Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
File: TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json)
Hash identifier: 7luyiQeXPsZqh9GGSWEypfa8msfdOG5uWoKQoh7WKFQ=
Subject key identifier: DB:D5:AC:0F:80:0A:42:13:EB:63:41:25:1C:63:BE:B7:ED:29:33:8A
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Certificate issuer: /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial: 019D386642812AAE33CDCA3104E24C86ED06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
Manifest number: 1345
Signing time: Sun 29 Mar 2026 07:01:58 +0000
Manifest this update: Sun 29 Mar 2026 07:01:58 +0000
Manifest next update: Mon 30 Mar 2026 07:01:58 +0000
Files and hashes: 1: SFGE70vQYmz_oKTtZMgB-YKUyZc.roa (hash: lZ0OnAmHAxbwpz0Bf+bKQq6tPOf7KpsPHIF+YP1ggzc=)
2: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: ueJ7muGbtkSexERJ96MjdR5Ge/6vZNeBaGctj/KoGB8=)
3: eHNuPU6iYgVIfZ9NIp8A3552y-I.roa (hash: AOM1Ajc5ONgwd+E4wuOhZtP8/uws9RFZszPyOYWcL2Q=)
4: vP7G0LDj9js2uqV_dVx329H3yeM.roa (hash: fyHdxLq/9tcpLwgIyk0ErgVx3QqPOxT/MFLUCo0yJ0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:42:81:2a:ae:33:cd:ca:31:04:e2:4c:86:ed:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
Validity
Not Before: Mar 29 07:01:58 2026 GMT
Not After : Mar 30 07:01:58 2026 GMT
Subject: CN=dbd5ac0f800a4213eb6341251c63beb7ed29338a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:52:b4:6a:57:bf:ee:a6:6f:a9:40:e4:c1:16:
ae:d4:5c:a2:d7:7f:a3:c1:63:91:33:24:c0:ad:ea:
23:9f:01:dc:54:d3:00:ae:08:d0:de:1c:61:b6:73:
5b:20:b8:89:47:7d:29:6d:9f:43:a7:b2:b8:57:53:
9a:d5:f6:18:a1:e7:7c:2e:e9:63:98:02:ff:8b:76:
a9:69:db:84:f5:5a:96:5d:37:ae:e9:b6:fb:39:26:
f9:91:73:93:01:a7:b4:fe:d3:f4:29:37:34:cb:47:
73:19:84:57:ba:cc:02:20:7f:ac:17:bc:83:e9:f7:
21:79:f8:73:20:5e:bd:c2:6c:93:cc:95:8d:66:39:
2c:c8:32:40:5a:2e:92:85:b9:fd:75:d6:a0:54:a6:
60:24:b9:13:fd:a8:f8:2b:6a:3b:ea:9e:d3:d9:dd:
65:03:23:ed:62:5d:4d:bb:09:a5:e3:49:2f:5a:e1:
ac:9e:1f:79:2c:0b:a8:03:fa:a9:e2:0b:13:3f:79:
fa:b3:03:54:2a:d4:9a:ca:42:41:33:87:97:38:fa:
ae:ae:b5:5d:5e:a4:cb:35:a8:da:29:92:93:27:78:
d8:40:83:48:1b:64:c9:25:74:3a:54:f1:40:00:6d:
60:de:50:b0:e9:5e:d3:58:ad:b2:b3:e4:a5:30:a2:
51:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D5:AC:0F:80:0A:42:13:EB:63:41:25:1C:63:BE:B7:ED:29:33:8A
X509v3 Authority Key Identifier:
keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0e:b5:1c:e2:8b:ed:09:23:1f:3d:a8:5f:b8:17:8e:06:2b:
a1:31:5a:24:fe:52:56:2e:82:a2:54:5d:17:ff:d4:a3:3f:4c:
a7:e0:94:6c:c6:bf:31:7f:34:86:af:43:fb:98:8e:1a:dc:dd:
be:48:21:b5:e4:0b:33:d0:29:78:0e:80:1c:37:17:ab:bb:ed:
e4:5e:76:8b:44:62:f0:0d:d4:92:54:d4:a8:16:4b:4c:da:65:
1a:51:38:3b:1c:f9:cf:9f:c7:c3:36:9e:56:07:86:d1:90:ec:
1c:01:b2:b9:c1:06:80:1d:88:fb:68:8a:4a:8b:a0:98:1d:b7:
72:33:dd:38:fc:18:65:3e:14:85:73:88:a0:d8:57:36:19:fe:
16:7d:6d:dd:84:9d:0c:d3:19:f4:22:c4:0c:dd:b4:2a:53:f5:
91:30:f2:e4:d6:7c:35:b0:83:99:c4:0a:4c:66:db:d4:88:81:
b5:b5:c5:23:04:a9:cd:92:b2:64:20:99:00:a8:df:66:04:b4:
85:d1:c9:39:cf:e9:df:23:e9:90:dd:8c:b9:7d:89:ab:2c:c9:
70:77:88:17:a8:5f:8e:ab:0a:9d:9e:c4:a0:c5:f7:fe:07:f2:
54:f9:69:69:3d:86:20:2f:94:3a:9a:59:0d:0b:86:94:16:d4:
cd:29:4c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:23 2026 by rpki-client