Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
File: TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft (raw, json)
Hash identifier: VXYGLSLapjdftUBDgtOOyeVObo/UJdpg7bolyUX+8CI=
Subject key identifier: 74:D5:04:65:A9:77:DB:C3:E1:85:B8:C8:DF:34:C9:26:FE:80:51:F2
Authority key identifier: 4D:C0:23:0C:D4:15:D8:6E:86:FD:88:93:13:42:87:CE:54:A6:87:D7
Certificate issuer: /CN=4dc0230cd415d86e86fd8893134287ce54a687d7
Certificate serial: 019CA90ECB82EC58225F2C9E0BFF9905CAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
Manifest number: 030B
Signing time: Sun 01 Mar 2026 11:00:44 +0000
Manifest this update: Sun 01 Mar 2026 11:00:44 +0000
Manifest next update: Mon 02 Mar 2026 11:00:44 +0000
Files and hashes: 1: TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl (hash: k47MBgmEaQPpFkEmiNSSE39AeIT4F5LMnsOqenL+9TI=)
2: xxSghRy6AfEWa4Xp9hCtVJwXq8Q.asa (hash: tkVbLxXuAlB5/ytsjVKiIz1hk9lX1sqQHSPlQ6fiMgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:cb:82:ec:58:22:5f:2c:9e:0b:ff:99:05:ca:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc0230cd415d86e86fd8893134287ce54a687d7
Validity
Not Before: Mar 1 11:00:44 2026 GMT
Not After : Mar 2 11:00:44 2026 GMT
Subject: CN=74d50465a977dbc3e185b8c8df34c926fe8051f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7d:c4:b8:79:fa:42:de:57:1a:27:76:2a:4e:
d9:fe:88:7a:3d:7d:1e:7d:ba:c8:d0:a4:64:32:33:
58:39:47:6a:4d:f9:61:8b:9a:8c:0e:ff:57:9e:59:
a6:07:7b:60:e8:64:2c:63:4b:58:7d:f0:fa:9d:a5:
68:e5:6f:ab:e5:bf:28:13:85:ff:1b:9d:7d:1c:24:
29:95:a9:4a:ca:cf:6b:ba:69:78:3b:9d:07:98:da:
28:ba:2c:4a:64:41:55:69:03:23:df:2f:5b:d6:66:
22:34:f5:44:6e:81:65:2a:71:9c:1a:48:29:5a:90:
ce:81:ca:26:4f:61:34:e4:28:ff:a3:ba:a9:7e:17:
be:a6:67:f9:ab:07:08:6b:6c:13:71:f1:5c:e1:97:
91:7f:78:50:43:fb:e9:e9:d9:30:47:2b:a3:e0:04:
26:0c:fd:fe:14:25:c9:93:38:39:21:7c:6b:af:75:
36:05:73:bb:db:36:14:ea:0e:65:88:8b:58:30:f3:
4e:0d:6d:5f:e9:6a:b2:54:56:44:eb:df:bc:63:26:
4b:77:84:d1:69:39:28:1f:54:6e:06:e7:d6:f7:1b:
ee:f5:71:d7:c0:aa:fc:c6:b1:32:7a:aa:48:9e:be:
1d:86:2e:fe:1f:25:23:c4:51:b3:bd:4e:06:a9:c2:
db:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D5:04:65:A9:77:DB:C3:E1:85:B8:C8:DF:34:C9:26:FE:80:51:F2
X509v3 Authority Key Identifier:
keyid:4D:C0:23:0C:D4:15:D8:6E:86:FD:88:93:13:42:87:CE:54:A6:87:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8b:71:98:d0:42:a3:70:d3:6f:0f:f1:ed:77:77:49:b4:68:
03:58:a5:fb:a7:6c:74:59:14:0b:80:0b:cb:d3:b8:c5:b9:ed:
21:1b:12:0e:30:2b:64:d9:6e:99:48:f9:b9:d8:ac:a2:59:6a:
f5:09:8d:09:10:6e:63:30:94:f0:14:15:38:44:0f:37:9e:7a:
7d:71:2e:ae:d7:68:7f:1d:a3:35:d1:cb:c6:01:8e:be:ff:1d:
c2:bb:08:60:d0:02:65:a4:60:7e:97:da:25:56:12:14:60:85:
dc:e4:a8:e0:70:40:d4:9a:c1:3d:b8:8e:bc:83:3d:d9:2a:71:
6a:5e:22:52:22:49:56:6f:d6:4a:47:72:83:b5:f4:40:0a:5e:
af:6f:4f:c6:b3:27:c4:3c:cc:45:c8:87:e1:bc:4b:58:5a:07:
8d:46:37:64:02:c5:0b:47:b7:1a:fb:f0:8b:62:48:43:08:48:
1e:65:f4:7e:60:f6:7b:bb:37:ba:d7:bb:3d:69:5a:55:97:a2:
ae:9e:88:2d:00:ad:29:bd:32:84:e4:c0:6f:8e:d5:d7:d8:c2:
c8:88:dc:3c:07:e7:8e:89:3c:93:5b:20:c4:8d:86:59:48:a8:
dc:b1:93:6a:18:23:bc:e2:bc:c3:3e:49:37:b1:3e:4a:e1:32:
5e:cc:a1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:18:32 2026 by rpki-client