Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
File: Tj_pDw-taiXUa9fDNbki2gMbLHg.mft (raw, json)
Hash identifier: N4DStvXjUW/7pELcnBtmgL53RVcdBiDcd0MI0EfWMOQ=
Subject key identifier: 39:97:2F:25:78:D8:6B:37:9A:6A:82:28:50:CC:23:36:9B:77:90:63
Authority key identifier: 4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
Certificate issuer: /CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Certificate serial: 019D386612FBA483A00649972CE4A44789F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
Manifest number: 0D37
Signing time: Sun 29 Mar 2026 07:01:46 +0000
Manifest this update: Sun 29 Mar 2026 07:01:46 +0000
Manifest next update: Mon 30 Mar 2026 07:01:46 +0000
Files and hashes: 1: Tj_pDw-taiXUa9fDNbki2gMbLHg.crl (hash: 6WcNAUhfE0tzheGjt8RSdEpqVgA7ojl1wOGWy943lkM=)
2: uglZN3e0ur2TkFYxywC2Q5oDa8c.roa (hash: W5cX7fhh2nzjYIuvg0tzN9PC2FGwU2Yio9kqI45+MPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:12:fb:a4:83:a0:06:49:97:2c:e4:a4:47:89:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Validity
Not Before: Mar 29 07:01:46 2026 GMT
Not After : Mar 30 07:01:46 2026 GMT
Subject: CN=39972f2578d86b379a6a822850cc23369b779063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:52:b9:ca:1f:c3:96:99:7c:49:76:3c:50:2d:
98:52:71:2d:13:58:03:ca:14:3f:d6:28:d7:8b:8a:
08:99:7e:98:ae:95:73:ae:00:14:18:ea:a3:3f:35:
2b:3e:ca:fc:0d:b6:15:17:97:c4:47:91:32:77:de:
0d:d3:33:bb:3d:2c:66:48:ef:bd:0f:c6:ba:b4:8b:
03:35:80:9f:0a:d1:c6:f8:2a:8c:13:e3:76:ae:f1:
2d:74:53:cb:3d:d7:aa:bb:2e:3a:4c:7a:2c:ff:62:
f4:ba:fe:cb:01:96:00:bb:8e:1d:13:b2:75:f5:19:
04:45:6f:54:4c:80:61:be:1d:2d:75:4b:61:0d:df:
9f:91:e6:8a:67:a2:c6:dc:a9:ff:7a:9a:ed:4f:0e:
48:b4:75:09:a1:85:d7:d8:bd:2a:bd:cb:de:cc:da:
62:64:af:8d:97:61:f1:58:04:07:55:59:92:f7:58:
6b:46:c1:ff:0a:ae:d4:80:c5:0f:4a:4d:0b:d6:5a:
c5:3c:36:ba:80:c5:01:fb:5f:91:a6:90:95:d2:cf:
a2:08:ce:cf:b7:9b:23:21:92:8f:ad:42:9c:3c:b5:
31:3d:a7:a0:b0:9e:85:8e:15:d5:fa:95:0d:5c:a4:
54:53:9b:a9:15:55:18:d6:d9:46:35:7c:56:88:1b:
05:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:97:2F:25:78:D8:6B:37:9A:6A:82:28:50:CC:23:36:9B:77:90:63
X509v3 Authority Key Identifier:
keyid:4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:08:54:23:2d:67:9c:1d:43:9f:a3:30:97:00:0f:25:fc:ea:
24:90:d6:ff:cd:cf:78:a8:dc:0a:e0:e9:89:83:91:be:c1:8a:
d8:ff:fa:3f:63:10:9e:95:31:72:92:63:f3:27:14:71:74:93:
39:7b:2a:63:e7:45:1a:7b:10:41:e4:7b:e6:56:c3:ef:a1:15:
fc:ae:d2:1d:87:57:5a:04:a8:89:80:f9:43:20:9e:8d:52:9e:
a3:73:df:9b:22:b6:93:04:dd:7e:6c:69:7b:48:0b:42:b4:70:
36:86:de:6f:17:a2:7f:1c:74:f9:bf:47:e2:5d:49:1e:3c:bd:
21:10:9e:4c:2a:35:1f:22:3b:45:bf:70:15:cb:ec:c0:2f:56:
25:f8:84:45:33:18:e0:31:65:f8:f1:0c:37:83:53:43:5f:e4:
0b:ee:33:bd:93:c4:a6:0e:ac:33:0d:3c:af:cb:bb:e1:ca:9b:
05:08:aa:df:2b:7d:1f:ec:53:fc:54:98:31:8c:fa:4c:b3:e2:
ac:3a:9d:7c:54:75:59:cd:ef:19:ce:10:c6:af:f8:18:65:c2:
95:5c:ae:db:41:b8:ae:99:9e:b4:30:a4:dd:9d:e5:15:8c:09:
96:bf:b4:e4:20:8d:d1:c1:e5:e8:f3:a3:5b:fc:ce:64:f4:8d:
da:28:5f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:37 2026 by rpki-client