Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
File: TBdAzvl0ncKw9fiM3xA02oHWBtw.mft (raw, json)
Hash identifier: 9lTLcvd5Ekk5BxPnJf0xtA7IPmZU4nKjGWNG9Gct9AY=
Subject key identifier: EA:4B:70:0A:C3:DB:C2:0A:3D:A7:B0:E1:DE:6A:52:6F:7E:38:41:64
Authority key identifier: 4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
Certificate issuer: /CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Certificate serial: 019D37C1004D98958D8135D8526C3E69C18C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
Manifest number: 120E
Signing time: Sun 29 Mar 2026 04:01:28 +0000
Manifest this update: Sun 29 Mar 2026 04:01:28 +0000
Manifest next update: Mon 30 Mar 2026 04:01:28 +0000
Files and hashes: 1: TBdAzvl0ncKw9fiM3xA02oHWBtw.crl (hash: 4CIqckHiPTDaNFksseoJzqQr0EaeWUJ78Qz7N200faI=)
2: YVsXJWPnPlqWMFeltxgBZhUCs4Q.roa (hash: q9sjXMHf5vLLJ+Iss0xTQC2tfqQnUkneeNz0HcAGC9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:00:4d:98:95:8d:81:35:d8:52:6c:3e:69:c1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Validity
Not Before: Mar 29 04:01:28 2026 GMT
Not After : Mar 30 04:01:28 2026 GMT
Subject: CN=ea4b700ac3dbc20a3da7b0e1de6a526f7e384164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:de:0b:8f:43:ab:b6:ad:86:49:ee:b1:fe:
ff:3d:6c:13:af:72:bb:2c:bb:9b:f7:5d:57:3b:6d:
f2:5b:9d:53:62:8a:5c:12:91:bd:31:d5:51:d1:c9:
54:8e:c9:a0:40:d3:a2:a9:74:b6:0d:63:a8:a7:3f:
5c:ea:24:3b:44:62:e5:41:83:0a:e5:06:dd:a3:95:
da:77:07:14:04:10:c6:9f:c8:f6:62:ba:fd:54:8b:
3a:f0:dd:f8:d1:71:4f:59:84:8a:e1:f8:d4:d8:5d:
49:ea:ad:0f:31:ca:84:4d:e9:34:7e:2b:4e:c5:67:
c0:85:e4:73:ea:96:37:fe:20:d2:aa:53:a7:42:57:
29:93:b1:c2:bb:ab:0c:bd:5f:cc:14:d2:15:c5:db:
39:16:99:a5:33:3d:07:4d:3a:f9:22:f9:bb:85:aa:
40:d0:63:d1:86:1a:51:31:bd:26:f1:d5:5d:9d:36:
db:76:a2:63:60:32:20:99:ba:e5:26:1d:e6:c9:03:
03:83:81:19:89:ea:14:a2:39:d4:69:cb:2c:95:fa:
c6:ce:66:a1:8d:11:7f:62:cd:ea:6d:52:13:98:66:
c1:2e:28:f3:8c:14:50:20:3a:d8:0e:bc:99:82:79:
6e:e6:46:54:21:4f:06:09:3c:ca:8b:af:e2:0c:42:
67:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4B:70:0A:C3:DB:C2:0A:3D:A7:B0:E1:DE:6A:52:6F:7E:38:41:64
X509v3 Authority Key Identifier:
keyid:4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:93:be:47:e3:29:f1:30:d8:1a:9f:32:00:b2:c8:03:1e:e2:
5a:54:f4:27:89:60:36:d4:89:df:13:18:3d:11:e5:ff:26:94:
fe:65:74:de:15:1b:be:a7:1a:cc:58:85:56:fe:4b:d0:8e:c2:
9a:7d:12:5b:c7:f2:3f:95:68:60:a7:cb:e6:c1:c4:f5:53:79:
0b:1a:ae:8d:f2:13:47:33:e8:50:14:c5:46:6f:f8:51:07:61:
1e:d6:07:56:e9:71:ca:e5:05:ed:cc:02:23:1c:95:af:15:9e:
72:a3:c5:41:b4:34:e0:1e:f9:e5:8a:cd:fa:1c:15:ae:59:16:
d5:35:13:e2:fa:cc:0f:31:10:13:d4:1a:37:bd:f1:0f:d3:4b:
fc:32:43:56:97:2f:2a:0b:c4:be:aa:21:3c:86:d9:b3:99:67:
39:ad:6c:a8:30:a6:75:b7:be:c9:69:b2:f7:74:76:75:3b:3e:
e9:25:2c:86:a9:63:fc:94:92:6a:7f:e7:e0:95:bf:71:4f:05:
88:a6:df:3e:44:bf:53:e9:8d:15:28:dd:3c:60:73:fd:fd:87:
96:0d:2f:83:97:2a:fd:60:7c:42:d5:4a:24:ea:68:50:44:6a:
a8:29:6f:e1:af:54:b3:48:57:ff:87:67:7d:78:14:0c:66:b9:
d3:bd:ad:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:11 2026 by rpki-client