Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
File: TOmGBryaXUQHT_jL7cvbz8NfBWI.mft (raw, json)
Hash identifier: Bae9PdSYEjOMwbGmaChjvVDsM3yV1nUKL268thIjWV4=
Subject key identifier: B6:42:56:D7:0D:4C:85:28:25:4F:36:74:A4:20:10:0C:B6:81:E8:EC
Authority key identifier: 4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
Certificate issuer: /CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Certificate serial: 019CAAFD061068EEE0639D72718F7B5FC914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 20:00:34 +0000
Manifest this update: Sun 01 Mar 2026 20:00:34 +0000
Manifest next update: Mon 02 Mar 2026 20:00:34 +0000
Files and hashes: 1: C5Z-09c-UNKANhS9Y8455wChPaI.roa (hash: kwkm/1oRmvGWA+6dVE+pHfwpAhyhTdzdAoLVyPCKLrg=)
2: TOmGBryaXUQHT_jL7cvbz8NfBWI.crl (hash: v1sGBOD1CxDI/067vQWRyt+3kbR083svNlQ4NZrMErU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:06:10:68:ee:e0:63:9d:72:71:8f:7b:5f:c9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Validity
Not Before: Mar 1 20:00:34 2026 GMT
Not After : Mar 2 20:00:34 2026 GMT
Subject: CN=b64256d70d4c8528254f3674a420100cb681e8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:0c:0a:45:68:92:83:2b:07:a5:bc:cd:53:
af:7e:d9:44:58:c4:50:00:cb:62:23:c5:5f:4d:d2:
f4:fb:29:ca:09:54:17:1e:32:9c:3c:18:1a:64:4f:
c8:06:e5:55:66:b7:c4:bb:76:42:27:b9:95:62:8d:
f6:88:62:17:4d:ec:93:bf:97:f5:40:f3:50:7d:94:
f2:49:05:cc:0e:56:93:89:60:76:b6:06:72:51:e6:
6c:f7:ed:20:a2:a0:8c:f8:0d:24:04:1f:61:5c:bd:
b3:7d:44:4f:5c:89:25:93:48:4f:16:09:fe:05:f5:
5a:3a:85:79:2e:4b:7d:93:a4:12:59:c5:1d:0a:a7:
1c:a3:50:9f:2b:84:1a:08:4f:ec:74:aa:f8:25:19:
5c:5e:d9:22:2b:7d:c0:25:6f:e7:e4:83:b1:7e:b2:
d3:3d:ce:8f:6c:be:8c:0b:9e:4e:39:75:8a:c1:0e:
6b:ac:e3:b6:c3:a6:07:56:21:9c:47:e0:f2:b7:89:
82:d0:e6:4d:6b:b9:69:f8:33:99:02:90:d4:9d:ba:
9a:11:44:0c:4a:7b:17:1b:64:10:46:8e:90:98:b7:
b4:98:e5:65:68:5e:de:25:98:91:19:54:16:b4:02:
f7:b1:4f:eb:48:8c:f9:87:44:40:36:8c:66:c0:e1:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:42:56:D7:0D:4C:85:28:25:4F:36:74:A4:20:10:0C:B6:81:E8:EC
X509v3 Authority Key Identifier:
keyid:4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ce:99:e3:b1:20:2c:a1:7a:80:2a:4c:68:a2:88:f6:a2:09:
36:11:6a:46:38:2e:12:10:b7:c0:ca:9d:8b:ff:9b:5f:bd:3d:
04:f8:4f:8f:a1:3d:32:25:77:f2:53:61:65:ae:f6:dd:b6:f1:
32:a3:62:53:b0:2b:2c:92:15:4f:7d:78:7d:98:91:1d:f8:1c:
72:8e:80:de:f4:e0:94:dd:a0:dc:ab:e2:37:31:02:94:72:8e:
af:cf:c3:ee:89:65:7d:22:71:98:b5:59:d3:66:e9:74:30:e8:
92:86:fc:39:cc:fb:a2:15:3d:7e:ac:88:ec:91:c5:17:2f:c0:
86:d8:e1:6e:59:b2:1e:01:5b:be:72:fd:fc:2a:5f:46:4e:95:
0d:50:68:31:91:72:fc:d3:9e:42:a7:91:93:10:1c:0c:5c:ea:
d9:e9:b1:94:f5:53:cc:ab:c2:7a:5f:ab:dd:cb:1a:18:a9:75:
d6:53:78:3d:32:fb:0b:e0:3f:ff:10:c1:6f:43:74:53:56:d4:
98:04:7d:6b:02:77:0a:4e:47:89:be:35:d3:88:39:4b:22:40:
2a:ec:21:0e:02:fc:5d:20:ab:a6:5f:8f:24:7f:80:34:e2:d2:
58:60:ec:e3:9f:ef:26:14:fe:f6:d9:cf:10:cf:ac:bf:ef:61:
be:65:f7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:32 2026 by rpki-client