Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
File: TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft (raw, json)
Hash identifier: O8ATa0UOXOkhbwl+QXK8vE9/7PyUC118X18byaj49Fc=
Subject key identifier: 5C:C5:BE:18:88:2A:2E:D4:7E:82:62:E0:E9:16:2B:F1:F4:B6:4B:1D
Authority key identifier: 4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
Certificate issuer: /CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Certificate serial: 019CABA26721BA2F79F53B7A0B7EA35F6BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
Manifest number: 1532
Signing time: Sun 01 Mar 2026 23:01:12 +0000
Manifest this update: Sun 01 Mar 2026 23:01:12 +0000
Manifest next update: Mon 02 Mar 2026 23:01:12 +0000
Files and hashes: 1: TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl (hash: QKq5Z31ytf5WDsZP3Jw8SPZgPH/YUPYDLO1tLaknynE=)
2: qhbgvCCuTYLs-T9K9IfIIvF38MQ.roa (hash: WdrjO4xvUh7bWyfHcWR8FrUXBHsQMBxvR3LgVLProrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:67:21:ba:2f:79:f5:3b:7a:0b:7e:a3:5f:6b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Validity
Not Before: Mar 1 23:01:12 2026 GMT
Not After : Mar 2 23:01:12 2026 GMT
Subject: CN=5cc5be18882a2ed47e8262e0e9162bf1f4b64b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:94:22:55:b2:63:63:f7:7c:5f:cc:1f:64:
fc:8f:34:ba:ba:cb:e0:b8:49:d6:35:70:1c:cf:cf:
16:11:8b:0d:23:50:8d:f4:09:79:43:c6:71:fe:63:
0b:c4:d0:f0:f6:a3:1d:ef:81:2a:ea:d5:06:a5:28:
88:a7:01:19:26:e0:c0:a6:fb:b9:9f:f9:bf:89:c9:
f4:41:9a:d5:35:ac:9a:75:cb:81:3b:bc:f4:b7:8b:
22:44:3a:92:8c:35:04:32:0e:fb:59:80:2d:51:94:
d5:7c:c4:95:c7:6e:98:86:42:a2:1b:d5:dc:70:58:
69:37:0a:67:57:dd:fa:f5:f2:16:d6:a3:71:d8:cf:
6f:c9:cc:38:d7:8b:7f:06:5f:13:73:d7:b1:44:70:
a0:92:a7:37:41:ab:8e:9a:7d:30:b7:66:22:82:bd:
37:ae:58:7c:03:9a:cf:46:7f:6e:3e:eb:28:a8:78:
e3:54:85:bd:5f:61:df:8b:c6:65:95:30:8f:2e:a7:
c3:4c:3f:cd:2e:db:cc:4b:df:e3:63:5d:a1:05:3f:
b7:54:67:5a:a8:e7:63:a0:54:f0:4c:d9:83:a5:82:
4c:59:3d:d4:47:69:2a:88:89:be:42:6a:75:0b:e1:
7d:76:8b:7d:f2:a2:da:83:d2:12:55:5d:ef:fb:bd:
0e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C5:BE:18:88:2A:2E:D4:7E:82:62:E0:E9:16:2B:F1:F4:B6:4B:1D
X509v3 Authority Key Identifier:
keyid:4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:77:08:bd:cf:7a:24:9d:a4:0a:58:ca:2e:73:39:6c:64:f4:
c9:03:72:73:f3:07:2c:74:83:dd:5d:52:3c:d7:27:d9:1e:e0:
d2:5e:5c:ac:e0:8d:70:db:9e:5f:b5:a3:f4:43:d6:b2:71:a6:
4e:3c:d6:63:18:15:2a:bd:a6:60:d3:21:5f:4d:22:0b:82:0f:
12:f2:63:d2:8e:82:ee:ef:47:cc:92:e7:6a:7f:68:d2:b1:3d:
c9:27:c6:2b:70:f2:d3:f7:d7:64:22:48:67:32:54:d6:ad:ff:
34:c4:12:ad:20:fa:da:d0:98:c0:6c:ad:71:cc:13:38:b0:3d:
c3:2a:20:af:91:76:47:35:99:52:37:7e:99:cf:6a:ac:c8:c8:
13:e2:cf:d1:fa:d0:41:4a:53:2a:74:83:ea:43:91:82:3d:8d:
77:67:4e:6e:54:a4:41:af:47:57:4b:c7:6d:ed:7d:d4:07:3a:
bb:ae:dc:9c:ce:18:a2:85:d3:a5:62:f9:f7:bf:1f:71:e4:58:
34:c9:bc:54:db:3b:b0:b1:16:26:da:09:59:0e:b3:8d:93:a4:
54:65:b7:39:17:b3:a4:c0:92:0d:ff:ef:81:a1:4b:e9:72:6d:
73:84:e5:0a:77:2f:a8:ca:66:a7:29:a6:68:cd:db:5a:d1:a5:
e3:32:5a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:56 2026 by rpki-client