Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
File: TSkoLUc3P5QvCti5HtlAk7Zuo68.mft (raw, json)
Hash identifier: Za2jqwCEGl9Hb9Mdyf0RgxUZotwHlM6xHkJP3DewYV8=
Subject key identifier: 8D:25:DA:29:E4:03:E0:8E:90:09:D4:BE:9D:53:10:74:EB:9C:96:4D
Authority key identifier: 4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF
Certificate issuer: /CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
Certificate serial: 019CABA26217134EA6B9860DBF7276EEBD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
Manifest number: 17CF
Signing time: Sun 01 Mar 2026 23:01:11 +0000
Manifest this update: Sun 01 Mar 2026 23:01:11 +0000
Manifest next update: Mon 02 Mar 2026 23:01:11 +0000
Files and hashes: 1: PNfIBENqPn1C2ky1c3Y7NiG7Ymw.roa (hash: DgC7dqgRapp52CiQQUrzN9ZAbunqBU0/xi2SXO7kKV0=)
2: TSkoLUc3P5QvCti5HtlAk7Zuo68.crl (hash: VGPt0MCgyGE+ahwFMMy2i/M2ace85QmMbCRN+dQBw1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:62:17:13:4e:a6:b9:86:0d:bf:72:76:ee:bd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
Validity
Not Before: Mar 1 23:01:11 2026 GMT
Not After : Mar 2 23:01:11 2026 GMT
Subject: CN=8d25da29e403e08e9009d4be9d531074eb9c964d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:84:ce:49:bc:b0:26:3b:b4:f8:48:16:a1:31:
de:46:20:bb:bf:28:a3:48:89:dd:27:e3:ed:c9:63:
4b:e5:7b:a3:2a:cb:60:fb:77:7a:49:b6:93:ae:9c:
2a:bf:db:31:53:b1:e0:75:f0:9e:e6:71:3d:70:3c:
7c:30:16:e4:7a:81:cf:02:c9:32:47:9d:6e:8f:0c:
9c:19:33:86:88:8e:85:9b:36:76:c5:d6:51:10:48:
86:6c:c5:7b:7a:fd:b1:6a:d6:3f:e1:c0:f6:61:a6:
87:5a:e4:ca:34:62:98:d9:4d:ce:54:9f:89:e4:c2:
55:85:4c:dc:e3:4c:ed:65:55:6e:86:52:31:2a:8d:
0f:35:90:12:b6:91:a1:28:57:99:cc:4d:ca:93:c6:
91:d6:a0:dc:41:4b:60:31:da:7e:57:89:db:84:d7:
f6:ce:e9:e4:de:c0:e6:23:ee:de:b2:09:3d:bc:27:
00:bd:d9:56:6c:dc:32:e1:89:d6:5a:2b:7d:90:c2:
c0:43:1f:14:0c:74:13:89:16:f5:cb:e2:9f:ab:c3:
59:2d:72:05:df:f7:03:ac:bf:65:ce:18:0d:e7:2b:
3e:d7:5f:4e:4a:a1:a4:37:ad:d8:f8:7a:d4:6d:36:
da:ca:7d:7b:a4:f9:30:14:42:21:6c:40:5a:71:1e:
eb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:25:DA:29:E4:03:E0:8E:90:09:D4:BE:9D:53:10:74:EB:9C:96:4D
X509v3 Authority Key Identifier:
keyid:4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:eb:f7:5e:07:f0:ac:09:68:f8:1e:ae:c0:00:f0:38:3f:8b:
ef:e2:69:28:86:c3:01:79:55:0e:aa:7f:d0:c8:f9:1f:eb:62:
f2:c7:7f:ce:72:5c:9a:b4:3b:c4:fe:9a:df:db:ae:ab:8d:fb:
01:24:fe:fa:25:5d:d2:51:91:d8:e0:c3:25:91:23:22:2a:86:
08:86:d9:64:6b:ab:f4:e7:22:ce:4c:43:a5:e6:28:9f:9e:dd:
3d:a6:73:4d:d3:b7:0d:bc:72:13:ed:c3:53:a4:7c:ca:3f:11:
e8:bf:f4:b3:20:6a:a8:d7:cb:37:c7:a5:81:b3:7b:e5:6a:98:
66:8d:4c:f9:14:76:0c:fd:bd:7c:f6:26:65:76:b6:3f:7b:ba:
c1:4d:f1:a3:72:65:42:dc:28:16:61:43:37:47:ce:24:c8:a1:
09:ca:f5:9c:cc:e2:91:f4:f4:93:ac:74:ce:f2:a1:be:c8:b4:
fa:e8:34:d9:45:f7:8a:96:7e:c4:80:4e:96:72:64:22:c1:47:
97:8b:74:d2:9a:5b:c0:6f:f2:cc:90:39:e9:b1:fe:03:d7:60:
3d:f0:1d:74:25:cc:8a:96:5e:cb:b2:ec:2d:d5:1a:7d:fe:c8:
f6:74:81:be:14:be:90:91:c1:ca:59:16:26:fb:93:d6:f6:2f:
4c:34:70:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:54:32 2026 by rpki-client