Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
File: TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft (raw, json)
Hash identifier: 9YBGJNu3rV/B6Vvtvg/GOR9jFgzwJQYetGbm1/GB5Gk=
Subject key identifier: A0:3F:6D:C6:E2:30:92:44:2A:F7:7F:34:80:AA:8D:E7:1E:2F:8F:92
Authority key identifier: 4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
Certificate issuer: /CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Certificate serial: 019D389C3B1F348CD97CA0DDA9B0B9908365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
Manifest number: 157B
Signing time: Sun 29 Mar 2026 08:00:55 +0000
Manifest this update: Sun 29 Mar 2026 08:00:55 +0000
Manifest next update: Mon 30 Mar 2026 08:00:55 +0000
Files and hashes: 1: TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl (hash: 8O/LBT6Fe5MI3vPWVT5c3sBiRSSdCKcMHjQmgUF01FI=)
2: qhbgvCCuTYLs-T9K9IfIIvF38MQ.roa (hash: WdrjO4xvUh7bWyfHcWR8FrUXBHsQMBxvR3LgVLProrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:3b:1f:34:8c:d9:7c:a0:dd:a9:b0:b9:90:83:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Validity
Not Before: Mar 29 08:00:55 2026 GMT
Not After : Mar 30 08:00:55 2026 GMT
Subject: CN=a03f6dc6e23092442af77f3480aa8de71e2f8f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:24:f6:d5:23:15:df:85:c1:aa:c3:72:8e:
06:40:b8:b3:ca:8f:b7:61:5e:6a:ea:b9:84:2d:8c:
f8:5d:c6:52:ce:7b:64:01:88:08:88:02:a9:d8:7d:
80:1d:be:ba:ee:c2:09:3b:e6:bc:54:ad:fe:1e:be:
8e:98:60:2c:ec:5b:1c:c6:b9:b2:6e:7f:db:01:a5:
ba:f4:ec:93:50:f4:c2:21:47:a5:dc:b1:bb:41:b8:
23:6b:d5:9a:a6:2d:84:95:ff:14:f3:82:93:59:52:
a5:58:cc:a0:b7:a1:54:39:4d:02:14:1c:36:c5:29:
a3:2a:41:13:34:7d:53:67:5e:aa:42:1a:e0:ce:63:
34:56:8a:22:55:48:f3:fb:9a:89:60:9b:a9:c8:24:
06:88:02:f8:17:88:c5:91:b8:b2:f0:c0:85:f3:90:
7f:06:49:d8:06:65:66:b1:63:1d:62:12:79:52:3a:
dc:66:e4:22:45:df:f3:6f:02:e7:c1:c4:ae:b8:2f:
5f:84:a1:2a:82:83:c2:b1:9f:c1:2a:5a:08:5f:4c:
1c:d1:df:cb:3d:89:6a:87:45:6c:57:99:05:fa:e2:
03:2e:cd:7b:9b:ef:2d:d9:5a:57:93:a2:c3:d5:1c:
eb:23:49:77:4a:ea:bd:56:bc:cd:2b:a6:16:a5:57:
1a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3F:6D:C6:E2:30:92:44:2A:F7:7F:34:80:AA:8D:E7:1E:2F:8F:92
X509v3 Authority Key Identifier:
keyid:4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f8:c5:ef:47:3d:58:a3:96:00:fc:95:e2:77:d2:ad:14:99:
02:77:59:06:1a:6a:1a:df:89:08:30:97:b0:0d:bf:d2:db:31:
5b:9e:e9:bf:11:b9:31:37:0b:fb:59:aa:ee:7f:dc:68:a7:a1:
cf:a1:34:ea:13:91:61:8e:d4:41:2f:8c:b9:e4:c4:46:4f:91:
53:4c:ed:8c:4d:25:77:f4:08:a0:54:a4:51:3c:67:dc:a6:9a:
ea:a3:12:03:22:d5:71:8f:12:80:de:2a:06:ec:16:e6:12:38:
a8:1e:e0:c0:8c:6e:aa:85:ce:60:80:6f:e7:06:37:30:4c:6b:
c0:b2:ca:76:a4:f0:52:59:3d:40:61:c5:84:ec:e3:3e:a4:e1:
5e:55:0f:3d:b9:f5:8a:47:e8:dd:83:a6:79:c8:73:a1:67:c2:
fb:ee:fa:31:d9:b6:6b:24:b5:b6:2b:2a:d2:4f:e0:0b:1b:52:
71:f9:ca:f2:32:54:06:74:d6:7f:95:ec:5f:5f:72:ab:65:4f:
58:db:e1:87:d7:79:c2:2d:c6:22:9d:53:f6:86:39:36:05:a7:
8c:61:67:1f:a9:d4:a2:4f:02:2d:c6:4e:68:c8:23:55:9c:41:
92:23:88:f7:02:a8:37:21:10:b6:6e:34:17:c8:4c:f4:91:65:
ff:dc:29:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:44 2026 by rpki-client