Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
File: TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft (raw, json)
Hash identifier: Hz8MUhlt7ia7nwBLxxs2dDzp75MvCJtFD/douSeznS0=
Subject key identifier: 4B:F9:F1:AB:F2:3D:D4:45:5F:F6:21:C3:7F:EA:A9:B2:E9:8A:A5:DD
Authority key identifier: 4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93
Certificate issuer: /CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
Certificate serial: 019CAAFD0EFF5FF6148CC6029C85B450C472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
Manifest number: 1240
Signing time: Sun 01 Mar 2026 20:00:36 +0000
Manifest this update: Sun 01 Mar 2026 20:00:36 +0000
Manifest next update: Mon 02 Mar 2026 20:00:36 +0000
Files and hashes: 1: TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl (hash: p6FRllZr7G0DpMHuh3KDA7a6ijaUcRTgCSf0bLqAECA=)
2: ayBRUQ4XFp8ceqFrnVdH8JT32Pw.roa (hash: ydKdrH0HwWllY5B18eol6PUwxMhU2Jq/931IBDQs9IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:0e:ff:5f:f6:14:8c:c6:02:9c:85:b4:50:c4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
Validity
Not Before: Mar 1 20:00:36 2026 GMT
Not After : Mar 2 20:00:36 2026 GMT
Subject: CN=4bf9f1abf23dd4455ff621c37feaa9b2e98aa5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:fa:49:45:45:7b:c4:26:35:69:e7:3e:73:
e8:25:c3:6c:77:92:2c:72:ca:e7:04:ad:e6:6c:a2:
2f:ba:59:e9:76:b7:0b:80:d8:a4:59:e1:a2:17:dc:
99:d9:ec:00:20:23:d7:e2:55:8d:bf:91:ef:a2:35:
e1:17:78:5b:ee:fc:1d:95:8c:0a:59:5b:fc:c2:b5:
ac:b8:7b:35:09:36:b4:e9:5d:38:f6:df:24:72:a1:
7d:3f:e8:8a:01:a1:be:90:be:d4:fa:02:28:ad:de:
c9:c9:94:f8:d1:65:d0:87:c4:7a:a4:83:06:4c:47:
f4:a7:d7:34:80:4d:f6:e9:24:99:e1:c4:11:f2:ca:
19:ef:2f:af:b0:4f:59:d7:c2:5c:60:75:3a:ba:a2:
26:f6:9b:8b:40:b5:05:d4:7f:49:2f:1e:dd:8c:71:
96:24:63:f4:34:15:a5:56:69:72:81:4c:5e:34:67:
1f:c1:be:6e:e7:73:fc:63:97:f5:86:79:a4:be:5c:
a9:76:65:28:13:f4:40:48:1f:bd:45:32:ca:d3:88:
10:16:68:62:d4:02:4d:b3:9c:3b:1b:51:db:9f:50:
7f:16:ce:ed:4e:2b:26:5a:10:97:99:59:a5:c5:c1:
84:6f:b3:89:6f:83:c6:26:98:4a:f5:e5:e0:f8:56:
6d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F9:F1:AB:F2:3D:D4:45:5F:F6:21:C3:7F:EA:A9:B2:E9:8A:A5:DD
X509v3 Authority Key Identifier:
keyid:4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:52:3e:58:e9:e3:cf:eb:ae:ed:3c:b7:f1:9f:9e:68:79:32:
d2:72:c9:fb:b1:c5:26:38:06:b0:5e:89:9d:dd:73:06:e8:1b:
0c:9a:ee:24:5f:42:bc:f4:7e:fe:e0:94:29:c0:c1:ea:a3:77:
56:69:4d:9c:84:e8:56:d6:48:05:77:95:ea:e5:2d:08:ae:94:
6d:83:5b:66:be:de:bb:6d:4c:d8:c9:0b:9e:35:aa:97:9e:73:
b4:57:3a:93:b4:84:58:af:fa:13:45:8b:a3:8d:8e:35:ec:cb:
52:f9:88:22:08:e4:ee:47:2d:55:d9:ca:39:01:6c:6f:f3:38:
14:20:7b:7a:39:2e:6b:fc:a1:95:d5:a1:12:c0:08:b9:b3:42:
ca:7e:9d:27:54:21:c4:01:31:be:2e:dd:37:b4:a3:8c:e2:61:
42:af:ea:01:d8:83:80:34:d2:ce:73:2e:e9:15:8e:c0:9b:b4:
53:12:04:7b:30:3c:88:a9:31:ab:d2:d6:67:d4:ba:89:e6:d8:
98:ba:d9:e7:6f:36:e8:41:1b:21:fd:17:ed:81:05:3f:9d:6d:
3a:d2:38:b3:86:9f:4b:ff:f2:f2:fb:a4:1c:dc:02:fe:75:40:
a9:ad:fd:72:59:e4:51:8d:59:54:72:96:6b:56:74:ab:03:b7:
4d:f7:a1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:02:01 2026 by rpki-client