Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
File: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft (raw, json)
Hash identifier: 45FIQujirV/Xu0rTnAG253HceVHjN4JPR8jcAmVlMmg=
Subject key identifier: 96:7D:79:EF:AB:BC:73:A9:A1:56:CA:FA:87:29:19:13:85:B0:A3:C7
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial: 019CE4482042D504D7CC839B26D45F24ADA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
Manifest number: 1867
Signing time: Thu 12 Mar 2026 23:00:57 +0000
Manifest this update: Thu 12 Mar 2026 23:00:57 +0000
Manifest next update: Fri 13 Mar 2026 23:00:57 +0000
Files and hashes: 1: AwY5mgjpthmtObHXqwAVAnajhhs.roa (hash: Ynq5lonnqADLu0ss1thtGFYZaU4FINs+79TFKUmEVMc=)
2: HBpn81d4cG4_UILVsdO8exzlDsY.roa (hash: kRgmgXZK5yKUe+saBJuegm6bkvNmijxbzes8bqH8BJE=)
3: Kpj-186fjuAYRRYnilKKfHVGN8E.roa (hash: W4eIu6BlkL603t8W8JuwGE33q4DgMOfHpuuHjrT/r2s=)
4: NueqQvkP6OwbYq3KeGusJiI5nB4.roa (hash: Iwo1uDTct62657OX8teLFspmVyOSx/FLeOTjd7KJmFk=)
5: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl (hash: zY4X9PzJrhFXwqUde2JegzZ14WdBYap3NdK0F3OinvI=)
6: XhbfkmgppgGaa0jwxEEK1QpmG_o.roa (hash: RblW9p63Q8/3oZMyKn6Kq61NaEzW9XB/T1oxdZPwAPk=)
7: hFJA5_fA_Gp7BCxbMO_bes9nk40.roa (hash: s64nTqpmoBBkk6Hywj8GwfB0MNxG8qecnHtsYCweNdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:48:20:42:d5:04:d7:cc:83:9b:26:d4:5f:24:ad:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Validity
Not Before: Mar 12 23:00:57 2026 GMT
Not After : Mar 13 23:00:57 2026 GMT
Subject: CN=967d79efabbc73a9a156cafa8729191385b0a3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:b1:36:7d:bc:9e:0e:8a:f4:2d:91:1b:1e:
03:4d:70:0f:bd:b0:ff:2b:62:f4:44:07:80:92:36:
ef:85:82:a2:fc:42:aa:64:91:1e:c1:59:86:8d:66:
a8:a1:22:c0:e0:6a:59:9e:26:1d:f0:cd:64:0f:50:
bf:dd:5b:ee:7b:7e:13:0c:0a:01:42:3d:01:9d:5d:
cb:d9:aa:c4:ce:8c:57:ce:71:9c:df:96:06:35:bd:
de:00:55:52:93:5a:b1:ab:06:5a:e1:5d:81:94:e7:
8e:82:9b:c9:0c:af:b8:5f:05:bf:dc:7b:73:5a:1d:
14:a4:22:dc:46:1b:41:fa:5a:07:66:49:42:09:d8:
e6:26:2f:1a:11:4d:c7:00:ed:f3:89:3d:58:b0:ba:
af:73:a1:6d:a9:a8:38:bd:5d:11:d9:dc:3c:e5:d7:
63:86:01:6e:46:9d:27:31:bf:62:95:48:53:d8:ab:
9f:7e:29:50:73:ed:37:49:a0:6e:35:d7:2b:e3:35:
26:62:f0:9d:1c:31:d1:b8:c6:55:00:fd:61:f4:c0:
b1:14:7d:54:10:d0:ed:e9:9e:18:69:ca:da:8e:23:
8a:6d:87:39:68:64:a1:5e:3a:59:53:bd:a0:86:15:
9a:a5:d7:33:e3:e3:5a:00:67:e1:28:3d:4b:16:a9:
a2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7D:79:EF:AB:BC:73:A9:A1:56:CA:FA:87:29:19:13:85:B0:A3:C7
X509v3 Authority Key Identifier:
keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a6:e9:15:17:1a:44:4b:12:80:8c:be:fb:6f:4e:3f:88:cf:
4d:28:99:96:46:81:fc:bf:76:b1:42:8a:66:f6:c0:8d:70:49:
92:1b:94:3d:b8:f1:fb:e9:46:78:66:0d:f8:f8:df:73:d2:d4:
a0:32:36:da:bb:4b:c7:2b:ee:0b:2f:03:11:b0:16:cf:11:5a:
3f:3a:6d:23:f8:28:0f:b5:a3:e7:1e:4c:4a:12:b2:b9:7d:5b:
c0:48:ed:c6:9a:5d:dd:43:79:1c:04:11:25:ec:a1:8b:10:0d:
32:00:aa:47:4f:02:03:61:53:4a:36:62:34:9b:49:c3:5b:b1:
8f:a4:02:71:c8:c6:b2:82:5a:cf:57:5b:3a:b1:a7:e8:b5:07:
1b:db:57:0a:3e:64:ac:fc:76:d6:2f:e6:79:04:5b:a7:0d:ae:
99:f7:10:78:59:a7:99:b2:90:69:22:67:5d:b9:76:4a:ce:12:
3d:e1:05:4b:5d:65:65:d1:1f:89:04:d0:1c:bc:18:11:be:12:
b2:96:6f:d2:7e:69:55:36:bd:7f:72:e2:25:21:e2:5d:d7:98:
9d:70:04:37:02:bd:b9:99:f0:b5:38:f7:b9:ba:e8:57:4f:10:
da:f4:99:1f:54:f5:d1:f7:8e:18:b6:08:bf:7a:00:81:49:fa:
11:bf:3e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:29:10 2026 by rpki-client