Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier: hFEWu5ENsMKXoDOWuTaF5xLoQQahRg1SpHSbkO1KHfk=
Subject key identifier: 1E:0D:91:E2:9F:2A:D1:4F:BD:2C:43:27:B4:55:97:D2:2C:E3:93:A0
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial: 019CA8339D50E68FEB20A6FB9DBAA6B8162E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 07:01:20 +0000
Manifest this update: Sun 01 Mar 2026 07:01:20 +0000
Manifest next update: Mon 02 Mar 2026 07:01:20 +0000
Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: l8Lg/Fp6snGjCtTd3Ro6W5LwdBZXN3iDvg0325eZUbo=)
2: owMZq8FjMrGcWydVPo2XzsNX_wE.roa (hash: oerV8Rk8gelATCf/K/1z5Pi6X6k6wK997b4CHySJpco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:33:9d:50:e6:8f:eb:20:a6:fb:9d:ba:a6:b8:16:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Validity
Not Before: Mar 1 07:01:20 2026 GMT
Not After : Mar 2 07:01:20 2026 GMT
Subject: CN=1e0d91e29f2ad14fbd2c4327b45597d22ce393a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:40:71:6e:c4:25:fd:f5:83:97:cc:59:ba:d5:
56:e6:73:f5:e3:28:a2:68:55:04:6b:9e:f6:d0:1a:
1e:e0:13:3f:b6:b7:99:2d:36:4f:a3:04:48:be:0f:
6a:7c:bb:48:65:03:7e:3b:82:33:b4:9a:cb:6b:dc:
1e:8d:16:e0:3a:94:b9:9f:c4:52:00:b8:c1:1a:ca:
35:c3:8f:1f:c0:f6:7d:fb:c1:36:74:95:fd:56:47:
e8:d7:85:bb:1a:18:6b:71:8a:33:9c:25:eb:01:a6:
10:2d:e0:15:f0:f9:65:e2:47:b6:82:20:ba:b1:5f:
9b:9b:5b:1b:88:d4:79:c1:39:78:cf:4b:2a:66:ef:
87:52:7f:f8:e8:30:b2:37:bc:93:1a:54:7e:c3:e3:
63:08:62:59:fd:99:a4:7a:d8:13:db:f4:83:df:80:
a4:27:74:65:00:18:ac:46:ec:e0:b8:72:5f:d1:fa:
b7:5e:32:95:0a:6e:e3:f3:17:a4:3a:05:05:15:32:
ba:50:d9:eb:11:59:bc:28:05:37:a1:8f:14:8b:ec:
02:a2:99:2b:40:1e:7a:25:f4:c6:a0:7e:21:74:0a:
1c:8d:73:3e:9d:6d:c7:32:24:6a:fe:86:ae:cf:7e:
72:0b:7a:b6:db:80:27:15:9e:e9:a0:80:bc:28:b9:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0D:91:E2:9F:2A:D1:4F:BD:2C:43:27:B4:55:97:D2:2C:E3:93:A0
X509v3 Authority Key Identifier:
keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:59:26:2e:e0:79:3b:70:89:49:0c:64:33:51:83:49:9e:69:
8a:da:a5:b2:af:46:e6:af:6d:83:91:2a:d0:8c:e7:41:5a:c9:
05:8a:5a:b6:d3:4f:e9:8e:18:0f:75:ce:bc:42:6c:80:0a:99:
47:ad:7c:ef:b3:0e:29:55:e8:29:79:0f:3a:2e:5e:8d:43:1f:
36:70:f2:2a:a9:66:4d:f5:d0:3c:1c:b7:64:c4:fc:0a:c2:11:
7d:26:d1:50:24:57:c8:38:d0:a2:e6:87:c1:1f:89:9f:6d:0b:
71:7a:15:50:b3:52:4b:e2:80:32:7c:87:b6:25:0d:d0:aa:30:
dd:b3:22:67:86:93:3f:97:9a:ca:4a:11:b4:e2:2f:85:c9:ca:
b5:98:d2:31:b8:3b:b6:03:f9:c3:4b:67:2e:a8:a6:85:93:99:
19:b1:cc:e3:e5:88:09:44:f1:93:77:6f:11:f9:ad:bf:21:68:
a9:19:85:ff:bd:7c:eb:83:bb:45:69:51:02:12:44:32:a9:be:
0d:19:ab:e5:5e:6b:71:54:9a:a8:eb:e7:db:ef:95:55:0c:65:
93:98:4d:23:a1:3f:a2:14:0b:c7:a2:1b:77:59:3f:0d:8b:99:
57:22:b0:9a:b4:c7:00:dd:3d:b0:32:43:ce:b3:5b:6a:8c:bc:
f5:27:da:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:10 2026 by rpki-client