Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
File: TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft (raw, json)
Hash identifier: Si1/0yAEaVNZkDF4EdDCdh6qf/Xf/PhxAnMdx1TFdq0=
Subject key identifier: 9A:60:CD:9D:09:F9:17:A2:F8:6D:7A:92:45:4C:FB:50:AF:48:92:3D
Authority key identifier: 4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
Certificate issuer: /CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Certificate serial: 019CACEBD4DEBCD46F9F65FB61B150A79967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
Manifest number: 13FC
Signing time: Mon 02 Mar 2026 05:01:02 +0000
Manifest this update: Mon 02 Mar 2026 05:01:02 +0000
Manifest next update: Tue 03 Mar 2026 05:01:02 +0000
Files and hashes: 1: HMo_pRRnRqJZqr644LvLDKbEvF0.roa (hash: iH4M3snvNj6PFU+GFjuRkofzdO0jGEo8rVExACKxHtk=)
2: TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl (hash: PzAYo4pQzQ9ukQwOBqxiX+Pl6L0iSpBQC9VwLvwdRY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:d4:de:bc:d4:6f:9f:65:fb:61:b1:50:a7:99:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Validity
Not Before: Mar 2 05:01:02 2026 GMT
Not After : Mar 3 05:01:02 2026 GMT
Subject: CN=9a60cd9d09f917a2f86d7a92454cfb50af48923d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:ef:1f:79:aa:6f:42:c9:0b:73:f3:6d:26:
3d:f8:55:07:74:e4:b4:75:65:89:33:9c:e4:b5:30:
be:52:ce:0c:69:e9:49:1c:a0:c4:69:5b:94:e6:75:
63:62:27:92:96:b9:6c:8c:2e:db:24:d8:f1:61:d0:
59:34:40:39:9c:0c:bc:36:bb:d8:d6:ff:df:e3:06:
16:bb:b5:c1:ba:cc:0f:c0:89:e7:01:48:c0:30:cc:
ef:74:85:f6:94:0a:f3:ab:32:31:90:34:fd:5e:98:
8e:e7:ab:a1:57:eb:cd:30:5c:97:85:3d:21:33:e2:
f7:e2:1a:b2:75:30:93:82:76:4c:57:d9:24:7c:5f:
fe:85:5b:1d:fa:76:9c:ff:b9:24:03:9d:9a:c2:38:
7d:57:d5:f3:44:33:e9:af:13:44:0f:9a:44:c6:90:
c4:ed:1f:a6:ee:47:e7:75:fa:8c:b7:02:7c:2b:bf:
3f:99:51:b5:dc:64:ec:a6:6f:4c:d4:1e:51:7d:ef:
8f:cf:a6:21:be:22:2c:ba:ea:03:06:a6:74:02:8f:
f5:25:62:29:47:ad:ce:90:67:df:c6:90:35:57:39:
3f:7a:fc:b9:7c:ae:c7:d0:1f:81:eb:51:ff:e1:7d:
24:48:56:75:6a:12:4a:c9:b7:06:78:31:fd:e1:5b:
80:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:60:CD:9D:09:F9:17:A2:F8:6D:7A:92:45:4C:FB:50:AF:48:92:3D
X509v3 Authority Key Identifier:
keyid:4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d4:75:fd:bc:58:de:54:85:61:1a:d6:d7:40:a8:47:4c:25:
9c:7c:ed:09:9a:27:33:a4:77:ae:b7:3a:14:e6:dc:ef:62:fb:
09:e0:0e:d3:3d:9e:8d:2b:68:42:12:e4:07:0a:d9:75:02:8e:
b4:48:b3:3b:8e:4b:dd:bc:e8:82:3c:5c:00:08:f0:b9:4a:8f:
97:43:b3:f2:80:1c:08:ad:05:fd:67:ee:90:f4:8b:67:91:89:
11:fa:fc:c2:d8:ee:4c:b4:c0:3a:5f:7b:35:c8:83:6a:8f:1b:
7b:a9:e0:17:c3:7f:75:fc:08:e3:60:e6:53:73:40:a1:86:74:
04:c0:8d:b6:18:d0:f4:ef:d5:ca:bb:77:ea:50:36:bb:ee:40:
4b:a7:4c:33:ff:4f:e1:83:04:b5:03:d3:13:70:59:9c:12:97:
40:a2:28:24:c5:76:09:24:6a:d5:d0:62:1e:ef:a5:4f:10:f9:
2a:41:ce:f7:54:54:7a:81:c6:04:3f:3e:e4:eb:d6:77:81:95:
a1:20:a7:87:12:0a:7a:18:ca:b9:6d:ad:bb:26:26:b6:a9:e5:
8f:ea:01:8b:6e:d4:cf:97:b7:a3:60:6b:b7:c7:d2:f8:e1:32:
b9:d4:71:97:f9:47:34:6d:82:be:ac:ff:61:91:68:15:c3:b5:
4c:71:b6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:32 2026 by rpki-client