Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
File: TAcbrZKeNisGK4nIf6QbXe2k_8A.mft (raw, json)
Hash identifier: MrvAFLtiE/PqSdWb8TH8AUCQW1dKt9V2qjnN3P3+aZ8=
Subject key identifier: FB:22:3C:B7:32:F7:E9:9C:3F:46:B1:5C:D6:D2:09:EF:69:97:EA:1E
Authority key identifier: 4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
Certificate issuer: /CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Certificate serial: 019CAEA321D5D99C212788D32EC951786E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
Manifest number: 158B
Signing time: Mon 02 Mar 2026 13:00:52 +0000
Manifest this update: Mon 02 Mar 2026 13:00:52 +0000
Manifest next update: Tue 03 Mar 2026 13:00:52 +0000
Files and hashes: 1: TAcbrZKeNisGK4nIf6QbXe2k_8A.crl (hash: SeSU8qgh9REkMc82jhU/AJit68BNttJcNZsQPZVfOWI=)
2: wI4CV9wqV9I3LALXOqlVHKrIMXM.roa (hash: 5x3vho9MO9rEu47x9Xp5hwwnApRM8GMHw6gST5UuYX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:21:d5:d9:9c:21:27:88:d3:2e:c9:51:78:6e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Validity
Not Before: Mar 2 13:00:52 2026 GMT
Not After : Mar 3 13:00:52 2026 GMT
Subject: CN=fb223cb732f7e99c3f46b15cd6d209ef6997ea1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:03:13:16:4d:a5:0e:5a:b3:e7:68:7d:65:03:
c9:5c:35:58:21:d3:62:88:bc:b2:42:43:27:09:a6:
dc:44:33:df:81:9e:a4:ce:4b:03:36:71:7b:ea:68:
df:88:3f:91:bb:69:bf:1f:61:bc:5c:36:ab:97:0f:
e3:8b:18:2f:d0:a1:bb:7f:ab:94:d9:3d:b7:ef:af:
6e:0a:36:14:68:6a:36:cb:4f:2b:9c:c4:7e:4c:e8:
1e:56:34:e1:53:e1:1c:71:f9:55:40:8b:c0:98:f1:
42:a9:fb:0a:d9:0c:c9:a8:d4:37:ed:10:51:13:4c:
57:49:be:ca:4c:8f:86:8e:4d:7a:ff:9f:31:fe:25:
3c:f7:c5:97:28:1e:3e:78:d0:7e:bc:ff:4d:9d:ea:
18:63:16:28:14:a0:e4:c4:84:68:63:ae:a4:c7:07:
17:7a:ab:99:ce:54:1a:62:74:15:de:7b:a9:29:e9:
b0:0e:6f:89:99:f7:f5:49:9a:3a:3f:68:91:91:ed:
6f:a0:08:a5:44:fc:14:5f:b3:23:58:4a:2a:27:54:
8c:c7:5f:2b:ff:7b:39:d7:1a:40:71:56:a0:1d:c0:
df:e6:cd:78:bd:2a:6c:d8:04:94:87:62:e7:cf:bc:
9d:d1:d3:a9:6b:c1:e1:7e:7c:57:b9:2f:5d:12:b2:
8e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:22:3C:B7:32:F7:E9:9C:3F:46:B1:5C:D6:D2:09:EF:69:97:EA:1E
X509v3 Authority Key Identifier:
keyid:4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:25:1a:47:bb:11:51:88:d9:66:bc:ae:8c:14:67:01:9a:ae:
80:69:62:37:e7:d4:fa:85:e3:52:ba:23:54:02:e4:af:a2:c1:
01:75:cf:8b:70:90:3d:a5:dc:69:75:c6:14:de:f2:8a:e0:19:
88:c9:b3:9b:e1:6d:05:9e:03:11:f8:85:47:fe:ad:11:83:4c:
fc:69:eb:f1:02:3d:75:78:30:dc:93:7a:87:19:93:76:8e:ba:
87:ff:da:ca:e0:e9:4a:e8:87:4f:95:78:08:44:14:7b:6d:12:
88:78:0b:07:6f:dd:f3:04:c4:94:a8:c6:76:c5:b1:ff:a5:05:
70:ae:43:51:01:21:dc:b5:09:3f:e4:33:b7:f2:ff:d2:4a:b6:
a2:ec:a9:7e:57:42:38:db:df:31:79:5c:fe:84:a1:d2:2e:35:
4e:fd:8c:14:27:4f:99:60:a8:bd:89:5d:3a:22:f1:56:02:8a:
ae:4b:eb:58:17:72:81:64:f1:70:a8:03:5c:ef:b7:1a:01:f5:
1c:09:82:a0:11:e1:58:d2:b2:7e:d0:c8:7c:7a:55:d5:59:21:
c3:d0:62:09:58:90:5b:5b:60:5a:62:6f:f3:a4:78:97:d7:37:
9c:7a:75:3a:27:74:0e:34:9a:c6:e4:ca:6a:17:3b:92:f2:b6:
6e:d0:10:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:50 2026 by rpki-client