Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
File: TJMhPYj6h060Rg4sXPG7GpHakHg.mft (raw, json)
Hash identifier: roX277d7X1RkDfBICylGOKkW5YHD7qv4hwk6HDls66s=
Subject key identifier: 0A:06:08:E9:FC:67:96:A6:4C:10:71:90:42:69:4B:A7:A8:98:88:D8
Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
Certificate issuer: /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Certificate serial: 019CAA215E1DB074F5E03DDA3A50C0A0E540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 16:00:39 +0000
Manifest this update: Sun 01 Mar 2026 16:00:39 +0000
Manifest next update: Mon 02 Mar 2026 16:00:39 +0000
Files and hashes: 1: 1SMtyrFP6eFZxMb7PZMbKYGMJi8.roa (hash: XxgHh0JzLHhNi3/TyAFFwO5EFUtAwR/nBi3ICijq0Hg=)
2: TJMhPYj6h060Rg4sXPG7GpHakHg.crl (hash: VHkJkAhYjUQNWIPPU9SOpq7Eaf7mHPpg+msLC2gijmc=)
3: hcvV5X31DOlZw_gVMi_djA-Z_mg.asa (hash: WAnv7aq02dLiZbIe0+xzCaSba+xJWqlxkJbqWJcgVKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:5e:1d:b0:74:f5:e0:3d:da:3a:50:c0:a0:e5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Validity
Not Before: Mar 1 16:00:39 2026 GMT
Not After : Mar 2 16:00:39 2026 GMT
Subject: CN=0a0608e9fc6796a64c10719042694ba7a89888d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:02:b4:f5:a7:43:98:26:f6:d5:f6:bd:06:
2e:36:3c:08:d6:37:e9:f2:fb:d9:bb:8a:be:07:e0:
4b:89:60:c8:57:17:cd:b2:fa:83:b2:0f:2c:f8:46:
65:1b:63:fd:61:32:25:35:b3:5e:b6:1d:4f:7b:c7:
e6:14:7a:95:6b:88:95:29:23:2c:97:b1:ab:bd:0b:
50:63:18:df:3d:e9:b8:3a:1b:d0:90:37:ca:46:f9:
fe:25:ad:79:d9:b6:62:94:68:06:5c:1c:d9:de:b5:
b8:9c:ae:92:28:63:8a:34:91:98:ee:b0:41:61:4e:
dd:52:d9:5b:11:b3:48:6c:92:83:c4:6f:61:62:b0:
67:16:3f:62:f7:3d:cc:9c:ea:20:0e:70:0d:a6:cd:
43:ce:80:b9:c6:7f:39:3c:4d:3d:70:63:8e:db:80:
be:5b:67:4f:b5:ae:31:01:bb:e5:3a:12:6b:65:b1:
68:f7:f0:73:fd:38:2b:a4:2c:f4:94:00:cd:e1:0d:
ec:ec:04:f8:66:8d:62:69:97:9b:9c:be:fe:12:03:
08:d7:12:7c:79:73:d5:f6:6a:87:2a:fd:38:25:09:
71:1a:1b:54:0a:37:f8:46:87:08:4b:18:a2:01:4d:
98:d1:1e:5e:e4:b2:f8:a7:80:5f:ea:41:e6:6a:51:
d3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:06:08:E9:FC:67:96:A6:4C:10:71:90:42:69:4B:A7:A8:98:88:D8
X509v3 Authority Key Identifier:
keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:0f:9e:11:f6:d5:0d:88:59:38:d7:76:5f:1b:80:1e:3c:2f:
03:db:7f:0c:0b:b5:ea:d1:e8:4d:16:6e:19:54:e4:0f:1c:5a:
dc:b1:95:17:42:52:48:7b:54:85:67:80:2b:4f:e3:45:1d:09:
64:f5:ee:23:5a:61:fb:dd:3a:aa:7e:f5:b7:87:3a:3d:89:3f:
9d:b3:09:1f:ed:94:d0:ce:fc:36:e1:af:b0:c6:bd:61:55:a7:
b1:c5:5d:8f:4d:08:4f:3b:a1:9b:73:d9:17:da:f7:f7:1d:4d:
2f:ed:51:f2:d5:cb:57:c3:9c:2b:33:05:a1:c1:6b:84:eb:88:
f5:af:88:f3:69:b1:cc:7f:d1:08:64:7c:ee:5e:f0:d0:47:90:
4e:3b:40:b0:4a:92:86:c6:e5:a9:41:55:33:1c:0d:f0:95:10:
10:70:70:76:e0:24:4f:c3:b2:c3:98:a3:1f:ba:02:6a:45:0a:
dc:5d:c3:40:fd:91:9a:ca:bb:d4:a5:fc:c2:73:ad:20:24:86:
ed:af:1c:36:36:ef:7c:d4:41:a8:4b:04:8b:5b:6e:d4:dc:0f:
7b:19:18:5e:5f:a6:53:42:36:c7:60:84:fb:b8:16:82:17:8e:
a7:18:8c:ad:f1:24:ec:70:56:df:1d:c2:a7:9c:58:2e:4b:5a:
3b:af:b1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:56:16 2026 by rpki-client