Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
File: TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft (raw, json)
Hash identifier: Q41IvYPGG9cUFQoK+xsKfOH14neiZqMnn7g+2ket3A4=
Subject key identifier: 3D:88:4C:DA:B1:77:2A:95:BC:91:DD:F2:E7:B7:E2:0E:E9:A7:B7:2C
Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
Certificate issuer: /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Certificate serial: 019D37C0AEEDEE77223EC719F533FE525F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 04:01:07 +0000
Manifest this update: Sun 29 Mar 2026 04:01:07 +0000
Manifest next update: Mon 30 Mar 2026 04:01:07 +0000
Files and hashes: 1: 1-yMlj_lfkJoYBfYvpMydeDjmgSM.roa (hash: K/sPdE3c5W5fRpAqOLm5bFgaW4DKI4EBlPvEPl32aOM=)
2: RItX9BG6Bl_mx3MTjyJm8l3wLw4.roa (hash: ozz/LMoGDHWxs5USbAIdVcdqDkAaVci0RWqFGYt8Lgg=)
3: TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl (hash: tfcfLcKlZtl+sF3arhT0nXSMlHfEB51M0h4nlotp+TY=)
4: tCb5DC6zfb4vzHPOix2UvW9ndS4.roa (hash: ntxgYvCvFvJADG1N43LItMS9Zjg6jG20YT8FEIvxIu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ae:ed:ee:77:22:3e:c7:19:f5:33:fe:52:5f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Validity
Not Before: Mar 29 04:01:07 2026 GMT
Not After : Mar 30 04:01:07 2026 GMT
Subject: CN=3d884cdab1772a95bc91ddf2e7b7e20ee9a7b72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:c7:34:e2:32:15:d5:18:ec:1e:24:7c:32:
fa:67:d7:db:a4:5c:e6:68:ba:41:5c:c6:e5:8e:b9:
74:8c:bf:7b:14:e7:6d:e8:45:0d:6e:89:82:02:78:
8b:4d:f5:2a:f2:e6:c5:09:b0:7c:95:a3:14:ad:bf:
e4:0a:19:8d:40:87:da:37:95:19:56:28:ad:30:41:
e1:93:f2:80:02:42:33:88:d0:33:34:8c:0e:cf:76:
87:cf:f6:59:70:ac:92:60:7d:6d:99:7c:8e:38:32:
1b:1f:73:d6:ca:1c:ec:54:d8:76:7e:71:bc:22:e8:
3d:42:3e:ad:e0:54:ce:58:73:e5:fd:3e:98:3c:03:
74:0d:1b:4e:f3:ca:a0:2a:49:1b:44:25:e2:a8:c5:
49:a1:14:c2:2e:62:88:a2:19:55:22:6e:b8:f2:c5:
88:83:59:eb:50:c6:37:0b:43:34:ca:df:f3:e0:d2:
41:79:64:0d:7b:80:4d:7a:64:5b:32:bf:1b:59:19:
6c:a3:4b:a0:17:75:58:b3:4c:d9:b8:42:ae:39:59:
ab:e7:9d:96:6c:0e:12:fe:ba:6e:6f:1e:4e:fd:b6:
87:f5:12:f1:33:93:b8:84:25:74:f0:d3:55:70:48:
58:bf:85:c6:be:60:d9:c4:aa:45:c6:a7:21:f2:bb:
86:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:88:4C:DA:B1:77:2A:95:BC:91:DD:F2:E7:B7:E2:0E:E9:A7:B7:2C
X509v3 Authority Key Identifier:
keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8c:6e:45:ab:dc:16:36:3d:d3:1d:3c:97:0d:a8:ef:49:9b:
8e:a4:97:b4:a0:55:f1:c6:70:b4:98:b4:16:10:35:d7:63:46:
9a:e1:dc:9f:47:02:ee:3a:f0:fe:2c:b8:32:e6:e4:c3:8c:8d:
05:88:6b:cf:5c:72:e9:ac:1f:3c:25:f3:60:1a:0a:41:2c:2f:
6d:ae:8d:40:d5:8a:64:36:38:62:bc:e2:37:84:28:6c:85:73:
85:35:0c:8d:fa:f9:c7:a3:38:9c:eb:cf:13:a8:a0:c7:9c:88:
85:d4:49:5e:0d:ed:a6:d2:c5:24:0f:6a:e8:50:97:d7:16:87:
90:ca:aa:46:51:8e:87:d7:f3:e8:32:e7:54:76:9c:3b:9a:64:
ba:f1:24:e5:27:51:9f:e7:04:64:44:b2:4d:29:00:dc:09:e4:
af:cb:86:20:68:eb:33:38:f1:21:f8:30:c4:b0:c2:77:85:ca:
0f:8b:73:59:9c:9c:da:48:0c:42:61:04:12:a1:80:63:52:d5:
41:72:0d:8e:2c:b1:eb:81:9e:ea:a1:36:28:35:80:94:4d:df:
db:49:a8:38:67:fe:9d:06:34:72:d1:ee:9e:d2:3b:f9:d1:49:
93:d6:0a:b5:e1:83:8b:7e:6b:ae:eb:5b:14:99:f5:70:24:e1:
e9:c1:4a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:55 2026 by rpki-client