Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
File: tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft (raw, json)
Hash identifier: 8bZxL4ZV6b50g9upL6dzZDG35MA8LKGTFi5qQdum/Ug=
Subject key identifier: D2:D7:30:1F:99:F9:0D:B9:01:93:B0:27:61:AB:02:C7:C2:BB:78:F3
Authority key identifier: B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
Certificate issuer: /CN=b46320188098520c366277f749a4f77a1d444439
Certificate serial: 019CADFE63AC1A5F0F4D9D0419E1430D75B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 10:00:55 +0000
Manifest this update: Mon 02 Mar 2026 10:00:55 +0000
Manifest next update: Tue 03 Mar 2026 10:00:55 +0000
Files and hashes: 1: cD_uFT-kTapfuxpK7AHJ-T-GM5U.roa (hash: xnN2+r5sXxZBGsxlc2VxrhNLd6wrjJggfMUTLHByC7E=)
2: tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl (hash: 4wl40rQ5WF7CMDUz+LS6fB29d/dVHklc8SVfpsch4Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:63:ac:1a:5f:0f:4d:9d:04:19:e1:43:0d:75:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b46320188098520c366277f749a4f77a1d444439
Validity
Not Before: Mar 2 10:00:55 2026 GMT
Not After : Mar 3 10:00:55 2026 GMT
Subject: CN=d2d7301f99f90db90193b02761ab02c7c2bb78f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:ed:93:20:12:a1:be:ce:f7:18:8b:f2:af:
69:21:b9:e8:d8:60:3e:35:4e:ee:df:78:35:f2:44:
57:72:af:c6:02:4e:92:cd:ab:72:0a:1b:99:e1:e2:
3d:b3:a1:5d:9c:14:fb:a5:ea:0b:96:ed:45:b5:39:
2f:32:1a:5b:f7:ed:ee:86:4d:37:25:54:eb:c1:48:
e9:8b:48:f2:1a:24:13:f5:9c:8b:d2:4b:80:53:1d:
ec:e2:78:4b:6c:d9:87:32:ed:0a:9e:b0:60:d3:1d:
de:70:1b:b3:c9:2b:3a:05:ea:dc:cc:8d:ed:dd:d7:
95:14:c2:dd:a0:4c:5e:8a:26:9c:44:d7:bf:5b:fc:
0d:9c:9f:38:3b:94:a4:47:21:ee:67:82:05:00:d0:
1c:55:09:1a:48:60:06:e8:dd:7a:5e:28:04:da:ea:
02:ab:92:5d:22:52:93:dd:5d:4e:0a:9e:e3:e1:81:
5e:ee:e2:25:2d:3f:ef:7a:05:0f:2f:49:97:86:03:
0b:ed:42:d6:68:36:51:51:3b:f9:c9:2c:31:88:34:
4e:99:89:6e:18:b2:4e:83:67:d9:6c:06:1b:01:ce:
bc:75:53:72:c3:14:e1:4b:a4:ee:6e:56:3f:2c:8d:
72:14:fe:2c:35:ab:7a:97:e5:35:81:33:a3:54:a6:
67:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D7:30:1F:99:F9:0D:B9:01:93:B0:27:61:AB:02:C7:C2:BB:78:F3
X509v3 Authority Key Identifier:
keyid:B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:58:73:e6:c2:20:bf:35:d4:fd:0d:85:70:ea:f6:16:b2:6e:
96:97:1b:e1:a2:91:46:23:bf:4d:0f:fe:30:bb:eb:3d:f2:d0:
bc:1e:39:37:ab:c6:93:03:51:a8:35:c9:43:1e:a2:c6:3e:37:
81:93:fd:e5:cc:dc:0c:7d:cc:65:00:71:37:f4:df:b8:d8:14:
52:f5:50:de:b1:59:e5:c9:9f:00:60:f9:ab:25:c7:a3:af:6d:
08:d7:e3:77:4c:61:00:6c:df:3a:ef:b6:c8:91:15:52:3c:ec:
36:5e:9f:c1:05:2c:eb:9f:e1:b1:67:f7:7d:79:f1:8f:5d:27:
0e:d4:7c:5c:46:7b:cd:f2:69:fa:e5:d8:38:6c:da:99:9a:4c:
b1:61:91:c4:cf:3f:c7:81:a1:71:22:bc:b6:61:b4:74:de:4a:
b3:72:36:93:c0:6d:eb:5f:95:06:fb:33:61:f4:54:21:4c:7c:
e2:38:15:d6:f0:f7:a5:34:5b:9f:b2:90:1e:4b:bb:a1:95:38:
c9:bc:15:3a:a0:f1:c5:c6:97:37:0f:5e:9e:1a:7d:c1:20:3f:
6d:2a:40:77:22:97:bd:40:c4:15:ee:fb:16:43:c2:6f:c9:a7:
11:fe:ad:09:a8:5b:9c:ef:75:a3:4a:4a:2c:82:8f:d4:82:c3:
d2:dc:96:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:52 2026 by rpki-client