Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File: TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier: bJ/43F7ImFsNRkIC5N2gJhR/3Okc+DGtvyxFODyBWNY=
Subject key identifier: 59:14:D0:1E:9B:50:B5:79:8B:CA:32:4D:47:8B:8D:A0:6A:F4:B7:BE
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 019CABD94F2142C622953DB0D620ACCC2140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 00:01:11 +0000
Manifest this update: Mon 02 Mar 2026 00:01:11 +0000
Manifest next update: Tue 03 Mar 2026 00:01:11 +0000
Files and hashes: 1: NU0khScwjPjv2Td0G2zhVpmilbA.roa (hash: AeqeiYhPTRBagvHIsxnzHVAbHQ3SfkNkz9Z07JIdpsg=)
2: QRtiZIJ3lC4wddKs5UQgizYT0KY.roa (hash: lrhTL8oElij8rm8reXnXmQ+K5/YFB6C+f/8MDpdyFUU=)
3: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: Fyvpr4um47uZLloP8wszGCej/xqhc1wg9OO2wh0INVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:4f:21:42:c6:22:95:3d:b0:d6:20:ac:cc:21:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Mar 2 00:01:11 2026 GMT
Not After : Mar 3 00:01:11 2026 GMT
Subject: CN=5914d01e9b50b5798bca324d478b8da06af4b7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0c:16:d0:2c:55:ff:14:26:64:32:62:35:22:
2c:c6:90:53:24:55:38:64:5c:5c:c6:27:ae:79:79:
10:6d:ba:74:92:4b:11:18:c6:87:eb:d5:2c:9c:7d:
a3:1e:5e:8a:60:ee:ec:9a:5d:11:87:ba:37:af:b7:
d2:7e:b3:b3:4e:d3:f1:00:8f:77:7f:bd:33:c0:8b:
eb:d6:62:5e:b0:84:4e:3a:29:5c:a0:e3:2c:76:60:
9c:d9:ab:17:ce:59:22:a6:2d:fb:1c:67:95:ef:dc:
a6:1c:c8:97:b3:1b:19:9d:43:57:c2:86:f8:0d:a4:
17:03:b6:8b:55:dc:89:b3:03:e8:47:07:91:af:4b:
e4:c5:21:d2:1a:b6:10:3f:39:b4:8f:23:30:6e:50:
9c:cc:1a:0c:0f:22:d7:33:92:02:88:29:e2:5b:b4:
e5:d9:db:0a:06:2e:16:51:46:aa:7e:c0:a1:4e:90:
d8:f3:90:2f:cd:3a:85:61:03:cb:55:f0:3d:92:4c:
a5:c5:9d:91:e0:c2:f3:92:7c:6d:29:2c:61:f7:45:
fa:58:b9:3c:1c:7d:7a:61:47:7b:c9:9a:89:c0:af:
79:f1:b2:58:62:0f:dd:07:95:b7:e6:ca:03:be:26:
42:42:e8:55:31:1d:e8:69:68:08:4f:21:ab:a3:9b:
71:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:14:D0:1E:9B:50:B5:79:8B:CA:32:4D:47:8B:8D:A0:6A:F4:B7:BE
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a9:16:da:52:39:14:94:34:15:52:1f:d0:5e:f9:87:1f:9f:
57:08:5a:f6:79:6b:aa:31:53:3f:80:d4:d4:eb:b3:dd:ac:d2:
9e:3e:49:21:45:cd:64:a6:cb:38:16:1b:da:55:c5:89:39:60:
94:d0:ad:cd:80:2c:54:f1:86:f1:0c:97:16:7c:38:6b:51:75:
79:a2:d6:11:fb:5e:df:70:65:13:02:26:bb:c8:36:96:1c:88:
ab:df:50:b5:f5:8e:34:cc:23:63:b8:13:b2:67:a7:1a:ea:f3:
62:97:c8:9f:ee:e0:c3:f4:8c:be:04:16:d9:a1:97:97:c1:b2:
52:9d:19:1d:95:f8:46:3f:be:75:07:51:78:87:44:c9:1d:2c:
ec:79:d5:ab:2b:94:2f:50:4f:4c:64:a0:45:a5:46:9b:0d:f2:
99:09:1a:1f:e2:60:c9:c9:c2:71:55:6d:a9:61:7a:a3:ca:40:
ae:c2:47:58:d7:31:33:63:8e:b8:a5:8a:96:7a:ec:ad:cb:f0:
fe:ea:33:17:98:3d:42:6d:5a:31:e8:17:02:20:c1:6c:e2:a6:
ed:a4:09:87:57:bc:9a:6a:f5:f4:4c:91:7b:17:b6:a0:c0:5f:
6e:3c:8c:42:35:87:22:12:14:c7:6d:c2:9e:f2:52:1b:60:0a:
f3:17:34:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:32 2026 by rpki-client