Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
File: TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json)
Hash identifier: xs2K4EnwVDj5sZaqw9ueeKdvDW8wa5I+A2dTTU9fIis=
Subject key identifier: C8:D1:B7:CF:39:BA:11:A8:3E:70:39:F3:9B:41:46:35:3D:35:10:8D
Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Certificate serial: 019CA8A129057763816107EAA2E73262D0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
Manifest number: 04CD
Signing time: Sun 01 Mar 2026 09:00:59 +0000
Manifest this update: Sun 01 Mar 2026 09:00:59 +0000
Manifest next update: Mon 02 Mar 2026 09:00:59 +0000
Files and hashes: 1: 8xG2LUgGMoQo1E0oFZXCsLklpt8.roa (hash: P+5MDoFv+VPER4lMcHzaG5Ao7rqloC0fCfPVJFO8gkg=)
2: NNU8m-ZbGaDewKa80bazCk_gHuc.roa (hash: jNBremlwULSnHvNbBnehGqtceTysa0l4mhsoPRNxZdE=)
3: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: PUDjtWlQcMer5vbgkl5Na1FRRP/qHeDypZvbfks/L48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a1:29:05:77:63:81:61:07:ea:a2:e7:32:62:d0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Validity
Not Before: Mar 1 09:00:59 2026 GMT
Not After : Mar 2 09:00:59 2026 GMT
Subject: CN=c8d1b7cf39ba11a83e7039f39b4146353d35108d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:37:eb:b2:c7:92:3a:91:a5:ff:73:6a:d3:9d:
79:77:60:1e:3e:fc:71:83:0a:47:26:b2:e6:7d:e1:
c4:0e:45:56:d5:c4:75:c8:81:c2:ff:96:19:51:e1:
03:f9:47:1f:74:f7:77:03:cf:c6:dc:94:14:d1:59:
7d:29:33:ea:24:87:e2:f2:52:77:a2:76:bb:ce:6c:
b5:e4:41:11:4f:a0:2e:25:fe:c1:28:6d:b5:de:37:
a1:7b:25:68:86:dd:dc:6e:8c:75:88:24:13:d5:5f:
87:b1:d0:de:f4:cb:0b:1a:6a:cf:72:06:4e:6d:cb:
24:84:cd:15:b4:09:a7:e5:1e:35:e7:15:0e:77:65:
4d:c9:99:52:45:38:b1:54:3b:5a:c0:2e:8c:a0:1b:
e9:2c:74:cc:38:1c:a4:ea:ba:57:95:42:69:64:1c:
c3:ff:a1:9b:16:5a:11:a2:d2:85:22:a5:e4:4d:2f:
bb:f5:9b:34:f8:f9:c5:02:0e:ce:0b:21:1c:a1:20:
34:01:56:36:e1:cd:ee:f6:93:66:39:f8:6c:9f:e5:
e5:77:52:ae:ed:43:88:4d:9d:96:fc:f6:a6:c9:70:
92:81:54:7b:86:2d:57:5e:7e:81:ba:69:b0:29:c3:
67:4f:a3:57:b6:2c:81:38:82:49:c6:0c:a6:c0:32:
3a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D1:B7:CF:39:BA:11:A8:3E:70:39:F3:9B:41:46:35:3D:35:10:8D
X509v3 Authority Key Identifier:
keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1d:03:8c:3f:10:1c:9e:d1:90:fd:50:0b:3f:bd:21:99:c6:
91:4e:61:dd:18:9b:29:e1:ab:b3:12:4d:c7:1f:4a:78:0e:2f:
5d:4b:c9:ce:50:a3:9c:cd:25:cb:6e:db:6b:92:df:1e:77:d8:
6c:ee:97:ef:bc:52:0d:94:57:e4:c8:7a:41:7f:61:48:a8:70:
7d:ee:be:fc:7e:08:bb:82:83:bf:60:cc:4e:40:f7:58:b4:38:
58:90:f9:39:8f:66:cf:1c:1e:65:d0:f7:c7:cc:76:d8:ca:46:
c6:e8:c4:b1:2d:fd:dc:c4:6f:fe:5a:f2:3a:65:b2:89:0a:8f:
e6:08:70:7b:fb:23:d1:45:88:d3:74:3b:7c:16:e0:08:96:f3:
69:0d:7a:a4:a2:3a:91:36:d5:e5:b3:a8:53:b5:a3:ab:87:1f:
37:11:34:7a:fa:cf:51:14:92:e3:35:d2:f8:f4:d0:fd:d5:95:
c0:0e:41:26:57:e7:18:ab:75:bd:2b:e8:08:b3:30:31:26:8c:
a3:3b:88:9b:00:fc:66:37:e3:63:e1:7d:3d:13:e6:7a:d3:d2:
20:8c:2c:c2:8b:83:1f:4e:45:af:16:71:11:42:ed:04:ec:40:
b8:e2:da:c7:35:a8:e9:96:3e:dc:bf:e2:69:8f:b1:76:32:76:
d9:e6:bd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:47:55 2026 by rpki-client