:c7:14:a9:ee:79:
62:a9:29:6c:c6:bd:c1:0b:21:63:55:a8:14:37:ac:
63:82:67:58:96:60:de:31:5d:90:bb:4a:24:12:f6:
70:ad:6c:bc:5f:34:7f:cd:81:3b:7e:82:c8:cd:37:
6e:d4:2d:68:13:f0:e5:74:78:ad:d2:c8:4b:ca:d5:
8f:34:20:4d:cb:70:42:4e:75:10:c8:73:6a:5e:75:
7f:c8:46:bf:d4:14:29:b3:8c:6a:ec:a4:26:f8:64:
1c:2b:55:76:c5:ec:16:95:0b:68:08:52:35:97:d0:
79:94:37:c3:4b:23:e9:90:32:1c:1a:c3:04:18:4f:
a4:10:a1:84:e9:30:56:9d:66:48:3a:65:fb:d5:31:
92:48:db:fe:89:e8:87:a4:bc:1f:a4:71:df:c9:50:
45:ae:eb:cf:91:9a:13:34:e5:05:35:4a:64:7a:89:
ac:9e:d5:e0:9f:06:5a:b2:d6:ca:51:9c:9c:40:80:
7a:91:6a:f9:fd:c9:5f:17:95:ca:ef:16:6d:80:1f:
d0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3A:08:D6:C4:25:DD:B7:FC:9D:21:A9:A7:4D:93:F9:E9:66:60:E4
X509v3 Authority Key Identifier:
keyid:4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0f:f3:3a:55:c7:49:33:92:94:47:a3:35:88:f0:ae:26:8e:
ce:65:cc:41:52:81:7e:f2:0f:8f:7d:fc:19:78:70:68:3b:2a:
8a:79:44:7b:de:19:09:9e:f4:b4:5d:96:f6:5b:69:70:cb:ba:
3c:c6:28:76:2c:58:d6:20:e8:f4:8b:93:ad:d8:c4:e2:3e:e7:
9d:0d:4e:49:c3:fb:34:47:21:34:c2:ed:13:8d:cf:9a:15:1c:
d4:06:a8:29:39:b8:ba:57:a1:e4:5d:15:0c:95:3c:c5:21:18:
a4:08:2b:a0:53:18:9e:94:15:8a:ad:7b:3d:33:76:f2:14:4f:
af:0e:12:8a:c6:d9:38:0b:ab:fc:c1:cf:52:45:88:20:01:14:
da:30:3e:cb:e3:28:2f:3c:52:f3:a3:95:5a:02:04:39:b6:91:
05:07:f6:12:47:5d:18:fa:f1:b4:cd:73:2f:a9:e7:2e:3d:f4:
4d:59:85:73:2c:dc:08:f6:93:14:b9:6f:34:d6:2b:68:ea:70:
87:95:f8:39:db:ca:bb:54:aa:22:2e:a9:94:a4:2d:48:6c:9f:
50:e6:70:ac:1f:64:8c:c8:57:dc:1d:6c:c5:bf:69:71:fc:56:
23:8a:25:99:46:68:1c:40:12:fa:47:18:fe:0f:58:33:8c:06:
21:07:28:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:01 2026 by rpki-client