Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
File: Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft (raw, json)
Hash identifier: bLd0Fwr7UJt3N9qkQCo9kJKAxIizYIkmyGqGwOoHfyw=
Subject key identifier: 2A:07:03:5F:22:E7:1E:BB:45:07:24:29:85:6D:1D:E8:38:3B:5A:03
Authority key identifier: 4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
Certificate issuer: /CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Certificate serial: 019D371BEC3D4AB869CBD5B8A9F3FA955667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
Manifest number: 0742
Signing time: Sun 29 Mar 2026 01:01:09 +0000
Manifest this update: Sun 29 Mar 2026 01:01:09 +0000
Manifest next update: Mon 30 Mar 2026 01:01:09 +0000
Files and hashes: 1: 1-dWw94LOwYVb6Z8yvlC4x7hkhMc.roa (hash: e7q0PiGn+nkXQe803oPBPZRnyfk/0arkshZocK67CGw=)
2: Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl (hash: mnLkWp1VCXmA0RW/6t+bmGMV1DoNsHHoOdMt+UKiHwg=)
3: V4jhpHULY3kG-luzllvrbKQbZ9c.roa (hash: EMpkHgy+YsqyHIc2Gv/c4Vt6RakehqzKDgK4RNxTwag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:ec:3d:4a:b8:69:cb:d5:b8:a9:f3:fa:95:56:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Validity
Not Before: Mar 29 01:01:09 2026 GMT
Not After : Mar 30 01:01:09 2026 GMT
Subject: CN=2a07035f22e71ebb45072429856d1de8383b5a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:eb:9d:c7:c8:40:83:87:72:9c:ad:80:35:
10:ce:36:2c:fb:a9:39:d0:74:dd:e7:89:01:97:94:
1b:24:f1:9b:e1:a7:00:44:3b:4c:8d:72:86:24:8a:
51:d7:9a:f7:0c:68:24:63:84:a4:45:70:49:01:ad:
5d:1b:09:43:07:d2:ef:d5:ac:ca:b2:13:77:b8:99:
a1:17:81:86:d1:af:98:bd:63:89:1b:ab:5d:a7:b1:
6f:4e:97:95:f5:15:54:b6:a4:f9:5e:e8:fe:72:19:
41:0a:64:da:c6:e8:d2:27:e9:81:68:f9:6d:4b:6b:
26:53:38:9e:d5:14:a2:10:81:59:a5:ed:01:b8:4f:
56:b1:f6:09:1e:94:58:f6:0d:40:f0:05:85:6c:32:
db:86:fb:c9:f0:78:6d:5b:52:5d:2a:aa:69:68:66:
1d:20:78:64:69:7e:fe:f3:40:e1:41:44:5e:a7:0e:
e8:90:f7:f4:ca:23:72:2d:93:9a:66:17:02:12:cf:
62:f9:fb:45:33:45:6d:b0:28:1d:31:d5:07:62:1c:
9f:20:96:09:ba:ec:68:1e:15:a0:50:57:9b:ca:1f:
e7:1c:1d:42:e7:6f:89:94:67:94:c6:19:7d:b3:e7:
51:29:43:4d:72:fb:ee:ba:ca:0f:bf:d7:33:b3:08:
01:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:07:03:5F:22:E7:1E:BB:45:07:24:29:85:6D:1D:E8:38:3B:5A:03
X509v3 Authority Key Identifier:
keyid:4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5d:d7:25:e6:dd:2d:33:eb:67:7b:df:93:74:a4:92:d8:39:
45:bc:13:88:73:82:80:9d:d8:8c:46:c4:1b:4f:e0:db:b4:22:
10:6f:40:fd:8d:d9:27:a7:43:2c:ed:84:c6:2a:c6:a7:41:58:
e2:14:a4:7b:b4:b2:d6:9d:c1:e6:07:a8:87:f8:35:02:36:09:
e7:be:8d:ec:12:1a:c2:73:6a:fd:c0:fe:7c:3f:c7:77:56:d3:
10:a0:43:d3:18:3c:d9:11:f1:0b:82:01:fd:81:bf:f7:ae:47:
0d:a1:7a:86:3a:f6:9f:38:78:71:9d:8d:9b:a2:b2:17:4a:97:
c7:bf:b4:c0:b9:f8:cf:0d:71:bd:a5:ca:f4:44:d0:2b:cd:41:
f1:74:ba:9d:e7:66:8d:8b:3a:0f:4d:43:35:ef:43:e4:6d:ea:
77:51:f3:b4:4d:62:32:8e:22:8e:49:be:98:dd:04:6c:b3:73:
5c:04:ec:0e:df:21:a5:91:d1:2e:61:12:63:9c:c9:77:2a:86:
7e:a1:e7:ed:ce:2b:9c:9b:7c:d1:57:0b:5b:5f:bb:71:e8:5d:
39:0c:2e:f4:1d:28:f2:41:30:70:51:49:e7:64:36:5d:0a:2e:
01:b1:c6:ce:78:65:c2:d5:e8:a5:5d:97:87:68:6d:e8:15:fd:
72:ac:45:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:25 2026 by rpki-client