Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
File: TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json)
Hash identifier: y6I+2ZFHofuoyWHHV9phVrKTAicn+9MTCpckQZY5qVc=
Subject key identifier: 64:5E:A5:BB:A6:8D:7A:72:57:F6:15:2E:62:2B:30:65:7A:DC:7F:CE
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Certificate issuer: /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial: 019CABA1BA566A79F83A4890E2361C6849F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 23:00:28 +0000
Manifest this update: Sun 01 Mar 2026 23:00:28 +0000
Manifest next update: Mon 02 Mar 2026 23:00:28 +0000
Files and hashes: 1: HKK9g6Hqt_cBY1AbSvefDUFZRlo.roa (hash: MqB9AcT2/OThR4+/4lhCs0wiEEPqRX8xFMsmjXA2ijw=)
2: OBx05QEiDP1Vr5e_268J9tar1QE.roa (hash: TIpDQvAlekr1QcZvuTryLbf0wSjkmsau0xJ8uS3rJTc=)
3: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: NfJ7w/YG0Qq9cNr8svBXZGdoC358OCRdz/0UdyOkmI8=)
4: bq_R2KuxT4atP4GNyi-WGk7ZHgI.roa (hash: ukHJbM0cPkDakME1wOGsLKMQaAIR4oQCPsvSvUhBbpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ba:56:6a:79:f8:3a:48:90:e2:36:1c:68:49:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Validity
Not Before: Mar 1 23:00:28 2026 GMT
Not After : Mar 2 23:00:28 2026 GMT
Subject: CN=645ea5bba68d7a7257f6152e622b30657adc7fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fd:85:cc:b9:e6:da:8a:c5:3c:da:c3:95:a7:
1f:ff:e3:ec:2c:dc:23:d0:c1:8d:a7:d8:e8:93:99:
29:22:a1:ef:99:dd:89:fd:f4:a3:5a:a7:36:4c:22:
be:44:be:9f:c1:a1:d6:b0:c9:d9:69:0a:05:ed:3d:
33:93:11:ae:24:d2:d7:c6:4a:bd:9d:ed:22:07:42:
08:15:23:f0:0a:15:05:b0:03:88:a4:c6:f8:25:5a:
82:9e:f1:5a:53:49:6e:12:19:3c:69:f6:d5:cf:f8:
f3:6a:56:b6:7c:86:8b:a6:39:ac:54:81:2e:46:64:
2f:1d:1d:76:c9:de:a7:fa:9d:fc:a8:fa:56:28:60:
58:ce:a9:9c:6b:5f:b2:ef:c1:6f:88:8c:34:56:30:
9f:28:6f:05:d9:99:43:f4:8a:05:d9:97:55:4d:bc:
a3:15:22:fe:1c:2a:ea:39:18:e1:4c:d0:48:ea:55:
04:e0:6b:0e:de:f2:15:be:40:7f:3f:a9:f0:bc:4e:
74:96:ed:1a:62:83:9b:cd:f7:cc:4c:d0:a7:bd:52:
7c:a9:ac:c8:85:15:18:2f:21:9d:d9:fe:99:5b:b9:
4b:19:63:b7:e6:f4:6e:3a:b8:b4:e4:4d:bd:89:dc:
17:22:56:d7:27:0f:f3:9f:d4:37:e3:70:81:fd:b0:
01:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5E:A5:BB:A6:8D:7A:72:57:F6:15:2E:62:2B:30:65:7A:DC:7F:CE
X509v3 Authority Key Identifier:
keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e2:1d:0a:db:4b:cd:b9:c5:fd:55:c7:6a:a4:df:bc:4f:3e:
26:bb:0b:e3:4d:ea:51:8e:2b:93:46:25:47:22:2f:bc:6c:73:
5a:5e:89:0c:21:af:57:f2:d2:47:7e:18:36:2d:83:2a:33:ab:
56:c1:4d:cf:4e:8e:22:95:e8:ab:00:d4:b6:a6:68:52:5e:1a:
5d:0f:51:de:cb:70:e1:67:17:fe:94:01:8b:5d:8b:c4:34:7b:
fe:5d:85:a5:62:16:c0:ca:39:54:77:9e:a8:7e:f3:c7:89:63:
af:3a:87:3a:44:cf:8f:95:72:b3:42:77:bf:22:4b:58:61:26:
bc:4a:2b:25:c7:98:80:bf:3f:99:10:a5:28:31:0b:2d:71:c3:
d3:db:c3:c2:0c:0d:6a:03:95:44:6b:f6:65:e9:79:ec:16:8a:
3f:7d:58:f3:fc:95:04:79:e7:41:10:cc:3a:e6:2c:c2:ad:9e:
72:dc:9e:55:f7:f2:ba:55:f7:41:d7:79:0f:ea:81:8a:f4:7d:
21:5c:4d:43:d8:0b:31:47:33:fe:fa:d5:28:c9:fe:86:db:ff:
c0:b8:1b:bf:20:dd:1a:6a:e8:44:8a:12:49:a3:f8:00:c4:0a:
dc:ab:d4:ac:d4:95:ca:0d:1e:90:1d:bb:c2:dd:35:a7:e2:bc:
21:2b:a5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:32 2026 by rpki-client