Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/35a75a-fa28-455c-a9d7-42538495a253/1/TVgfMWpFEM1xjwXN_aR_YLUkDfs.mft
File: TVgfMWpFEM1xjwXN_aR_YLUkDfs.mft (raw, json)
Hash identifier: YH1i3m/1DENwvYmdcIYwnWxkl/VPuud/X1zCJxJmO1g=
Subject key identifier: F4:3C:B2:8F:CA:BB:59:E7:BE:46:67:B6:D2:77:4C:0C:A2:3D:5E:37
Authority key identifier: 4D:58:1F:31:6A:45:10:CD:71:8F:05:CD:FD:A4:7F:60:B5:24:0D:FB
Certificate issuer: /CN=4d581f316a4510cd718f05cdfda47f60b5240dfb
Certificate serial: 019CB248EBCD2A9A0A00A8268759ECA93EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVgfMWpFEM1xjwXN_aR_YLUkDfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/35a75a-fa28-455c-a9d7-42538495a253/1/TVgfMWpFEM1xjwXN_aR_YLUkDfs.mft
Manifest number: 23
Signing time: Tue 03 Mar 2026 06:00:49 +0000
Manifest this update: Tue 03 Mar 2026 06:00:49 +0000
Manifest next update: Wed 04 Mar 2026 06:00:49 +0000
Files and hashes: 1: TVgfMWpFEM1xjwXN_aR_YLUkDfs.crl (hash: Fpg+hbnRMum3q6p9tdTpJweHwfp3PA2WK3idKEAgHGY=)
2: mQhTuTKEwu8zhwzyt5PaOFOOFgo.roa (hash: f0RTXa3+LdAMLeM1vR+W1zWxntSZGi5bAcnStMVW9ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/35a75a-fa28-455c-a9d7-42538495a253/1/TVgfMWpFEM1xjwXN_aR_YLUkDfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/35a75a-fa28-455c-a9d7-42538495a253/1/TVgfMWpFEM1xjwXN_aR_YLUkDfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVgfMWpFEM1xjwXN_aR_YLUkDfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b2:48:eb:cd:2a:9a:0a:00:a8:26:87:59:ec:a9:3e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d581f316a4510cd718f05cdfda47f60b5240dfb
Validity
Not Before: Mar 3 06:00:49 2026 GMT
Not After : Mar 4 06:00:49 2026 GMT
Subject: CN=f43cb28fcabb59e7be4667b6d2774c0ca23d5e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:90:85:81:d2:50:bd:57:fc:37:bc:4a:bd:74:
49:fb:15:bd:b1:5e:06:1f:f2:4c:0a:71:a4:4f:48:
4e:89:6d:80:ba:2d:2b:ca:a3:ff:c7:c1:f4:e9:e5:
23:58:bd:47:81:ed:c2:2b:0a:47:27:e9:6b:f5:10:
7a:67:4a:ad:ed:93:0c:e5:85:f4:ec:3f:cc:89:63:
e9:45:83:ad:7b:c2:09:0e:75:ad:0f:56:54:a2:75:
9a:58:0f:b6:54:33:41:c8:f4:0c:19:6f:72:45:09:
21:9e:f7:f2:d8:4a:30:8b:06:30:8d:a2:f4:2e:a7:
48:1e:8d:85:9d:f3:31:a7:ec:9c:9e:16:ff:67:8c:
a4:3b:ac:2d:b2:a8:3a:fe:97:9b:a4:03:1f:58:08:
fe:ba:4f:13:e9:05:59:91:4c:dc:02:33:82:c5:3f:
f9:f1:87:74:7b:27:b0:be:ba:43:8c:13:e3:62:82:
8d:be:85:9f:dd:0b:0e:b4:1d:dc:57:15:0e:c5:1b:
87:68:01:c7:04:e4:fc:72:91:54:d3:2e:62:cf:98:
74:bc:1f:89:bc:85:70:aa:06:99:c2:af:95:45:ef:
fa:a4:ed:1f:9c:36:c0:5f:78:f5:c3:45:da:ff:cc:
d3:51:a0:a1:73:99:df:81:8f:92:ee:81:27:2a:06:
eb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3C:B2:8F:CA:BB:59:E7:BE:46:67:B6:D2:77:4C:0C:A2:3D:5E:37
X509v3 Authority Key Identifier:
keyid:4D:58:1F:31:6A:45:10:CD:71:8F:05:CD:FD:A4:7F:60:B5:24:0D:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVgfMWpFEM1xjwXN_aR_YLUkDfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/35a75a-fa28-455c-a9d7-42538495a253/1/TVgfMWpFEM1xjwXN_aR_YLUkDfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/35a75a-fa28-455c-a9d7-42538495a253/1/TVgfMWpFEM1xjwXN_aR_YLUkDfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:32:76:6b:b6:55:66:b3:fb:42:22:de:f5:b3:22:09:cc:5d:
61:e7:8e:0d:e5:79:1e:24:e8:17:dc:57:1a:0f:3b:5b:ca:30:
0a:41:8c:62:75:0b:fb:3f:59:dc:d6:d7:ee:ec:db:42:be:7e:
4e:4d:18:fd:93:83:e4:0d:77:c8:09:8b:f2:37:11:4f:b0:bd:
70:d8:e8:6d:08:df:6b:23:51:28:22:53:44:a0:e5:c6:44:13:
10:b6:14:bf:5e:81:43:0f:83:bf:91:f3:90:ea:57:a5:e4:6d:
d2:0f:3f:5e:e6:77:33:16:d0:2c:f2:04:23:4d:39:ef:8c:35:
00:9d:f5:0a:84:19:96:6e:7a:d1:13:59:e4:fa:f0:41:38:05:
d3:96:1b:9b:e3:69:8d:3b:2e:7a:be:fb:c0:e1:62:74:cc:49:
b5:81:d6:50:c0:8d:7b:29:d8:b6:68:44:1b:95:fb:36:48:e8:
b3:7c:3e:03:53:e9:0e:fe:f2:cf:4b:ec:55:af:7d:ee:bb:5c:
2b:38:42:1a:f0:24:c1:d2:b8:3e:18:d8:a5:18:0d:ef:ba:58:
34:09:a4:98:61:0c:ea:f6:27:5c:a6:67:b5:a8:90:9b:57:53:
bc:74:e5:b1:67:8f:5c:d7:37:fc:17:76:fb:88:08:b5:9a:5d:
55:94:c8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 10:56:40 2026 by rpki-client