Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
File: TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft (raw, json)
Hash identifier: W1/leAvpPzMacB3/NnJfotTDyUPTU1XZ0DeHZ23vmB8=
Subject key identifier: 71:56:E7:A0:09:9C:DB:AA:0D:66:12:7F:F1:16:80:26:49:AF:38:9E
Authority key identifier: 4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
Certificate issuer: /CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Certificate serial: 019D38D3B9F93A07F6C399052558F1EF3272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
Manifest number: 0950
Signing time: Sun 29 Mar 2026 09:01:32 +0000
Manifest this update: Sun 29 Mar 2026 09:01:32 +0000
Manifest next update: Mon 30 Mar 2026 09:01:32 +0000
Files and hashes: 1: PqzFQQ5sES2MqGglMugWf_lMxyY.roa (hash: khSqFydqj9KZQBk9HYnRXgBI+ueTAb2xBqHtEX2tAzU=)
2: TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl (hash: GANo6hnuY/U12dFWCvIEMl3SV8w8EY0Yksg4u4okWNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b9:f9:3a:07:f6:c3:99:05:25:58:f1:ef:32:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Validity
Not Before: Mar 29 09:01:32 2026 GMT
Not After : Mar 30 09:01:32 2026 GMT
Subject: CN=7156e7a0099cdbaa0d66127ff116802649af389e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:34:21:00:5f:2a:0f:02:94:78:e4:98:c6:9d:
74:2e:61:23:37:df:02:92:9e:8c:74:59:17:39:99:
1f:dd:cf:78:23:50:41:c8:c5:6a:db:50:4c:e6:b2:
2b:c6:51:9a:2c:c6:c5:c2:18:a8:48:7e:d8:d8:5c:
ab:6b:c7:50:64:3b:14:d0:12:50:87:e7:ae:73:8a:
41:2e:4f:3d:ba:7c:9a:33:93:a3:35:c4:17:2b:f9:
a3:31:9a:26:20:21:62:06:23:75:4f:61:93:f6:be:
00:6f:bc:20:36:9c:ad:29:15:85:16:46:b9:00:f1:
b0:0a:80:6e:c8:8a:3d:86:5a:ea:4e:fc:8b:e6:4d:
e9:3a:8f:b5:64:7f:a5:e0:04:6b:c6:29:f2:b4:4d:
61:72:bf:65:29:da:91:14:ac:8a:90:f3:5e:54:2a:
cc:9c:2d:2b:9e:05:8c:ef:86:b3:fb:ce:51:91:e5:
76:4f:6c:ea:f2:84:47:64:b9:b6:0b:09:95:f1:b8:
06:90:f9:e9:d4:36:83:c4:e6:d4:ef:e9:fe:b0:01:
47:22:fe:a3:93:b2:b9:e6:22:d1:6a:c9:eb:39:2b:
49:9c:94:b6:a9:0d:9a:3c:47:a2:50:00:89:45:a7:
89:e4:0e:c5:0b:4d:77:a6:e3:d1:4d:54:5b:a8:8b:
d1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:56:E7:A0:09:9C:DB:AA:0D:66:12:7F:F1:16:80:26:49:AF:38:9E
X509v3 Authority Key Identifier:
keyid:4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:9f:fc:9e:d5:e8:86:22:98:70:38:f2:f3:72:46:05:c5:68:
46:9b:e1:02:59:43:f7:50:73:0b:ea:7f:43:ad:f9:8f:b5:7d:
db:3e:8f:a7:bd:d5:b4:15:68:5d:f1:4b:de:37:0a:46:99:99:
58:2e:15:2e:83:24:21:23:bc:7c:a6:5b:fa:7e:9a:71:db:a7:
12:e2:02:0c:f1:07:d2:9f:61:a0:6b:b8:a2:0a:96:28:c7:7b:
7e:c0:02:d6:3a:4c:ca:7a:fd:66:e9:0c:64:20:a2:51:d1:fe:
98:51:e6:88:57:d9:ef:a2:72:b2:2c:3a:72:7a:00:de:fd:d2:
e0:14:70:3d:89:4f:a7:f0:9a:ed:f8:fa:45:ff:fd:ee:18:c4:
54:c7:bb:fe:95:2d:47:2d:09:af:59:7a:84:93:ce:ac:a7:d7:
e2:d8:3d:5d:e3:81:80:eb:fc:b4:0a:31:0f:3c:be:8b:94:a5:
e1:bc:d1:8f:87:3d:35:49:92:a9:82:39:a9:15:c6:fe:2a:5e:
98:17:db:34:26:5f:6f:57:bb:08:ff:ac:71:35:57:12:d5:b9:
ad:07:48:fb:9e:b3:e3:6d:44:5e:4d:d6:63:37:ef:a7:12:f2:
52:97:36:62:80:cf:b3:46:de:1d:39:f4:71:1a:a1:18:df:80:
6b:61:59:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:58:15 2026 by rpki-client