Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
File: tTZGbQNoUuL3N2reE4BGFDuZTMM.mft (raw, json)
Hash identifier: BMmehO3i5X+UdIOfqIDzPwy729NsAZpBqVHNF1smHL8=
Subject key identifier: FF:78:2C:30:27:1A:05:19:3D:F3:65:7F:08:58:9E:7D:12:59:73:08
Authority key identifier: B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3
Certificate issuer: /CN=b536466d036852e2f7376ade138046143b994cc3
Certificate serial: 019CABD91BCEF406596279A627CB8CFE51E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:00:58 +0000
Manifest this update: Mon 02 Mar 2026 00:00:58 +0000
Manifest next update: Tue 03 Mar 2026 00:00:58 +0000
Files and hashes: 1: jvm0Jb2t-rhkSp6peUmj4YlckCw.roa (hash: HiAafUtSRh0L7KEZV70WFw7qC8V7XryLQINqzFQNUHA=)
2: tTZGbQNoUuL3N2reE4BGFDuZTMM.crl (hash: HI2aa33ecVNh5rlaD5Nt0RngTqPhPPsYGI80zf1hjWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:1b:ce:f4:06:59:62:79:a6:27:cb:8c:fe:51:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b536466d036852e2f7376ade138046143b994cc3
Validity
Not Before: Mar 2 00:00:58 2026 GMT
Not After : Mar 3 00:00:58 2026 GMT
Subject: CN=ff782c30271a05193df3657f08589e7d12597308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:74:7c:7e:23:5c:83:6c:e8:f2:7c:c0:c4:
3a:18:cc:b0:88:b4:65:7a:77:98:35:9a:de:4d:dd:
3f:13:31:a2:3e:41:76:44:14:cd:4e:f4:4f:8f:08:
3b:51:67:b3:23:b9:30:c0:c8:12:53:61:27:be:b2:
ca:81:63:1a:36:36:2b:6c:6a:30:aa:c6:c0:14:fd:
3d:45:cc:64:90:0d:0c:20:fb:5c:a7:d3:c4:da:46:
b8:d9:e8:d8:8c:94:16:45:ff:b5:13:b8:60:12:b2:
af:c7:67:83:d1:d7:9f:ae:2f:2e:86:98:96:44:44:
1c:93:86:20:ed:ff:7a:bb:4d:b0:1b:4b:47:6d:f9:
42:bc:d7:ef:46:ae:04:c0:65:43:83:c0:94:65:3c:
0f:85:c5:66:ce:e7:cc:a1:be:f5:0f:7e:98:52:ed:
e9:d5:1e:8c:ba:c1:e1:58:0f:4d:76:c3:37:1d:53:
a5:ef:37:87:6f:06:44:eb:b0:15:fe:f2:0f:25:56:
b3:31:2a:eb:66:30:fa:c1:73:12:a9:9a:41:df:c3:
90:ea:93:44:28:a6:b0:f2:c1:5a:31:1c:38:25:8b:
d4:1b:0f:09:a7:a7:c7:fe:bf:28:42:5f:64:4d:28:
fc:1b:34:66:a5:3c:05:21:09:16:be:5e:b8:6d:b1:
39:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:78:2C:30:27:1A:05:19:3D:F3:65:7F:08:58:9E:7D:12:59:73:08
X509v3 Authority Key Identifier:
keyid:B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b4:4a:8f:a5:59:4a:58:8b:63:73:4b:c4:ab:cb:54:63:44:
a9:46:8c:32:51:7e:f0:0f:ba:05:5c:2e:be:12:17:bd:b0:69:
b7:44:67:fd:45:0b:53:66:7b:9e:25:62:3a:b4:4b:aa:60:c7:
03:e6:31:4a:e2:21:39:1a:04:09:df:79:eb:63:8f:48:a9:4e:
f1:92:90:a1:8e:36:6d:d7:56:17:1f:39:63:fe:a5:71:44:6e:
91:82:ec:f9:d2:a6:b1:e0:a0:5b:10:9e:e7:23:c7:88:48:8c:
0e:0b:43:f6:ad:b3:a2:36:d4:51:bd:3e:85:83:2c:22:41:f1:
17:c4:41:7c:b9:7d:8c:41:42:eb:46:85:03:5c:89:98:fd:98:
a9:06:32:db:63:62:b8:c6:a3:1c:d9:02:3c:8c:42:d2:15:6a:
03:f7:5d:60:08:48:d3:a5:50:6c:99:31:53:33:c6:06:66:fa:
e1:39:c0:03:97:23:0f:c2:70:fe:c0:4e:00:8e:46:96:fa:09:
bf:da:60:a8:5e:ab:55:dc:a2:eb:5d:3f:7c:47:f2:68:70:8f:
fe:10:0d:0c:b6:a2:fa:f1:74:bb:64:87:a3:96:09:f8:4b:de:
f8:88:ef:09:c8:6e:71:80:df:66:de:41:76:c2:f9:23:85:3f:
68:f0:24:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:57 2026 by rpki-client