Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
File: TnzINx7SS6z2esqLkCzucGr8Yks.mft (raw, json)
Hash identifier: UK49e09CxV4x1Ru30hfPT4+6pEx2DTvt4gfemgQkiBI=
Subject key identifier: 25:C8:D9:B3:18:A7:3D:23:2C:17:69:37:42:B1:03:B1:66:F6:90:8C
Authority key identifier: 4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
Certificate issuer: /CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
Certificate serial: 019CAA2177A007D39AA9F05993B4F6012A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 16:00:45 +0000
Manifest this update: Sun 01 Mar 2026 16:00:45 +0000
Manifest next update: Mon 02 Mar 2026 16:00:45 +0000
Files and hashes: 1: TnzINx7SS6z2esqLkCzucGr8Yks.crl (hash: LJVcQN8/CIYbp1n6Wsc3KGH4/9YjnaATYgGHVrdQ10M=)
2: wlxifpAvi3KnZGmbDR-ny66_Gks.roa (hash: T7gVPusKxBgkDKZBte1yrg8sQCBMVaEOfioHHj0VULo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:77:a0:07:d3:9a:a9:f0:59:93:b4:f6:01:2a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
Validity
Not Before: Mar 1 16:00:45 2026 GMT
Not After : Mar 2 16:00:45 2026 GMT
Subject: CN=25c8d9b318a73d232c17693742b103b166f6908c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:39:28:35:11:7f:ea:87:3b:a7:b8:5e:2b:
7d:8c:0c:80:88:75:fe:b1:be:83:8d:41:f5:5d:39:
5e:a8:7a:a2:dd:21:5e:b7:36:25:7e:47:0b:50:21:
0f:b0:d4:06:be:56:a0:5d:2d:08:a0:da:e5:8c:f6:
b2:a5:07:ed:28:52:92:a5:77:72:a0:86:2d:de:19:
9a:1f:8e:da:21:f1:79:21:a2:ed:6d:d4:20:71:c0:
02:d7:82:54:b8:2c:db:ff:11:af:64:a7:2a:d2:45:
0f:49:a9:d2:ba:87:06:6b:3e:b8:8e:71:1c:cc:4e:
b6:c4:68:ab:0f:45:33:48:8c:e2:ee:8b:ad:26:83:
41:41:a0:3e:57:c3:20:7d:f1:18:83:44:4b:2d:4c:
4c:16:47:63:ad:a3:c4:d7:c2:9c:e5:87:22:97:2d:
b1:b1:e1:ea:d7:0f:98:50:a2:83:c7:be:4e:ed:0c:
cd:73:75:43:68:d9:ea:16:d1:d4:bb:32:f6:32:7e:
6d:87:54:5e:dc:c6:8e:08:7d:21:58:57:4b:e0:48:
d9:07:20:34:dd:6a:2f:a3:f3:ef:60:be:36:ef:1f:
5b:8b:b8:de:30:7b:23:87:ea:6d:2d:29:4c:30:a3:
1e:68:a2:32:54:a0:8b:91:f7:ae:d7:74:78:97:17:
4a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C8:D9:B3:18:A7:3D:23:2C:17:69:37:42:B1:03:B1:66:F6:90:8C
X509v3 Authority Key Identifier:
keyid:4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:31:d3:1c:95:f8:df:97:39:e2:fa:cf:81:86:be:4d:da:70:
6e:49:6b:6d:df:24:71:87:fc:43:c6:54:c9:a6:52:00:e3:cf:
80:9d:e7:3f:de:4c:42:56:fe:c3:fd:8f:bd:0a:e1:47:c0:b1:
70:c6:03:4a:ac:d4:ba:fb:02:59:47:fd:33:b8:c6:3e:96:9b:
35:31:04:66:75:85:1f:22:4f:01:50:28:02:80:16:dc:97:0e:
ab:eb:dc:28:3e:3d:f9:f7:71:f8:3f:77:9e:6a:e7:e2:85:10:
95:77:76:e1:2e:25:2d:08:37:ef:4d:f2:c6:bd:aa:69:f8:7c:
07:db:c8:27:24:24:95:7d:83:89:4a:5d:0a:b4:44:f3:c9:46:
05:8c:3c:52:dc:de:09:19:05:d4:1a:6b:98:f5:b5:2b:74:6c:
c8:54:15:fb:91:7c:a6:bf:08:7d:2d:c2:80:6b:e8:92:5d:6f:
30:2e:77:0d:c0:1e:af:1b:bb:68:e3:64:4e:75:b6:b0:f7:45:
36:ed:38:a0:91:78:10:b7:70:c2:c3:b6:b3:01:44:1d:a5:bc:
e2:94:2d:58:c6:f7:74:8d:da:5b:c6:9b:3f:3f:dc:fc:56:35:
d4:27:2b:1f:d5:2d:48:5e:27:24:0e:1f:63:d5:79:4c:14:98:
29:47:95:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:28 2026 by rpki-client