Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
File: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft (raw, json)
Hash identifier: 2Rd3IcAEa8xzxShXGCGH9n8Xul1gJKP5tc8b3uHSJfE=
Subject key identifier: F9:56:80:74:71:56:1F:2E:FD:F6:E6:A2:29:5A:99:07:3B:3B:4F:4F
Authority key identifier: B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
Certificate issuer: /CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Certificate serial: 019D38D32A5F629763E0AE2741A4F9918884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
Manifest number: 0DEA
Signing time: Sun 29 Mar 2026 09:00:56 +0000
Manifest this update: Sun 29 Mar 2026 09:00:56 +0000
Manifest next update: Mon 30 Mar 2026 09:00:56 +0000
Files and hashes: 1: Jyr3qQaLkuFGdzyQkxaiY8QG9Zk.roa (hash: +0lMWS/2H1/8Ey92DgxBFaeX3VGewzw1q8R4yOnjB60=)
2: tFNoCvw9HYCrtZV5yr-M-6rUHmA.roa (hash: Xnq4r13lagE2sQ4IPeUB5jj7VyVhoMHz0umUI4YNTLY=)
3: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl (hash: +ResOS3AOlN4xUiyaW1rDtONSzQ2f09oxce3lGX9uhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:2a:5f:62:97:63:e0:ae:27:41:a4:f9:91:88:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Validity
Not Before: Mar 29 09:00:56 2026 GMT
Not After : Mar 30 09:00:56 2026 GMT
Subject: CN=f956807471561f2efdf6e6a2295a99073b3b4f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:94:ef:35:70:ec:76:fc:43:d6:93:f9:5a:a9:
34:20:32:86:4e:d4:1d:e9:0a:6d:75:2d:ec:66:fd:
9f:2c:0a:80:a2:50:72:7c:cf:ef:c7:97:87:da:94:
6f:6c:da:12:9b:71:f4:8c:7e:ef:9c:b1:06:f6:36:
a3:0b:8c:67:a7:bc:fd:1b:19:7c:81:d2:7c:1a:81:
fc:3b:a5:f3:5c:68:80:18:f7:47:ef:fc:c6:b6:e1:
e4:44:a8:5d:3e:d9:0a:24:8c:96:b3:27:32:fb:ee:
b5:7e:11:ce:c6:ad:9e:5e:8f:3c:02:b6:ec:3f:8c:
41:cf:b8:9a:30:20:e8:0f:90:e6:71:f1:0b:00:80:
22:d4:0c:af:f3:5e:2f:62:0f:66:85:70:10:9c:ed:
55:22:06:fa:69:7c:ca:6a:a6:a1:21:41:54:16:44:
de:3b:ec:22:89:71:02:12:26:c2:49:07:02:00:42:
e6:b3:d7:92:7a:d6:ec:26:c1:8e:66:1e:f4:26:49:
63:c4:06:9d:cf:2f:05:d7:c9:37:7e:fd:ca:f6:f5:
6e:29:92:3c:cc:1a:73:69:7a:27:07:ce:28:79:7a:
9f:f2:fb:80:cd:fc:e7:9d:fa:7a:61:f4:96:a7:0b:
ee:da:ba:71:0f:0c:c2:3d:55:ec:44:dc:08:f2:85:
53:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:56:80:74:71:56:1F:2E:FD:F6:E6:A2:29:5A:99:07:3B:3B:4F:4F
X509v3 Authority Key Identifier:
keyid:B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fc:16:99:76:93:1a:49:bc:66:47:9d:3d:86:2d:25:a4:ef:
f0:09:c0:38:1f:cd:d2:67:56:e5:19:a1:6d:a4:5f:b8:f6:5f:
e1:b6:38:bd:8e:68:e4:a6:90:b4:9c:88:94:52:61:4e:76:bc:
cd:db:64:51:5c:76:f0:c0:c9:2a:2b:5f:94:b2:9d:3c:c3:b9:
ab:5b:ce:3f:f7:b9:e5:20:15:90:49:93:1f:5f:25:58:8c:e5:
e3:9f:47:2b:95:87:17:19:e3:0e:7c:88:35:a4:fc:c7:85:60:
b7:d3:72:b6:d1:e3:b0:9b:2f:5f:66:86:a5:d4:3e:45:82:d5:
48:0c:4f:f6:90:bc:b3:a2:41:a6:26:bc:de:af:6f:43:e8:70:
68:9a:38:87:0c:5e:48:21:21:6b:9b:37:fe:a2:16:95:63:88:
bc:17:a9:8f:6f:07:0f:cc:d0:0f:e4:11:75:a9:c6:8b:ac:e4:
68:9f:a9:5a:5e:a0:b1:15:ea:d4:a1:22:75:8f:1d:5b:56:63:
ef:22:db:24:fe:33:5f:cd:55:6a:fa:1e:d4:29:55:f6:dd:2c:
30:d0:ac:32:94:ec:6b:2f:b2:42:79:e0:f2:c2:f3:5d:99:0e:
e1:4e:2f:8d:8c:96:18:e0:61:1b:35:25:73:35:4d:10:55:c2:
6d:76:40:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:36 2026 by rpki-client