Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
File: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft (raw, json)
Hash identifier: WLFXennANuc6aBUN9+0CNUSHrzccph3E4iT74k1I3I0=
Subject key identifier: 60:A9:A4:60:83:FE:61:45:0F:F9:22:B3:DF:67:27:BB:CC:33:BA:88
Authority key identifier: 4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
Certificate issuer: /CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
Certificate serial: 019D39779CED79DF7ED1A717F1BBBD741667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 12:00:33 +0000
Manifest this update: Sun 29 Mar 2026 12:00:33 +0000
Manifest next update: Mon 30 Mar 2026 12:00:33 +0000
Files and hashes: 1: HPyXpgvZq0DmF5lYqywyaXxXuLs.roa (hash: xJJdHEjB0zhK0uHLhPfuryAT20NVmJFJDeJjva/xFEM=)
2: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl (hash: norZbK4WtW5Kx1a2Tj/J3mFzNJSPE2rNUV3DA7ZfTEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:9c:ed:79:df:7e:d1:a7:17:f1:bb:bd:74:16:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
Validity
Not Before: Mar 29 12:00:33 2026 GMT
Not After : Mar 30 12:00:33 2026 GMT
Subject: CN=60a9a46083fe61450ff922b3df6727bbcc33ba88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f8:ed:24:54:6a:08:25:81:06:72:0c:0e:82:
0b:cf:b6:8f:86:b8:d1:27:88:f2:14:48:88:62:9d:
bd:f2:d7:a6:94:67:80:4a:28:2b:2e:17:f7:fb:2c:
23:5e:ea:88:d0:8f:b3:cd:40:bd:75:0d:d2:18:fe:
dd:90:d8:82:1a:fb:8b:29:62:6e:b1:11:07:25:0d:
f8:52:44:bf:59:78:7f:28:94:4d:15:f7:8b:17:3d:
09:45:f9:1a:37:bf:49:c6:98:2a:45:78:82:9d:cc:
5f:41:4f:6d:43:03:78:ac:86:e1:fc:f9:ac:a1:2a:
eb:cd:4d:f2:b3:6d:0e:7f:8c:05:49:35:35:0c:fc:
65:b8:d5:31:8e:40:db:bb:38:fd:f3:fe:72:30:0f:
37:45:72:a3:0f:02:3b:65:9e:82:19:72:f9:e9:3b:
51:cd:0d:87:f9:93:f2:14:22:ec:01:83:d6:79:22:
c6:61:4a:77:e8:78:5e:e5:fd:08:bf:b7:88:d9:6e:
7e:fa:f4:44:62:7e:04:95:cd:e8:46:11:7f:1f:06:
8a:25:24:a7:97:fc:33:24:e2:37:f9:3f:2e:a3:91:
84:54:7a:99:91:45:16:76:86:4a:f4:0b:7d:4a:b8:
40:5e:d3:d0:e3:be:50:fa:46:2d:d9:6d:67:bf:49:
31:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A9:A4:60:83:FE:61:45:0F:F9:22:B3:DF:67:27:BB:CC:33:BA:88
X509v3 Authority Key Identifier:
keyid:4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:89:37:5c:97:c3:c2:4a:4d:e7:6b:49:89:6a:de:de:32:7b:
48:1b:0b:b3:3c:34:ee:b7:52:c4:09:ef:0b:85:31:89:d3:b8:
2f:db:7b:c3:63:08:fd:ea:3b:43:cd:42:0f:59:cc:82:ca:1e:
6c:cb:97:8c:0d:68:7a:be:f7:ba:e3:71:79:a9:f7:1d:b2:fa:
87:e3:03:5c:14:68:ec:21:33:ee:24:82:c3:02:44:a5:60:40:
c3:11:84:80:b3:d9:07:52:86:4d:8b:94:71:53:d5:0c:da:9f:
d1:bb:a4:e0:c2:21:a6:3f:af:cd:05:da:a6:a3:0e:33:09:1d:
1a:75:a7:3a:6f:e0:9d:15:19:94:73:ff:b9:f4:71:4e:84:b2:
62:07:43:52:f4:50:00:a2:65:da:bc:73:d8:25:6b:de:ca:b9:
84:fd:a0:e4:6f:5e:ec:02:cf:ac:37:bd:b2:1a:67:e9:59:ba:
9e:d7:30:a0:2a:15:7d:26:4d:ec:3d:d6:8c:0b:95:fb:84:07:
23:0d:ff:6e:47:cd:b3:5f:fc:ce:84:a0:45:e2:dc:0a:83:eb:
bc:f9:44:b8:82:de:26:82:f0:7e:71:6f:87:ed:48:bc:c1:97:
40:c7:a7:ab:0d:8d:45:78:dd:e8:fd:50:d4:d6:36:9b:b3:96:
e7:65:f2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:48:13 2026 by rpki-client