Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
File: Tk9mXUbWoqvwUh5csffEUcozeoc.mft (raw, json)
Hash identifier: YsQTcznn6gQSJXl9uFldaT3KNB7mehDYBNFk02TaZHQ=
Subject key identifier: B4:21:8E:62:05:D0:2D:D2:09:53:6A:56:02:D6:0F:E5:9B:9C:9F:18
Authority key identifier: 4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
Certificate issuer: /CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Certificate serial: 019D38667F031619D32D7F607211FE709C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
Manifest number: 0471
Signing time: Sun 29 Mar 2026 07:02:14 +0000
Manifest this update: Sun 29 Mar 2026 07:02:14 +0000
Manifest next update: Mon 30 Mar 2026 07:02:14 +0000
Files and hashes: 1: Tk9mXUbWoqvwUh5csffEUcozeoc.crl (hash: Q7v4YqDCLuLoUpxh7MVMR7uCcsJdNmYPJTB1HqnXB/c=)
2: bl7MJdXz_EhEovm2UbN_gTDULoY.roa (hash: d4NySi+tNKI3bH93zeiTjj+HNhdoL7gliIMJmvtOe7U=)
3: cLXri-wviIsJ5iHidksAtpZN5SY.roa (hash: UtWyYW3E/+2IaDZ2hwPVOR71jr9t19OookjTmPk0g7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:7f:03:16:19:d3:2d:7f:60:72:11:fe:70:9c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Validity
Not Before: Mar 29 07:02:14 2026 GMT
Not After : Mar 30 07:02:14 2026 GMT
Subject: CN=b4218e6205d02dd209536a5602d60fe59b9c9f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:0e:65:f9:00:70:fe:56:16:ae:b4:31:84:
72:f6:8d:03:e8:ee:06:02:8c:d3:f6:c0:23:30:b7:
0b:e6:2a:60:1e:86:86:a9:01:b5:76:f2:03:22:28:
4e:40:be:10:d1:dc:0f:3b:ae:59:d5:12:23:57:75:
e0:81:38:e8:50:a4:c0:a9:db:bf:f7:61:f3:0d:94:
16:35:de:0b:d7:04:d9:87:85:d6:67:2b:73:d0:24:
c9:7f:f6:10:51:e9:a8:56:48:df:4f:4e:72:97:ba:
1c:70:f1:c5:10:dd:32:9d:07:3e:1a:66:4f:88:c5:
6d:88:cd:cd:69:40:cf:18:7a:e5:b5:40:d7:0f:8d:
fc:4a:fc:17:81:4d:85:df:13:dd:95:ba:ef:30:91:
6a:3f:f8:12:10:6b:1c:76:81:ba:6e:4b:6d:d2:2a:
2e:89:f9:b7:b1:8c:a8:58:ab:58:0b:80:97:65:56:
47:f6:64:a8:c9:c7:a3:92:62:f8:21:54:7c:4c:1d:
14:a0:f2:d9:75:35:b2:0c:45:9b:17:2a:c8:74:28:
ad:68:de:b1:d4:64:89:e2:92:1d:9c:48:86:7f:71:
be:e2:9f:b4:75:cc:52:cf:ee:a0:45:b2:5e:24:3c:
43:9a:6a:ac:dc:82:55:f1:fc:93:27:41:9b:67:4d:
13:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:21:8E:62:05:D0:2D:D2:09:53:6A:56:02:D6:0F:E5:9B:9C:9F:18
X509v3 Authority Key Identifier:
keyid:4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:de:3f:b6:52:56:47:14:74:64:ea:7d:c1:f6:b4:b5:23:13:
8b:e5:76:47:7f:24:5c:ea:f9:bb:7a:2c:94:28:2c:b0:ea:99:
d5:b6:eb:9b:80:07:ea:10:44:d3:56:d9:31:6f:e3:0c:2d:e8:
89:8a:e1:7a:60:2f:26:f2:4d:64:5f:b0:66:d5:03:8f:35:7d:
1e:2b:eb:36:df:77:3c:ff:30:d4:69:7e:db:ad:0e:c4:3f:6e:
4b:67:42:ff:49:c7:b0:61:6d:35:35:65:1d:f0:0c:df:8a:6d:
d2:12:58:3c:56:3a:d9:23:64:3e:2e:a9:b4:3d:97:bc:2c:b8:
9c:8a:d5:54:5d:ee:8c:a9:60:0d:c4:8b:8a:9a:24:5f:a1:a2:
3a:69:8a:dd:94:7d:6c:fb:d7:1f:71:99:57:f2:94:57:a1:be:
d6:c7:40:21:90:fe:63:8d:e3:1d:d9:b6:d9:c7:f0:db:fc:33:
d2:35:4c:a1:92:39:c0:7a:0f:da:eb:3d:ed:51:26:19:b6:91:
2f:aa:48:99:c9:a7:1d:c4:75:b8:0b:b3:71:7d:f6:ec:e5:37:
0a:8a:61:2c:dc:2f:2e:00:86:24:0e:f5:8d:e4:68:c4:cc:1f:
76:38:cb:eb:6f:b7:7c:90:60:94:39:a2:22:f3:a0:ce:cc:6a:
3e:83:a0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:45 2026 by rpki-client