Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
File: Tc_QAaZn4WRatAxbvtifWScAT4U.mft (raw, json)
Hash identifier: BotbwN4VD7pdyZG17frozxLcTh86vaoVsH+ks7QKg3o=
Subject key identifier: B9:F2:E8:04:3B:D5:A2:07:C2:BD:49:16:3C:74:44:CE:CB:C6:77:4E
Authority key identifier: 4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
Certificate issuer: /CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Certificate serial: 019D39E5C747A1C414C3351354969998D275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
Manifest number: 0CBB
Signing time: Sun 29 Mar 2026 14:00:53 +0000
Manifest this update: Sun 29 Mar 2026 14:00:53 +0000
Manifest next update: Mon 30 Mar 2026 14:00:53 +0000
Files and hashes: 1: Tc_QAaZn4WRatAxbvtifWScAT4U.crl (hash: BP+ufjRiBZTNxemerfjkQFbiWyywkfrb5sdYsan8n44=)
2: UKP4TUcHQtGrFZOuVGeoJQ7WW6Q.roa (hash: 99B0w3hw/yKL8K1EFcdu+2H+KrVDmHXCwq/A1IUCotg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:c7:47:a1:c4:14:c3:35:13:54:96:99:98:d2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Validity
Not Before: Mar 29 14:00:53 2026 GMT
Not After : Mar 30 14:00:53 2026 GMT
Subject: CN=b9f2e8043bd5a207c2bd49163c7444cecbc6774e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:67:1b:aa:71:b2:31:af:5e:55:da:80:ad:2b:
ec:ed:6f:49:b5:ac:5b:93:ec:26:5e:ec:77:cf:38:
37:ea:06:fe:b0:99:cc:d5:4d:f9:21:60:1f:1e:f9:
71:ee:3c:87:9c:f5:45:4f:5b:f6:96:91:4c:c1:c3:
fd:1c:37:a6:8b:84:85:94:67:20:20:a7:95:da:5e:
29:f7:21:92:f5:c2:36:b3:cd:d2:eb:fa:c7:cf:3e:
ec:ca:10:c1:42:ab:73:ef:81:ce:13:3e:01:ad:b4:
47:2f:74:75:59:ab:62:2c:33:33:f4:57:4d:5a:fc:
96:67:f6:0e:2d:05:3f:39:5b:9e:b1:1f:fe:95:d9:
d8:b9:6e:2b:a4:3f:e6:df:f9:45:b1:92:c8:49:9a:
8d:ab:a8:a0:a1:36:a4:b5:98:7c:67:43:ad:dd:a8:
c8:c0:f8:fe:76:4e:35:6b:89:f2:ec:44:2c:81:be:
c1:48:34:68:0f:e2:e1:13:f3:bd:54:b5:d5:ac:6b:
47:a4:79:ca:df:e8:44:1c:b8:26:d4:d9:6a:30:31:
32:fb:3c:43:4d:d9:12:bb:da:cb:b6:cb:e9:9d:11:
6e:51:bc:b5:48:99:70:27:19:17:03:ce:c6:11:ef:
ad:aa:ad:1b:e6:b4:b6:6b:c0:e8:12:58:80:41:6e:
d8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F2:E8:04:3B:D5:A2:07:C2:BD:49:16:3C:74:44:CE:CB:C6:77:4E
X509v3 Authority Key Identifier:
keyid:4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:38:50:02:77:f5:0a:17:52:5a:5f:20:0c:d8:6b:5b:3a:57:
7c:15:a6:be:03:bf:b1:d9:fc:70:27:54:fe:e3:9f:c7:99:97:
95:76:71:ef:e8:2c:87:c8:b3:77:fa:54:c5:52:c8:39:20:06:
29:09:a5:7c:0d:9f:4b:18:ce:0c:48:fe:7e:14:4a:22:62:73:
e0:28:e2:bb:3d:b6:d4:15:35:d7:45:dc:6e:1f:cb:d7:02:bb:
0a:dc:d8:12:17:f5:22:f2:ec:13:fd:28:48:bb:7f:22:cb:79:
74:01:62:ad:60:18:45:86:27:e4:81:bc:dc:bd:4c:f8:4c:33:
0a:15:da:6d:06:d8:07:15:70:4f:70:f4:dc:d2:24:de:e7:de:
31:e1:f6:66:fb:c7:3e:88:c9:48:82:66:8d:a7:f3:7e:b5:4d:
e5:93:4d:7b:2f:75:93:95:c8:21:df:52:c9:28:48:6e:a8:e8:
b6:f5:70:ee:ca:99:01:b6:b1:f3:08:2e:5c:bb:2d:c8:b3:cc:
56:24:3b:7e:7e:ce:a5:f1:65:47:cc:1a:1a:e6:10:05:ed:c2:
7d:70:a6:93:8e:78:ed:7e:ed:90:2d:06:04:51:fc:bd:cc:b9:
b6:68:ee:09:9b:59:e9:fb:f0:fc:f9:92:dd:8d:93:fb:fd:42:
fe:1a:f4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:29 2026 by rpki-client