Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
File: TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft (raw, json)
Hash identifier: zR1HDxnEjrdkhmOfVfle7wlDKNUfYNR+6izbM7F8K9Q=
Subject key identifier: 9A:03:B9:3E:F4:5A:F8:80:3D:CC:02:E0:D4:67:4B:44:6D:C9:30:BF
Authority key identifier: 4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83
Certificate issuer: /CN=4e7545eee66daa39443ff9f88f522447f7863783
Certificate serial: 019CABD93AFB55A9012FE61C28B5CFA040DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
Manifest number: 139E
Signing time: Mon 02 Mar 2026 00:01:06 +0000
Manifest this update: Mon 02 Mar 2026 00:01:06 +0000
Manifest next update: Tue 03 Mar 2026 00:01:06 +0000
Files and hashes: 1: TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl (hash: 1nhRAHXsPzkmGH4cq9cQbFyAwMThi4sY9zQbeXrcYSQ=)
2: yNYC7VNuITL88FuMRKTJoDt6hNg.roa (hash: 8JNp2jq6UQpWFc9nLRlegOYLaf507H8Zto0kp+p83oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:3a:fb:55:a9:01:2f:e6:1c:28:b5:cf:a0:40:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7545eee66daa39443ff9f88f522447f7863783
Validity
Not Before: Mar 2 00:01:06 2026 GMT
Not After : Mar 3 00:01:06 2026 GMT
Subject: CN=9a03b93ef45af8803dcc02e0d4674b446dc930bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:06:fd:69:ef:e7:f4:ba:52:6f:d8:75:a7:c1:
c8:4d:f2:f1:76:a7:d9:30:b9:34:7c:3c:f3:56:d2:
5d:87:95:61:ba:24:8b:48:b1:c9:3f:a8:59:74:19:
99:5e:21:5b:f5:ba:71:13:ce:c0:bb:d7:54:67:a7:
fa:01:b7:01:4b:72:7b:a1:1b:5a:ca:46:d0:a3:bb:
73:d7:09:2a:56:29:16:d4:c6:2e:29:f4:9c:c2:71:
a0:c2:cb:72:55:c8:bb:aa:29:17:a8:68:79:d7:f6:
68:5e:5e:65:a0:a7:59:b8:3f:b6:c5:90:6f:8c:73:
4e:67:c6:51:e8:fa:cc:b7:80:c7:35:cc:2f:ab:61:
82:2a:2f:c8:1a:da:20:14:68:85:9a:fc:94:cb:e2:
64:44:d8:2b:a3:13:69:b4:8f:17:35:2b:a2:5a:8c:
1f:a6:92:50:46:85:9e:cd:b8:a4:6f:36:02:93:a6:
05:d5:9f:f3:4e:d6:9d:cb:18:ec:7c:24:bb:54:c1:
44:c8:6e:80:46:d7:ea:cf:ca:8c:f3:31:07:42:7b:
74:83:c2:8e:55:e6:8c:18:09:21:61:cc:e3:df:df:
b0:a2:28:b2:0a:09:f7:77:ef:4c:0c:c0:6a:53:df:
33:67:e2:6e:f9:71:3b:59:4b:c2:c7:1b:a1:b7:88:
62:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:03:B9:3E:F4:5A:F8:80:3D:CC:02:E0:D4:67:4B:44:6D:C9:30:BF
X509v3 Authority Key Identifier:
keyid:4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ff:fe:79:bd:90:dc:50:81:7f:24:06:c5:4c:22:2e:72:30:
86:45:40:18:94:30:77:53:ea:41:a6:b2:17:c5:00:4b:18:2d:
f2:77:98:40:a2:5d:5b:0b:21:d6:21:c5:84:e2:ff:cf:bc:28:
71:9c:65:28:63:40:6f:24:b2:99:1f:cb:6e:ac:0d:f0:4d:a8:
71:b5:c1:02:5b:f3:71:db:58:96:e5:55:b4:94:7b:32:41:70:
5f:9d:81:5a:1a:1c:e5:38:6e:8f:86:ed:eb:d4:95:b9:7d:0f:
55:2e:41:53:c7:93:d7:f6:13:1c:1a:02:c6:3c:d2:74:c0:aa:
f4:4f:0e:2f:8f:5c:2c:03:79:5c:c4:b8:00:64:4d:21:2d:4c:
6d:d4:ce:da:07:60:e1:ef:8a:df:78:34:09:53:05:a2:d6:17:
14:61:ac:53:76:b4:ae:82:cb:c2:e2:8d:f6:d5:18:83:0a:3f:
d7:3e:da:88:60:7c:04:58:96:6e:b9:30:f1:a0:13:ee:a4:b3:
a3:87:b1:0f:5f:e8:c4:a3:93:c6:30:71:69:e1:4f:ea:48:b5:
22:75:92:19:cb:87:14:62:27:36:1d:43:1e:1d:29:71:c4:a2:
0e:5c:d6:eb:b9:db:36:11:e2:7d:c3:61:49:63:ba:1b:4c:9c:
5a:0e:d3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:06 2026 by rpki-client