Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
File: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft (raw, json)
Hash identifier: uV1PFJIgGiMjPAxdSboI5M//JMnQW+nNA3qpTZ9QCxI=
Subject key identifier: C4:08:E9:89:47:C8:AB:8F:36:10:66:E1:29:53:F6:28:5E:21:C4:68
Authority key identifier: 4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
Certificate issuer: /CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Certificate serial: 019D38D37BEAA981D05B3F1466037F1E0CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
Manifest number: 0F1D
Signing time: Sun 29 Mar 2026 09:01:16 +0000
Manifest this update: Sun 29 Mar 2026 09:01:16 +0000
Manifest next update: Mon 30 Mar 2026 09:01:16 +0000
Files and hashes: 1: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl (hash: +mtKn3LfuNOT7Yzj4aFN9yn44GPgHs6dKm57jkNxlbc=)
2: mYEf7RuSo0e-j7rjPL7Q9zNgxFc.roa (hash: cGf42p5lM09FOWIL9NbqXkxRKlJYCNacEJNXdW+oi2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:7b:ea:a9:81:d0:5b:3f:14:66:03:7f:1e:0c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Validity
Not Before: Mar 29 09:01:16 2026 GMT
Not After : Mar 30 09:01:16 2026 GMT
Subject: CN=c408e98947c8ab8f361066e12953f6285e21c468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:56:c7:5e:a5:d5:a3:d8:f0:ba:d9:43:91:de:
59:b1:80:91:64:f8:ad:60:46:e5:f3:7b:d3:8d:56:
40:69:a3:1d:a5:46:19:a8:f6:ec:c2:c7:4c:a5:d5:
db:22:1a:f2:f8:d1:c9:f1:6f:25:a2:d7:27:4f:8d:
df:76:1b:16:4a:c2:72:52:9f:a2:52:bb:e1:30:9f:
04:e2:47:37:ec:e6:49:1c:ed:43:71:8f:97:b3:2f:
13:ea:cb:25:25:36:1e:6a:60:c4:22:30:3c:01:b4:
f7:61:5c:68:9a:45:c0:4e:70:4d:f0:e8:59:5d:74:
62:9c:53:3f:0d:ad:93:b0:a4:47:40:6a:75:23:e0:
e6:6c:42:5e:f9:aa:9c:52:1e:0d:44:2f:bd:81:5a:
9b:e9:de:d6:5f:44:57:2d:29:aa:c4:55:7f:27:ba:
e1:51:d9:22:fc:f7:5e:75:19:1d:2c:f4:ef:de:af:
f7:93:0e:38:62:7c:bb:1f:be:85:65:8f:b0:08:85:
0e:6d:c2:02:77:62:bd:b0:c6:cd:66:8a:2d:e0:89:
c0:db:1a:e5:8a:90:9e:9c:8d:96:8c:2f:09:16:5a:
2f:82:39:91:58:10:c9:66:00:ea:8e:55:a6:8c:23:
38:ea:94:bd:42:7d:27:35:96:1d:55:b9:86:9b:56:
51:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:08:E9:89:47:C8:AB:8F:36:10:66:E1:29:53:F6:28:5E:21:C4:68
X509v3 Authority Key Identifier:
keyid:4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:74:f7:11:62:30:95:ee:99:77:7e:52:79:9a:d6:07:e1:2b:
ab:95:b6:c0:7f:51:17:e7:85:d6:55:ba:96:85:91:0d:18:a5:
1c:04:5c:6e:b0:24:fb:0c:bc:71:02:1c:37:61:0c:b5:16:08:
42:3d:28:cf:c5:1b:d1:4b:a0:db:a5:ab:fd:d1:53:aa:29:f6:
43:96:f3:e4:c9:d0:47:ce:28:c9:0c:31:c7:36:bf:ec:1f:3b:
84:b0:4a:b8:8b:90:38:83:94:1e:4f:e8:74:a1:e9:f4:46:ea:
f5:d2:25:ba:36:82:e8:96:72:53:86:9d:b6:c9:19:0b:f5:85:
c7:1a:7a:d5:82:4d:a4:d3:a7:f1:f7:2f:80:89:e0:f6:59:01:
61:2d:cf:65:0f:0b:23:77:27:e7:e2:99:ca:01:c6:82:97:4e:
6b:c7:21:5e:2c:38:45:23:32:e5:57:5d:be:85:70:da:cf:19:
53:ab:17:e2:e7:63:cc:3e:9d:85:10:93:ef:db:42:fa:cd:6e:
2b:c6:7f:be:04:f7:5e:ae:aa:c8:37:34:70:48:ad:00:1f:9c:
a3:f4:c2:9d:40:18:04:89:4d:e9:e7:2d:91:1d:59:22:eb:e5:
ad:ba:8c:fc:56:86:62:4c:05:ee:f0:6a:4f:79:79:f1:32:f5:
f6:72:d2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:40 2026 by rpki-client