Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
File: TjQBh8D85f_wN87ZplCCQ-QE2nE.mft (raw, json)
Hash identifier: 8jLwD0QbEuzCM7whQfG6N46NrmfyGTLlyKOwHpprdVI=
Subject key identifier: 30:4E:05:F5:F5:C2:9B:00:DE:7C:BF:AF:B7:71:BB:8F:9E:C6:02:CB
Authority key identifier: 4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
Certificate issuer: /CN=4e340187c0fce5fff037ced9a6508243e404da71
Certificate serial: 019D38D3234FE7BF874B7E273EFC6D61E488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
Manifest number: 0BBC
Signing time: Sun 29 Mar 2026 09:00:54 +0000
Manifest this update: Sun 29 Mar 2026 09:00:54 +0000
Manifest next update: Mon 30 Mar 2026 09:00:54 +0000
Files and hashes: 1: TjQBh8D85f_wN87ZplCCQ-QE2nE.crl (hash: zV1qvw6LXWSUK05GmEdTFaKvGkWo5+Yxh9xNzlywt9E=)
2: rhOLI0GcmiH-t7VHcs9HUNOIZu8.roa (hash: DObC6epbAV4/cO0FstWBi+3TiGPf6vSxTLwzr5V99So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:23:4f:e7:bf:87:4b:7e:27:3e:fc:6d:61:e4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e340187c0fce5fff037ced9a6508243e404da71
Validity
Not Before: Mar 29 09:00:54 2026 GMT
Not After : Mar 30 09:00:54 2026 GMT
Subject: CN=304e05f5f5c29b00de7cbfafb771bb8f9ec602cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:42:f2:1d:64:fe:83:1e:21:e6:bd:51:db:
ae:c7:60:1e:42:46:bd:5d:f2:08:07:f6:e9:da:4a:
e5:d2:d3:7c:9b:9e:79:fe:cb:f8:87:3a:ad:8a:d2:
32:27:a8:28:04:1e:e5:0f:06:07:11:b8:5e:14:5c:
8e:1c:56:ed:bd:e0:f5:ec:a4:a6:69:ca:4e:3b:20:
89:31:12:a7:7e:67:09:49:27:ce:d0:ce:fc:d8:55:
c4:58:97:d2:88:40:1d:08:05:28:81:62:57:5c:4b:
99:47:75:47:af:bc:26:fc:74:b0:b0:a8:56:b9:98:
40:fd:38:e4:a8:b3:f4:14:7a:60:0a:5c:90:1a:6b:
93:8f:e8:04:a1:bc:3d:1e:e3:3d:b3:b2:89:32:31:
7b:b5:19:ef:1d:01:75:be:fc:9c:c9:b6:22:35:59:
bf:5a:6a:1c:1b:0d:c0:c2:57:84:c1:be:5f:5c:3f:
79:b3:2a:4d:a0:55:83:97:50:cb:c2:25:15:ba:b2:
14:fd:af:ae:fb:98:0b:54:c6:12:b3:d0:1c:52:89:
02:53:ef:66:c5:af:a3:ee:cd:95:19:f6:a3:70:ba:
e1:db:fc:ee:3d:24:54:ea:ed:df:c6:46:bf:c0:64:
92:c6:69:86:50:aa:fe:a0:66:42:3c:80:e1:08:c3:
b5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4E:05:F5:F5:C2:9B:00:DE:7C:BF:AF:B7:71:BB:8F:9E:C6:02:CB
X509v3 Authority Key Identifier:
keyid:4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6a:2c:3a:32:13:3b:f4:58:a7:9c:c4:e2:21:b2:9f:84:b7:
be:7e:cc:7f:61:d6:bb:9b:5a:5f:40:99:81:1f:a5:f7:b4:91:
24:52:21:41:b3:80:fb:46:2c:4c:44:3b:12:ac:84:bf:db:d2:
97:15:e5:b2:cf:f3:f4:96:bc:cb:42:27:d3:36:e8:e1:54:ce:
aa:b5:93:dc:cd:f3:22:19:8b:e4:f2:cf:da:33:d1:1e:c1:ea:
eb:3b:27:aa:63:fa:aa:6a:e2:ea:ef:ac:1e:93:65:4e:da:91:
7b:9c:57:81:20:93:fc:06:d6:bf:2a:6c:87:b4:4a:51:51:83:
57:97:13:01:a2:a9:8d:ec:29:d6:ba:c9:ce:aa:e5:4c:8b:63:
f1:88:a2:7d:a2:ee:7c:d1:bc:2b:78:70:47:20:1f:90:92:d1:
ce:28:8f:28:fb:54:09:bf:be:56:f9:a5:1e:b2:01:be:a2:97:
d3:48:4f:45:0d:91:68:79:c1:ad:d7:02:7a:f6:d2:01:02:fc:
32:03:d7:f3:4a:20:66:73:0d:7b:02:f9:58:a3:29:4c:47:4d:
81:bc:99:39:41:f6:5d:a8:5f:3f:cb:75:f5:12:f6:ea:4e:bb:
e6:32:d9:1a:31:bf:fd:ed:f4:51:c0:c2:6b:cd:10:61:1c:a1:
8e:e0:00:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:30 2026 by rpki-client