Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
File: tmDXgyCGDV7-cp4gi160sqvr4Hg.mft (raw, json)
Hash identifier: X7eLRT0z/04iJS0zb1Uagb9kxlFjQU0cfYPgVv9ErO4=
Subject key identifier: 67:2D:CF:42:7B:A2:35:1C:D8:23:F4:F5:8C:58:41:45:9E:20:DF:5E
Authority key identifier: B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
Certificate issuer: /CN=b660d78320860d5efe729e208b5eb4b2abebe078
Certificate serial: 019CACB5333E241B8E5CBC5055C426AF806B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
Manifest number: 0DFA
Signing time: Mon 02 Mar 2026 04:01:22 +0000
Manifest this update: Mon 02 Mar 2026 04:01:22 +0000
Manifest next update: Tue 03 Mar 2026 04:01:22 +0000
Files and hashes: 1: X6pYjNCT1x3fjR7JGwMJfRURyUc.roa (hash: UceIDyn+jwcbw63nv/eQWzveue9KS7VqyLWZzTKY0b4=)
2: tmDXgyCGDV7-cp4gi160sqvr4Hg.crl (hash: KLkyPE0J42+NJeyImJhicg9b4y2U2Sopbz6I4hpqKXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:33:3e:24:1b:8e:5c:bc:50:55:c4:26:af:80:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b660d78320860d5efe729e208b5eb4b2abebe078
Validity
Not Before: Mar 2 04:01:22 2026 GMT
Not After : Mar 3 04:01:22 2026 GMT
Subject: CN=672dcf427ba2351cd823f4f58c5841459e20df5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4d:c3:ae:75:bd:70:17:30:dd:43:e2:3c:ba:
eb:8c:96:38:da:7a:4d:e4:95:d2:dc:aa:a0:86:18:
7d:4d:bf:29:1f:d9:f9:d2:89:7d:95:fc:6b:18:ce:
4d:43:e3:39:2d:b1:a2:57:d3:91:19:e0:59:3d:93:
2a:eb:85:15:f6:b5:c7:88:3b:88:21:fa:2f:2b:52:
5e:a0:79:c0:fb:dc:ab:8f:5b:95:c7:38:f8:06:d4:
4f:c3:e0:82:2b:ba:7b:86:b1:a1:f8:58:9b:a7:02:
92:12:81:8a:a6:41:56:08:d1:f0:e0:0d:35:a6:cc:
3a:ba:47:2a:fc:e2:87:87:73:89:67:6a:49:49:df:
09:30:9c:67:8b:02:7f:56:bc:7f:ab:b0:34:73:dd:
59:e8:9f:56:fb:79:7b:1d:65:cd:7e:9d:9e:a2:57:
2f:29:ca:75:7c:85:d7:f2:ca:a1:9e:99:76:86:33:
32:76:3d:4d:43:4a:9a:ae:bc:54:e1:ff:af:cf:d4:
74:e9:33:e7:33:b4:72:d4:08:d8:2c:99:05:df:fc:
72:29:b4:d2:59:1b:77:19:f2:89:59:63:6a:8e:fb:
c0:14:ba:95:27:f4:7d:df:c9:26:42:d3:9d:4c:73:
9b:ab:4c:33:e0:ff:bf:73:95:16:97:6f:e5:fe:80:
8e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2D:CF:42:7B:A2:35:1C:D8:23:F4:F5:8C:58:41:45:9E:20:DF:5E
X509v3 Authority Key Identifier:
keyid:B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c9:7d:25:7a:51:f5:53:e1:eb:92:38:b6:2e:5b:1a:58:2e:
32:9d:1e:c8:fd:8a:25:c9:79:32:af:97:dd:20:6f:e2:65:c6:
58:ff:a8:fa:69:21:0e:b9:23:35:05:ed:d6:dd:e0:50:66:d5:
d4:c5:ed:d4:76:e1:56:53:c9:1a:3a:ac:00:d9:85:49:14:bb:
67:bc:8e:ea:e7:c4:a0:9f:20:41:0d:e0:4a:cc:f0:a9:72:a4:
65:28:4c:22:c6:70:61:58:6f:44:f6:04:41:08:05:80:5d:95:
54:bd:22:ce:40:24:41:01:c7:f4:37:40:fd:03:94:08:a9:d3:
71:76:2d:f3:49:4d:b5:9a:a0:dd:e3:c5:94:fe:b7:ec:78:f4:
da:8c:cb:84:12:b0:d4:9d:ad:ae:a4:49:c9:e1:98:b4:5a:27:
eb:0f:09:7f:d2:0f:53:d0:7a:80:fd:3c:67:d5:62:27:16:35:
e3:91:4b:0e:c0:d7:e5:a5:c1:1e:f1:cc:e4:52:65:4a:c9:d6:
1c:ef:05:ca:af:81:b1:54:2e:44:11:dc:04:64:70:b9:63:a7:
19:aa:82:7f:42:dc:56:c9:c8:d3:cc:13:79:35:20:d5:13:0c:
bc:13:d5:15:fa:0d:74:47:84:df:84:f7:46:13:f2:de:50:07:
e7:e6:ab:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:02 2026 by rpki-client