Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
File: TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json)
Hash identifier: V0la1ugJcB8jaS5HBxjhTsg/GzihpU9Ekrrpmay9Nng=
Subject key identifier: 73:90:C1:E6:83:43:42:51:87:7A:4B:13:5C:28:2D:34:05:71:CB:1A
Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
Certificate issuer: /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Certificate serial: 019D3AC225A6681BB65A96FB536C0BC1E304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
Manifest number: 068A
Signing time: Sun 29 Mar 2026 18:01:35 +0000
Manifest this update: Sun 29 Mar 2026 18:01:35 +0000
Manifest next update: Mon 30 Mar 2026 18:01:35 +0000
Files and hashes: 1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: uq1zG6Zm9d+au2C9hcg6Xrz6Y0DS210qpxebyPjEVuU=)
2: s8uoBmRDwT1I6UHn-j9HLjE26mE.roa (hash: 93nVEqAB+I5Wpe2PdQ+LQC2FT2DxNkUueoInceH3LxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c2:25:a6:68:1b:b6:5a:96:fb:53:6c:0b:c1:e3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Validity
Not Before: Mar 29 18:01:35 2026 GMT
Not After : Mar 30 18:01:35 2026 GMT
Subject: CN=7390c1e683434251877a4b135c282d340571cb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:99:25:0b:18:68:79:ce:fb:8e:60:6c:a2:5c:
3c:69:59:ee:4f:8c:f1:b8:71:9a:e1:cb:8f:2a:92:
c7:67:5f:34:77:38:ad:45:1d:92:1e:5c:29:36:b5:
5b:06:30:ac:5b:d9:1a:45:5e:e3:ed:db:6c:20:e2:
1e:71:e6:8a:8f:d1:fb:1d:49:c1:da:0f:fa:4b:d8:
b7:25:3d:d5:12:1f:0e:6e:c1:6b:fc:6e:fc:06:a9:
f9:7c:c0:dd:22:ce:3e:a9:59:a4:f0:2f:47:ae:ac:
d4:2d:94:cc:74:fd:c7:0d:8a:42:31:4c:6a:20:0e:
55:3c:b2:6b:2e:92:2f:e1:18:47:ec:f9:9e:7f:39:
d5:9e:fe:1f:3b:28:be:f7:d6:e8:5c:ad:f8:da:cb:
99:e2:3c:f9:0c:61:91:43:69:38:e4:75:83:20:58:
ce:84:fa:b3:ac:20:01:96:a5:51:c9:09:a9:aa:da:
a1:92:66:4d:b2:cf:a2:02:35:30:75:de:0e:e0:7b:
55:7f:89:3d:65:f1:be:ae:a6:a6:6a:c8:3a:dd:48:
f4:56:00:5f:95:b7:3c:25:f9:b2:a2:a1:2a:bd:d8:
55:99:9f:72:ce:9c:d1:e8:72:b1:d0:5d:ba:56:93:
92:b8:c1:e5:6b:64:0d:8d:6c:a6:44:a1:ad:7e:d6:
f2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:90:C1:E6:83:43:42:51:87:7A:4B:13:5C:28:2D:34:05:71:CB:1A
X509v3 Authority Key Identifier:
keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:01:6e:0c:e1:d4:91:37:d2:50:74:9c:4a:85:90:ce:50:c4:
d6:60:08:ac:e2:8f:df:8c:b8:bc:64:c0:1d:72:fc:a7:9e:08:
b8:4b:b6:8f:50:27:02:44:e8:03:23:a7:73:b6:5a:82:1d:b3:
2f:34:ec:e5:b1:86:88:ab:3c:23:e0:3d:28:dc:1c:bf:63:c1:
0c:9e:ac:18:58:21:7e:e5:ca:d3:47:45:3a:c6:a8:e9:c4:aa:
ac:b0:c8:3d:fc:57:ed:85:1b:d1:b6:20:a7:1e:f1:9e:9c:93:
24:b7:85:03:d8:25:4c:d4:76:7c:f4:13:0f:98:0f:68:2b:90:
be:5a:7d:e8:47:27:f8:c0:82:0d:fc:d6:e5:d3:7d:44:3c:be:
79:ed:25:aa:7d:4e:89:a4:ff:2c:9e:56:30:f8:32:e5:fe:ed:
a8:fc:13:ff:98:09:04:e8:5a:2e:62:49:a9:53:af:cf:2a:ae:
f9:49:63:ba:c2:b4:30:6c:8a:ec:08:a1:15:c7:81:12:a5:bb:
23:e5:5d:0a:51:09:ff:42:8e:7e:56:b9:0e:fa:6a:3c:db:6f:
a4:9f:36:ce:b7:0f:c0:42:d4:a0:71:da:50:d7:97:ff:0e:bf:
67:83:19:b4:2d:15:46:9f:50:96:b9:6c:17:56:78:9d:10:84:
60:86:5e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 23:45:25 2026 by rpki-client