Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
File: TVg7b1bPCSco3lk62VKuoZzjGIY.mft (raw, json)
Hash identifier: R4O3RSy+tAzTFb7RW0FwzXqDMxDAYNIPzsGrHfHOH6o=
Subject key identifier: 6D:FB:DD:6B:FA:EF:6E:BF:56:B5:77:A2:76:78:C7:8E:B1:FB:F5:94
Authority key identifier: 4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
Certificate issuer: /CN=4d583b6f56cf092728de593ad952aea19ce31886
Certificate serial: 019CAC7E39BC509D220F06F29F60FC7C1E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
Manifest number: 179D
Signing time: Mon 02 Mar 2026 03:01:19 +0000
Manifest this update: Mon 02 Mar 2026 03:01:19 +0000
Manifest next update: Tue 03 Mar 2026 03:01:19 +0000
Files and hashes: 1: Js7glNIVHR31KzAH-Y9le6lg8Gc.roa (hash: 7RXrZN2yFu7MFj+qcU08ae6A+XIej9sHLn+Y/9HM9Vs=)
2: NXEJCiLPkkdBY9NTGhgdROtpXxc.roa (hash: UlDG/6GGWJgKzbG+s5oTy9rF68mX0nNsKBfB2sUaPZc=)
3: TVg7b1bPCSco3lk62VKuoZzjGIY.crl (hash: QX2bMo3L6vj+3v6oSz3Mw56HARTE354zDR1BrkLXazI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:39:bc:50:9d:22:0f:06:f2:9f:60:fc:7c:1e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d583b6f56cf092728de593ad952aea19ce31886
Validity
Not Before: Mar 2 03:01:19 2026 GMT
Not After : Mar 3 03:01:19 2026 GMT
Subject: CN=6dfbdd6bfaef6ebf56b577a27678c78eb1fbf594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cc:7f:68:cd:17:0b:63:12:be:48:83:11:0b:
22:69:ea:6c:61:b1:38:f6:62:a8:cf:42:5d:55:b7:
fa:fd:66:30:fe:e3:f3:1f:10:17:84:a1:11:b3:dc:
87:d3:db:0c:b1:62:c9:8a:94:fd:aa:54:c4:21:0c:
64:56:39:08:ea:07:0e:d6:a5:2d:12:c0:51:03:26:
ea:1d:cd:6d:07:8d:93:c7:05:af:8b:e2:85:e6:04:
26:c5:e7:d0:86:72:f5:0e:f7:58:99:e9:4a:d0:87:
fd:e9:a4:4f:99:5f:ef:bb:ed:39:90:ed:f9:2e:c0:
94:41:cf:49:5e:dc:82:78:cf:7f:2c:b5:b9:cd:0a:
18:db:65:3d:69:29:e2:22:ef:29:14:25:a6:43:39:
cf:ec:b0:88:87:aa:29:bd:b1:8a:80:4a:ed:7b:13:
bb:fb:18:d2:ed:55:4d:46:98:94:1a:01:0f:17:3d:
b9:1e:48:58:89:f5:ca:bd:18:29:c9:80:8a:6e:bb:
08:28:0e:73:2f:03:7a:eb:9d:a1:bc:69:1a:f5:73:
1a:07:a9:2b:6c:16:6e:d6:2f:1e:71:6c:21:0c:7d:
f8:cd:e6:82:a9:bf:3f:96:52:db:c9:c8:75:c5:c0:
53:f5:9d:d9:f7:9a:14:21:0a:50:5f:44:d9:37:f8:
bf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FB:DD:6B:FA:EF:6E:BF:56:B5:77:A2:76:78:C7:8E:B1:FB:F5:94
X509v3 Authority Key Identifier:
keyid:4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a6:d1:7a:09:0d:4f:d6:11:89:78:e7:bf:f0:53:79:95:ff:
36:d7:70:13:bf:a5:75:c0:f3:08:8a:9b:7a:5e:99:3a:b0:e6:
f6:f4:d5:51:25:a9:92:5e:b6:25:0a:88:3b:ba:4c:29:e5:1c:
11:2f:0b:0b:e3:63:73:a4:5f:7c:b9:0f:13:b5:19:c0:23:d1:
f5:94:5f:4e:40:71:4f:27:95:4a:67:1d:f1:90:c1:70:77:f0:
52:c9:91:46:04:3c:b9:88:da:79:94:5d:2a:46:79:62:e8:6c:
2e:45:e2:f8:fa:98:e2:a0:af:67:e7:65:71:6c:aa:ad:d1:1c:
1d:5f:33:ac:74:e9:ce:0c:31:57:b2:51:20:3b:5b:58:cd:e3:
6f:c0:94:f2:7a:12:46:32:2c:86:83:3f:14:6d:26:25:e6:a2:
6a:a0:85:9d:85:e0:d6:f7:9f:27:57:ba:99:82:79:ac:b6:75:
cf:39:ec:08:15:02:63:f3:07:5a:16:0f:e1:0a:7b:19:0b:9e:
f2:43:c7:45:66:5d:4d:d2:0e:83:a5:eb:35:30:75:60:62:b5:
bd:5f:09:e2:2a:69:2a:f4:45:d2:ed:14:ba:a5:fd:78:f3:3c:
cb:44:9b:59:cd:d2:01:ca:74:61:9f:49:b6:30:93:11:92:f5:
62:11:74:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:12 2026 by rpki-client