Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
File: TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft (raw, json)
Hash identifier: lpeuSRFyaADQqL9o1Qa3kjrWa4bXVdCaa7FHuPHHndY=
Subject key identifier: C7:B2:EF:38:98:23:EB:B1:05:39:A1:DC:F2:E4:95:DD:C9:8A:F1:5F
Authority key identifier: 4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
Certificate issuer: /CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Certificate serial: 019CAC1001DA245806D6807FEC0BB64A60FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
Manifest number: 14FA
Signing time: Mon 02 Mar 2026 01:00:56 +0000
Manifest this update: Mon 02 Mar 2026 01:00:56 +0000
Manifest next update: Tue 03 Mar 2026 01:00:56 +0000
Files and hashes: 1: TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl (hash: hCTumQWyCenRDg6S/KR0RFP+JsVQi4NA6HajxbhzdGY=)
2: uLeN3kY2ZRDo-2-B-T0hlmjh-nU.roa (hash: eLP3MmcrJSGHUuA9jj4PGJnAA+F8952d8mOEbR6//AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:01:da:24:58:06:d6:80:7f:ec:0b:b6:4a:60:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Validity
Not Before: Mar 2 01:00:56 2026 GMT
Not After : Mar 3 01:00:56 2026 GMT
Subject: CN=c7b2ef389823ebb10539a1dcf2e495ddc98af15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:18:7b:7f:c5:f2:8a:de:25:e5:07:70:04:
a3:c8:0a:23:89:c1:e2:78:54:93:26:32:f2:41:74:
70:08:fc:5f:ed:76:32:f2:fe:3a:13:76:da:12:b3:
69:e4:5e:14:4d:a1:d4:1d:b4:7c:c7:a8:29:d0:dc:
34:8e:2f:cc:f0:20:f5:60:30:0e:20:04:f7:f8:ac:
e3:4d:d0:1d:0b:b4:b5:9a:b7:a3:12:1e:5a:ac:99:
2c:d2:d0:9a:af:5b:ad:a9:9f:35:40:7c:22:b8:23:
97:31:7a:90:22:66:24:8d:e0:63:d8:42:c8:37:b9:
4b:f5:31:28:c4:3a:9a:0b:b3:0d:cd:82:d9:11:81:
d1:a4:2a:67:c7:1b:f0:ec:b0:47:88:bd:da:4a:48:
d6:50:86:21:af:45:5a:74:12:04:0b:ef:ef:8d:41:
b6:a5:f8:92:84:90:9e:c8:57:33:b0:d0:3d:b4:3a:
85:64:cc:ad:f7:c9:c2:96:9f:ef:07:85:c1:94:c9:
0f:9b:bb:df:74:8a:ea:cf:32:50:54:2a:94:86:c2:
06:64:5f:ab:5f:07:7f:d1:e7:ba:cc:79:59:7b:c4:
42:6a:2f:bb:d3:74:e2:0d:37:a2:94:6e:46:ee:66:
a0:41:db:7f:74:b1:d4:76:2c:43:d3:05:80:a2:80:
0f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B2:EF:38:98:23:EB:B1:05:39:A1:DC:F2:E4:95:DD:C9:8A:F1:5F
X509v3 Authority Key Identifier:
keyid:4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5e:7c:44:6e:a7:f2:9f:25:01:72:59:38:ce:d0:26:dd:ae:
9e:10:15:dd:aa:c9:7c:82:dd:2b:0d:68:64:e9:69:36:a3:79:
7d:9f:08:3a:30:ad:d2:27:18:25:8f:f9:33:14:33:1c:d1:9b:
b3:0d:22:aa:9a:b8:b4:11:71:94:9f:e3:a0:b7:82:79:be:08:
84:d7:ef:c9:25:65:93:49:6a:43:36:4e:fe:b7:1e:99:6c:c5:
87:a3:5b:88:91:34:da:98:7c:d9:61:a5:24:0a:17:34:09:cd:
bd:10:45:74:21:74:0c:03:01:cf:0c:dd:d4:6d:52:59:f7:7a:
7f:8f:9f:8a:21:5d:a2:ac:1e:e0:d3:85:63:85:c4:b5:95:17:
78:99:19:6e:6a:7c:48:05:39:ee:18:58:04:78:71:99:ad:89:
fa:25:42:36:46:a9:15:cf:a6:72:a2:f6:4a:be:4d:fd:80:45:
2b:1a:4b:ef:84:a3:bf:b7:4f:79:94:ab:98:ed:ff:0f:66:08:
e6:c9:bf:e7:04:c2:68:38:1c:1b:df:b1:a3:61:cd:92:9a:09:
39:a3:6b:a7:06:ef:71:b9:ba:00:a3:09:cf:65:75:53:f8:aa:
d7:41:8d:7a:7c:3b:a2:ab:56:51:32:d7:02:b5:e0:69:09:d3:
c7:c1:2b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:55 2026 by rpki-client