Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
File: Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft (raw, json)
Hash identifier: LdC+YdNI6xq7ggX3aW36yXDxe/7F7YpQ+ovSOo5E62k=
Subject key identifier: 65:D3:C1:A4:BF:F5:7D:06:03:B5:BF:BF:C4:75:07:91:BA:EC:42:1A
Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
Certificate issuer: /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Certificate serial: 019D38D2A81BADF3CD2C46E6B338672F8AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
Manifest number: 18A9
Signing time: Sun 29 Mar 2026 09:00:22 +0000
Manifest this update: Sun 29 Mar 2026 09:00:22 +0000
Manifest next update: Mon 30 Mar 2026 09:00:22 +0000
Files and hashes: 1: 3h4uNQ-eHV25TPT3_E5l_yB3jcs.asa (hash: +n8cfnczvffDxczQzCZSc5S0iS+H58G3zef9yb8kOjI=)
2: Dpgo4cDU1mscMX_CBOiypw89lis.roa (hash: 8mfwVN6lhdlH9CLh9R1lsuHG76iz8iY1mnvSJDuNBqo=)
3: HXJJgvqsZ_zuOCSOXmDb4ksjDdE.asa (hash: J/SZ7v4ORRwzQFSAo2RYDZOeTgDF1x9+l2aHPSTrs0U=)
4: Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl (hash: EzDFLsZMDi2aA/rPM+1aNjUISyXzcu8fzAgehvf9gsk=)
5: Zd7eWqpO82rj4tMVM1FiOzZTNwI.roa (hash: GTjYTfCCVp1Wx0hphN/N2xZgmhKU/cU0xSNlx/oabus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a8:1b:ad:f3:cd:2c:46:e6:b3:38:67:2f:8a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Validity
Not Before: Mar 29 09:00:22 2026 GMT
Not After : Mar 30 09:00:22 2026 GMT
Subject: CN=65d3c1a4bff57d0603b5bfbfc4750791baec421a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:98:c7:7d:88:9d:6c:f4:87:16:6e:eb:7f:fd:
e0:1c:31:f2:90:f7:79:92:96:b6:a6:d4:ed:b2:7a:
3f:75:76:28:c9:14:e0:0c:e6:c0:e0:f3:b2:b8:76:
0f:43:b1:0f:df:42:c2:b4:bc:d1:a3:30:66:a8:db:
91:37:17:ee:61:d6:61:7d:54:96:9c:19:e8:17:e3:
b8:92:b9:5c:aa:51:dd:96:de:b1:49:d0:5d:8a:ad:
3c:04:e9:4a:c6:9b:a6:3e:46:4f:8d:26:36:4a:c5:
31:6b:41:aa:64:4d:56:3d:d8:46:2b:5f:80:04:6b:
57:e1:09:0b:d1:cd:c0:c0:4e:e2:70:33:2f:c3:80:
03:34:ee:8d:8e:b4:3c:09:e0:13:71:be:52:dc:00:
d8:d7:5a:43:55:6c:27:7d:49:fe:4e:b1:dc:99:94:
21:90:f1:3e:15:87:2c:76:92:b0:86:7e:98:a1:15:
d7:bc:5d:e5:27:c6:b9:a8:4c:f0:3a:d0:d9:5b:05:
9e:b0:c5:cb:a7:b8:44:43:04:d3:6a:03:2f:0a:a8:
0d:75:22:7c:c0:ce:28:81:41:44:ef:30:bc:f2:49:
e1:39:14:4e:53:2a:67:5e:da:4d:6c:bc:23:48:80:
fe:6e:b5:3a:51:ce:28:85:60:7a:3a:ef:d5:4b:cf:
04:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D3:C1:A4:BF:F5:7D:06:03:B5:BF:BF:C4:75:07:91:BA:EC:42:1A
X509v3 Authority Key Identifier:
keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3b:9b:74:b0:ae:d8:1e:c7:9d:9d:bc:7c:e1:c4:98:2a:f2:
97:6a:05:0d:25:7d:74:72:bc:2a:cd:bf:70:cf:ac:1f:76:59:
93:4e:f5:81:29:a9:a0:fa:01:a2:98:78:cd:89:17:bf:a0:6b:
e1:ec:ea:33:1d:eb:82:ed:a9:b4:60:1c:5f:2b:1f:92:42:24:
f2:16:ca:fe:ac:82:53:0a:7e:4d:74:ca:b1:88:7b:fa:29:15:
19:ff:7f:ea:1b:4c:3b:e6:9a:9b:a8:a4:69:be:c0:65:e3:8f:
db:d3:68:f7:f2:17:e3:b1:d9:25:2d:06:74:f7:7c:6c:a2:fe:
97:16:b5:68:4d:7a:f5:48:e0:83:32:97:ea:4a:62:e3:e8:dd:
3a:24:95:d4:42:73:d0:5f:5e:3f:d5:97:e8:68:a4:89:63:14:
5d:03:09:0f:ea:d9:2a:af:d9:2b:00:bb:67:c7:d6:d9:4b:77:
98:75:a6:58:0d:2e:69:0a:c4:6f:ff:ef:1b:36:bb:87:26:12:
af:65:5c:e8:e8:68:d2:5e:9c:54:e1:8f:50:c8:c6:f5:6a:74:
48:56:0a:00:e0:6f:43:1d:4a:74:c9:3f:bf:f8:78:1e:1d:a7:
d5:69:07:b6:7b:4a:20:81:5e:a1:3d:84:f2:88:ff:4a:f3:84:
95:1e:68:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:22 2026 by rpki-client