Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
File: tn8bh-Z1L0VDm4UozJaLR3CloPs.mft (raw, json)
Hash identifier: mEgbOw9yU/dd5wuW9MQXZNt6l3f/qLeQBCvvYsl8q64=
Subject key identifier: 4A:8E:EF:27:6F:EC:6A:55:3F:D6:72:3F:D2:CC:E5:B9:34:2C:07:9A
Authority key identifier: B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
Certificate issuer: /CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Certificate serial: 019CAB34743723F3E9896699EFE91A5FB995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 21:01:07 +0000
Manifest this update: Sun 01 Mar 2026 21:01:07 +0000
Manifest next update: Mon 02 Mar 2026 21:01:07 +0000
Files and hashes: 1: LQJRQQjbwBZBO6fcDK7TBARIRcA.roa (hash: kgMdOcv0hribs4xM8yAxDMw6nXQ/d8F0OHR9C1YIdKg=)
2: tn8bh-Z1L0VDm4UozJaLR3CloPs.crl (hash: twAXFy6LLzbsF95ifEzOtdY7nPOBbLBZ/xqlNVFo3rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:74:37:23:f3:e9:89:66:99:ef:e9:1a:5f:b9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Validity
Not Before: Mar 1 21:01:07 2026 GMT
Not After : Mar 2 21:01:07 2026 GMT
Subject: CN=4a8eef276fec6a553fd6723fd2cce5b9342c079a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d3:73:41:4f:d7:b3:67:77:1c:9e:bc:bb:04:
9b:3e:26:8f:b4:b3:47:89:0d:01:a5:fe:89:14:58:
69:7e:63:4e:5e:e3:12:7b:d0:60:75:23:64:5f:7b:
f6:7b:d5:e9:72:ba:86:5b:57:e6:ff:b6:c7:ed:f7:
ef:ed:1d:bd:90:27:8b:61:de:2b:13:b6:fb:ff:c8:
c9:da:c9:a2:ea:e5:67:b5:c9:ac:ec:29:0a:23:c2:
ac:ba:83:7c:0c:c9:3b:12:e4:e4:cb:b5:be:a7:48:
b0:b5:fa:67:9b:ae:e3:34:4a:a2:73:4b:a4:37:8d:
a0:7c:79:49:98:54:4c:71:2a:0f:d9:c1:e1:41:8a:
cf:0c:7b:3b:ff:de:cd:83:62:77:e5:4f:45:f6:dc:
eb:1b:83:6d:be:90:4e:85:e9:d0:30:3b:49:81:e4:
3b:73:0f:ea:36:14:c9:92:36:78:40:e6:37:01:e3:
d0:61:e5:a8:c1:57:d0:d2:56:c2:8a:51:fc:15:2d:
74:e3:cb:5d:ad:90:a7:ce:fe:d5:01:b1:8e:1d:ad:
c1:f8:60:77:d9:33:2d:03:56:13:7f:d0:1a:ac:33:
6e:2f:ca:38:2b:eb:00:51:18:12:c4:af:83:7b:a9:
aa:01:e5:59:94:bb:cd:c0:88:8a:96:90:41:ac:a1:
7a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8E:EF:27:6F:EC:6A:55:3F:D6:72:3F:D2:CC:E5:B9:34:2C:07:9A
X509v3 Authority Key Identifier:
keyid:B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c6:8f:44:0e:1f:31:e0:2b:86:be:92:27:b6:4b:15:81:34:
cd:fb:eb:a1:43:be:57:0f:97:1d:56:90:59:d0:a2:aa:40:fb:
3a:e6:f2:65:f8:c9:8e:8d:29:d9:c2:17:f2:8d:7a:ef:5a:3e:
65:a6:92:fd:47:99:ea:a8:e0:8d:b0:91:e9:86:50:14:9f:d6:
4e:b9:a7:d9:63:69:56:39:a8:64:c0:3c:77:4c:f9:8a:6d:6e:
05:fd:1d:7e:58:9b:86:e7:41:d2:d9:06:54:66:79:fd:1c:36:
84:73:f8:88:22:d6:1a:c3:67:5b:6e:87:d5:3a:ac:14:28:88:
e7:cf:3d:17:d3:c1:be:a5:2f:fb:19:e7:be:8e:b6:33:4f:9c:
8a:f2:8a:42:07:16:10:a2:ea:62:9f:88:99:c0:41:3a:79:57:
9b:bb:41:a6:1c:c6:7c:9f:c3:3a:a8:a3:e6:8c:b5:34:51:5c:
98:49:b3:87:8d:fc:e5:75:6f:94:c3:f4:fc:88:a6:64:08:5e:
c4:82:f5:c9:9b:de:ab:56:1a:58:a6:80:98:c7:54:dd:19:9e:
fc:dc:c0:9a:e5:71:12:d1:60:a5:94:6b:60:df:05:86:22:62:
b8:7b:74:83:08:24:30:4f:2d:ac:2d:e4:29:3b:92:86:79:27:
7b:2d:48:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:35 2026 by rpki-client