Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
File: TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json)
Hash identifier: ARHi9vE/hSAL4GJ83Ql9FThZVbRCzgI8RkUx6d0rQ9k=
Subject key identifier: C4:C0:43:4B:BE:00:20:BC:18:D7:A6:7C:E8:80:EC:A7:8A:A1:F2:DD
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Certificate issuer: /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial: 019CAD5935E24FEDAA635FC8D89C8EADBFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
Manifest number: 12FD
Signing time: Mon 02 Mar 2026 07:00:30 +0000
Manifest this update: Mon 02 Mar 2026 07:00:30 +0000
Manifest next update: Tue 03 Mar 2026 07:00:30 +0000
Files and hashes: 1: SFGE70vQYmz_oKTtZMgB-YKUyZc.roa (hash: lZ0OnAmHAxbwpz0Bf+bKQq6tPOf7KpsPHIF+YP1ggzc=)
2: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: P4Gcmiml4l1rVuaHaPVWVY98yaOpgN3Whig/MrtGHKw=)
3: eHNuPU6iYgVIfZ9NIp8A3552y-I.roa (hash: AOM1Ajc5ONgwd+E4wuOhZtP8/uws9RFZszPyOYWcL2Q=)
4: vP7G0LDj9js2uqV_dVx329H3yeM.roa (hash: fyHdxLq/9tcpLwgIyk0ErgVx3QqPOxT/MFLUCo0yJ0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:35:e2:4f:ed:aa:63:5f:c8:d8:9c:8e:ad:bf:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
Validity
Not Before: Mar 2 07:00:30 2026 GMT
Not After : Mar 3 07:00:30 2026 GMT
Subject: CN=c4c0434bbe0020bc18d7a67ce880eca78aa1f2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:29:ed:2e:33:65:4e:20:07:b1:aa:33:3f:
32:70:fd:0b:18:35:ac:8d:d6:77:60:47:35:e4:49:
01:1b:94:27:6b:f0:d1:42:4a:13:12:98:97:1a:c4:
eb:a7:83:17:82:fa:9e:c4:bb:8e:70:ef:16:c9:a2:
9a:c2:ec:70:c3:0e:c9:57:07:fc:b1:80:99:d8:d6:
e1:65:e4:15:3e:8a:fa:d8:e2:6a:ef:a4:7f:8a:36:
2c:a0:ad:a7:bd:4a:0c:e9:37:8a:cc:d4:c4:f1:cd:
22:0f:a2:96:0c:ec:f3:9d:06:a5:0e:f3:15:f8:36:
31:dc:38:e8:ca:33:24:74:2e:b9:5a:8d:13:89:c3:
fc:27:d8:48:a3:6c:ed:c4:07:57:b0:e8:e7:03:66:
fe:eb:e4:d2:18:ac:c0:9e:ab:8f:5e:f0:ca:6c:b1:
21:ed:ec:bf:24:07:2f:b2:3c:87:c0:28:5a:07:0d:
37:cd:fc:2e:ba:90:d6:c0:67:b6:5b:22:da:a7:a2:
ff:1b:8e:19:c8:9d:4b:c2:66:2a:c0:44:03:e2:50:
75:a2:c1:40:85:98:32:ea:04:62:7b:18:43:84:45:
eb:f9:12:e3:a6:f5:59:11:8e:c3:5b:f7:a3:25:55:
46:42:56:24:98:9e:cf:97:f3:e0:b2:19:cf:f3:bf:
d1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C0:43:4B:BE:00:20:BC:18:D7:A6:7C:E8:80:EC:A7:8A:A1:F2:DD
X509v3 Authority Key Identifier:
keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:09:46:4b:ff:dc:34:4e:da:ba:fd:aa:30:4c:6e:df:37:d1:
f4:b8:d9:f3:00:ca:40:40:1b:49:46:c9:d2:e1:3a:ad:66:52:
7c:9e:fe:75:3a:c6:af:c2:f0:02:ee:f2:c0:41:f3:35:08:0c:
58:b8:ea:bb:7c:dc:42:4c:8a:c4:7e:aa:6b:96:ab:c0:68:63:
de:b3:1f:ba:02:5f:da:80:d9:74:0b:af:80:24:1d:af:4c:54:
25:40:20:8b:21:e2:6e:8e:fd:23:9a:53:44:15:67:79:d6:d0:
2b:44:a8:3c:50:ec:56:d8:d2:b5:9b:d7:c7:29:4a:4f:0f:f1:
fe:29:f5:f0:9b:e8:32:fe:3a:08:91:c5:17:44:1a:e9:b6:d8:
8e:5a:25:a4:0c:ea:11:2a:95:42:67:7a:d2:b7:26:36:12:fb:
3f:ab:20:b6:e2:06:16:70:6e:c5:79:6c:10:34:58:5b:fc:56:
db:1b:0f:4c:a4:60:10:16:d9:13:ac:ff:ce:90:66:e5:c4:11:
c8:66:41:83:dd:f0:72:99:6e:34:ce:a0:98:39:f7:33:74:54:
1b:f7:ec:f6:73:6c:a9:bf:c0:0d:cf:ec:3b:1e:c6:07:17:31:
87:4a:3a:f5:4e:18:41:bc:5b:36:6f:29:8d:1e:9c:34:41:1b:
72:f0:41:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:52:23 2026 by rpki-client