Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
File: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft (raw, json)
Hash identifier: Yg2s0r1jlPhu6pdfxEEKFEQD9DzXPPQLbzB0zlroNKI=
Subject key identifier: 31:66:70:23:CC:C2:2B:7D:5F:C9:1C:4C:1B:66:F9:EA:E3:12:FA:A9
Authority key identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
Certificate issuer: /CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Certificate serial: 019CAB340A77C5D8C4A1E7C2736A46BE46D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
Manifest number: 1427
Signing time: Sun 01 Mar 2026 21:00:40 +0000
Manifest this update: Sun 01 Mar 2026 21:00:40 +0000
Manifest next update: Mon 02 Mar 2026 21:00:40 +0000
Files and hashes: 1: LwJo-ZOAga1XsMB6kJmoJhsDKi4.roa (hash: 4U3Q5m4w5gDb99Fndaz4s602DhJvC8d4654L2Zwbqhc=)
2: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl (hash: qHyYM5alnL/cf/5nqFz+x3bVoBzpLmq8bC7Ernl3c6k=)
3: mazgd2rK4HfvX3Omu_5x4KeE4q0.roa (hash: VMQzYJR5enDZAjPyu/iICQfNBSPELGmMcOQZHSHcGJw=)
4: vMIHGFPf0heT2WpdAxKEA8H1uqY.roa (hash: Y7aS0+OiMr6KF+wJQp4D98bim2LplH1VyBIQ6kJaS6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:0a:77:c5:d8:c4:a1:e7:c2:73:6a:46:be:46:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Validity
Not Before: Mar 1 21:00:40 2026 GMT
Not After : Mar 2 21:00:40 2026 GMT
Subject: CN=31667023ccc22b7d5fc91c4c1b66f9eae312faa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d0:16:8c:7b:8d:30:b0:9f:d9:e9:63:9e:1c:
0d:0e:fd:02:f1:24:79:22:12:33:3c:47:40:41:40:
d1:24:1e:9c:c8:a8:8c:d7:ff:ae:e3:e6:d9:3f:5e:
33:4e:2e:99:70:b5:af:47:d6:ef:80:99:c0:eb:d0:
06:3c:0c:45:af:f1:60:4c:06:28:6d:8f:c7:2e:8c:
7f:ae:b7:14:94:29:53:60:98:b3:da:e5:70:32:ec:
9a:34:2b:59:a3:6c:60:43:39:d9:0f:55:1e:67:06:
07:d4:7a:92:86:bc:42:5d:a1:fe:d6:47:13:8a:8d:
cd:0c:c5:4a:29:33:5f:54:00:55:bf:83:1a:dc:2c:
ab:6d:c4:8e:b0:77:62:bc:13:3b:65:08:0f:c9:99:
6e:4a:39:27:fd:a2:85:7b:5c:aa:32:88:1a:ce:bb:
1f:67:92:d4:67:2b:04:c3:ff:1a:53:fc:97:22:60:
6b:95:f4:53:42:26:7b:98:38:c5:0b:a2:b4:69:40:
f3:72:4f:48:f8:f4:6c:c7:a6:16:da:d4:d2:0e:65:
95:03:61:1c:f6:2a:da:8c:06:fb:9d:80:1b:75:92:
de:78:9b:38:97:33:f9:52:6a:44:03:10:a4:5a:5d:
10:05:66:16:d1:de:51:fc:e4:35:79:87:58:16:d8:
85:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:66:70:23:CC:C2:2B:7D:5F:C9:1C:4C:1B:66:F9:EA:E3:12:FA:A9
X509v3 Authority Key Identifier:
keyid:4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e7:9f:65:ce:45:68:a8:27:1d:84:d0:ef:82:b9:9d:91:fb:
93:f6:6c:88:36:7d:f9:50:03:fc:ad:8a:2e:d0:a9:98:38:82:
90:88:bd:f6:09:a7:b6:cd:a3:e3:f1:3b:d1:86:03:44:8b:a2:
46:f3:64:2e:b2:c6:54:9a:73:14:ea:1c:cb:13:f3:25:99:2f:
90:90:bc:99:78:84:fa:be:1c:f1:a0:78:00:42:10:94:06:a9:
02:2c:b0:93:ee:a5:cb:7e:5e:20:56:9f:1f:44:c7:25:06:29:
af:08:d9:13:2c:1a:c3:eb:38:1c:6f:2c:01:a3:2f:78:1c:24:
16:3a:d7:4e:9c:6a:5a:60:ab:fa:0b:25:dd:fb:95:e7:36:25:
7b:77:36:6f:63:06:7b:65:ba:8a:1f:dd:9d:d3:0a:4e:ae:12:
e6:c5:4a:02:54:0c:fb:d7:09:13:35:36:9a:34:5f:de:ce:01:
1b:0c:af:16:22:fa:73:12:49:4e:07:6a:92:62:b3:7d:7d:c6:
62:4b:7a:ed:44:32:0d:61:c7:48:65:93:7a:99:ba:3f:98:e0:
62:ab:b8:1c:03:bf:f4:39:8a:53:d5:21:5c:e6:1b:ef:a2:89:
e5:67:1b:d1:ef:a6:de:25:a7:1c:df:7b:68:fd:e8:db:c8:70:
e4:a3:41:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:24 2026 by rpki-client