Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
File: TJMCnFsmOc0pufndUpTMlO9S1q8.mft (raw, json)
Hash identifier: RsAL3NDQnmFB5Yx/mN+A4Rp2rEBeK8hPCGpxsLk5zcs=
Subject key identifier: ED:37:2D:D3:C6:54:EF:86:01:72:92:1F:6C:F3:46:CD:AD:14:4E:AB
Authority key identifier: 4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
Certificate issuer: /CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Certificate serial: 019CAB342BA1517D805971DAC397C1E92C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
Manifest number: 0E78
Signing time: Sun 01 Mar 2026 21:00:48 +0000
Manifest this update: Sun 01 Mar 2026 21:00:48 +0000
Manifest next update: Mon 02 Mar 2026 21:00:48 +0000
Files and hashes: 1: MmCHZ1tigLx6qv-0vdY9p2DTybw.asa (hash: q4g5QLnj5C7tBM9YSoS7cbGeaJrSGDWbXD0wfTvKfKk=)
2: TJMCnFsmOc0pufndUpTMlO9S1q8.crl (hash: ehdzcDZUpIRGZEwAKj9I8S4ZrEjN7mIb+VUFG126M40=)
3: o-GuySAZav0PksHcDzno-EypQJ0.roa (hash: /pzSPA6PGMWrOD+vCeL5sGDbZ/TBSHFZKj+LgOJi0Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:2b:a1:51:7d:80:59:71:da:c3:97:c1:e9:2c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Validity
Not Before: Mar 1 21:00:48 2026 GMT
Not After : Mar 2 21:00:48 2026 GMT
Subject: CN=ed372dd3c654ef860172921f6cf346cdad144eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:de:23:d5:09:2f:cd:3e:fa:aa:58:a8:50:
e2:c7:6b:05:1a:29:83:81:44:67:ec:da:7b:2b:1d:
dc:9d:bf:d9:a4:05:df:5d:88:2b:bb:0a:88:82:20:
19:09:dd:f2:6e:74:cd:99:ac:36:b9:e3:ff:71:01:
f4:60:b6:f5:7c:da:1f:45:00:32:b3:1a:57:20:2b:
7d:11:30:02:e6:43:9b:eb:a4:d1:2a:bb:bc:29:46:
28:7b:ac:bc:29:3d:e0:bc:60:3b:70:39:37:a6:b1:
5c:51:a6:cd:eb:26:b7:8a:be:fe:5c:3c:02:14:6e:
2c:bc:52:5b:60:ee:fd:5f:0d:19:2e:5c:9a:87:00:
25:ca:05:94:ac:49:07:5f:16:9d:26:3a:d5:3b:33:
b4:9b:d5:fc:ec:11:cd:15:13:03:31:c0:59:f4:76:
5e:6e:91:0e:00:6e:5e:91:b9:19:70:5c:ce:7b:9d:
a8:97:99:a3:7e:22:6c:ab:aa:10:32:df:21:20:9d:
bb:bd:82:08:80:b6:be:e8:df:8f:1e:29:6d:3f:ea:
14:df:92:84:2b:39:f9:dd:5c:1d:9f:38:67:a3:06:
e1:bc:c4:b2:e9:91:49:c6:26:02:a6:e7:8c:3d:88:
cd:41:d3:21:ea:ae:60:00:69:f7:e7:09:57:f7:0e:
b6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:37:2D:D3:C6:54:EF:86:01:72:92:1F:6C:F3:46:CD:AD:14:4E:AB
X509v3 Authority Key Identifier:
keyid:4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:03:8f:55:28:73:e3:ce:f4:5f:f9:d1:9a:52:ef:59:b4:e3:
8d:06:fd:dc:aa:af:94:08:4b:21:43:3f:31:3c:bd:aa:f4:dd:
80:ff:6a:ee:f8:aa:03:68:21:b9:af:53:34:df:30:65:a2:c0:
e2:a8:d1:af:d9:9e:1f:71:cc:50:48:73:18:c3:d8:23:b2:a3:
80:33:29:62:68:05:c5:b7:9d:c4:29:77:fe:76:4c:dc:62:ea:
b4:4b:92:cb:12:4c:e7:0e:af:7d:23:a6:bc:e5:a5:c2:26:34:
04:b3:69:a7:8c:3a:05:13:84:02:06:c5:8d:cc:5f:72:b4:03:
5b:8e:61:1e:5b:e1:95:61:7e:93:e7:ec:9f:be:98:d1:cd:d9:
ab:6e:4a:70:c8:42:9c:f4:56:d2:f3:a3:fb:a1:16:af:f1:36:
86:12:60:a0:14:68:72:c8:16:8d:49:b5:10:9c:93:0b:03:6a:
df:fb:a3:2d:0f:10:31:37:27:cd:7d:56:a5:22:0a:33:f8:b9:
ff:66:92:fe:dc:79:8e:11:e3:04:a7:51:2a:01:04:85:5e:ee:
10:65:84:d1:44:41:2c:75:fe:16:d7:ae:74:5e:33:35:b9:22:
61:61:59:56:3f:c7:cb:35:8b:0c:0c:9f:ec:39:bf:69:ec:e4:
52:87:f3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:37 2026 by rpki-client