Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
File: TjwBugxcvyCuPpPKPTeeYt9clZo.mft (raw, json)
Hash identifier: Xi14YcgdRDUALWHfas34AasKs7dGJj98Pd5fE+z70ws=
Subject key identifier: C4:15:4A:EC:00:0D:E1:2E:4B:E7:05:E5:F8:0F:F7:DC:49:22:2A:DB
Authority key identifier: 4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
Certificate issuer: /CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Certificate serial: 019CAC0FBAE5F6C2BC16EC273634365403D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 01:00:37 +0000
Manifest this update: Mon 02 Mar 2026 01:00:37 +0000
Manifest next update: Tue 03 Mar 2026 01:00:37 +0000
Files and hashes: 1: FjQD5obfjitF4TyVNiOnrUuu6ko.roa (hash: 4qN5nXtzPSFJUF4nfX9RAWVMRw9xA5tlQvP0vuood6U=)
2: TjwBugxcvyCuPpPKPTeeYt9clZo.crl (hash: tUw2yL4iEHS7fZAXx7fZbbe7FR9x9VYig0hot9O6CgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:ba:e5:f6:c2:bc:16:ec:27:36:34:36:54:03:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Validity
Not Before: Mar 2 01:00:37 2026 GMT
Not After : Mar 3 01:00:37 2026 GMT
Subject: CN=c4154aec000de12e4be705e5f80ff7dc49222adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:08:1a:38:07:36:0d:69:90:72:64:05:e5:03:
36:53:91:f7:00:09:8b:ec:5c:c2:46:44:e9:51:17:
69:5d:a9:31:fd:86:44:21:9a:cb:83:68:6c:96:b3:
54:13:b3:6c:33:69:35:b3:e7:7c:17:9d:14:dd:92:
53:96:49:60:94:cf:5d:f1:1d:32:f6:9c:40:14:c5:
7a:79:22:d0:ca:94:f0:e1:ca:c1:17:b2:c5:b2:85:
4b:97:f0:26:97:c1:6f:61:9a:7f:d6:d2:07:8e:47:
c9:91:6b:98:ef:b6:62:34:e2:cc:4b:a3:0e:d3:42:
b5:69:77:dd:52:f4:3f:e1:9f:d9:62:89:62:42:26:
95:a0:a1:13:95:9f:3d:b9:c6:a7:96:3d:fc:16:7d:
40:14:ba:62:0b:cd:d4:c5:5e:81:2a:e5:00:54:b0:
22:33:d9:cc:9b:a0:86:5c:9e:6c:7d:9e:07:01:41:
98:fc:d7:64:b9:b8:84:b4:1d:92:e6:35:8b:01:e1:
7b:1a:8c:c2:3e:45:92:f1:4c:96:7c:9f:91:cf:30:
d4:1d:58:77:ae:f9:0d:e8:1f:33:cf:f0:dc:c5:f3:
59:98:41:0e:b1:7e:bc:c0:5f:11:48:a4:94:64:e7:
c5:9e:a0:05:f7:8c:a8:19:67:ed:b2:96:2f:4b:51:
83:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:15:4A:EC:00:0D:E1:2E:4B:E7:05:E5:F8:0F:F7:DC:49:22:2A:DB
X509v3 Authority Key Identifier:
keyid:4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:31:d7:54:39:c2:cb:a3:98:86:fe:e5:11:2b:fb:73:0a:3f:
9c:ef:4d:40:9f:dd:4f:11:e7:14:0d:af:c4:f8:3e:d1:f1:76:
cb:c4:56:e3:16:e9:17:a6:f0:8a:5e:66:4b:1f:34:e5:00:69:
63:3f:0c:a6:52:d5:00:db:1b:7e:c2:f0:fc:3e:95:12:ce:93:
35:d8:58:07:b1:37:a8:33:b3:f1:8e:ee:98:af:fb:f3:ac:49:
93:d0:d8:b4:54:5f:00:8f:6d:2f:ab:9a:78:23:e0:1f:30:17:
29:31:88:49:0b:f0:d9:24:ba:c4:5f:30:db:c9:61:39:4f:31:
e5:1b:c9:55:87:4a:15:71:4b:88:76:5d:e6:08:0c:43:f6:cd:
fb:5e:e7:26:4e:bc:ba:26:1c:3e:0e:84:04:6c:b9:c3:12:ee:
4f:4a:ec:4b:56:3a:e3:1e:5e:10:93:bc:20:92:b3:cf:74:67:
8f:12:31:1f:ba:7c:f6:10:6f:89:4d:9b:69:ec:cf:b1:68:88:
9f:95:c5:96:64:7c:b1:28:21:24:52:f8:0b:b6:e0:7c:26:e4:
0f:39:be:cb:f7:12:44:43:9f:59:8b:d2:83:6a:90:50:d8:74:
57:2f:97:52:3d:b9:4a:2b:c5:25:ed:cd:a8:68:64:cb:e5:98:
22:4e:98:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:15 2026 by rpki-client