Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
File: tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft (raw, json)
Hash identifier: Qy82AyfsIeuEOYguAdF5VCbYcf4i52i3Wrx8qQh6LCM=
Subject key identifier: 5D:E8:D7:4E:12:AC:90:AE:49:14:FB:18:14:CD:B7:75:A7:83:0E:F2
Authority key identifier: B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
Certificate issuer: /CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Certificate serial: 019D08FA335209ED29F3F8628D133B6BDBA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
Manifest number: 1876
Signing time: Fri 20 Mar 2026 02:01:47 +0000
Manifest this update: Fri 20 Mar 2026 02:01:47 +0000
Manifest next update: Sat 21 Mar 2026 02:01:47 +0000
Files and hashes: 1: 9zCWH-Ac1Rhc3_vCx_Ixlkh16vw.asa (hash: 1GzmLCaUmzKWkWm0Xkaj4ZmWi88kwnMLhp1nR2/73XM=)
2: Ay40Es4lmjK5Q5DTaQo_Rj0Il34.roa (hash: l6a+NksOUtbW9bPUki0o5wq7kn4tvxRKIpI840BR/qo=)
3: tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl (hash: jeBvX5xtuk0DxPwjqM6hRxiLTaziPX9d9zdnLd1AcWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:fa:33:52:09:ed:29:f3:f8:62:8d:13:3b:6b:db:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Validity
Not Before: Mar 20 02:01:47 2026 GMT
Not After : Mar 21 02:01:47 2026 GMT
Subject: CN=5de8d74e12ac90ae4914fb1814cdb775a7830ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f2:00:ec:55:df:31:81:83:e9:ff:6c:37:0e:
63:9f:5e:62:bf:06:24:a5:f5:41:f1:05:6f:0e:15:
a2:4a:f4:a3:be:97:25:6f:6c:d3:18:3f:26:2b:58:
b4:fa:b6:cb:12:de:a2:05:46:73:c7:8a:ee:ad:a2:
30:ff:50:4e:f0:fa:a9:e6:a5:84:b4:f2:e5:db:02:
b4:2e:00:d7:d4:55:79:17:cf:5e:1b:4c:66:7d:fc:
44:b4:92:91:6d:56:91:91:5a:12:c1:53:32:35:2e:
2d:1e:3d:2d:26:c8:0b:06:32:ad:5b:59:7c:d3:0e:
fc:d8:d0:b9:24:f9:a8:94:46:1f:b2:d7:b2:f7:14:
41:3a:7e:3f:82:68:76:3b:2f:c4:ad:c0:f1:e5:d0:
94:29:01:72:d1:f4:87:e4:c0:cd:fd:27:00:6b:24:
15:b6:55:92:10:6e:f1:04:64:33:a8:c0:9d:25:0f:
cb:fc:4e:13:fd:36:7e:e4:b6:54:ce:ca:2b:a9:13:
04:0f:90:af:d9:68:cf:46:30:67:fa:76:fc:c5:28:
0b:60:50:f5:2d:f0:8e:94:05:e0:43:4a:f9:6b:63:
5b:d3:15:33:7a:cf:04:6a:7b:0e:2b:ee:77:01:9e:
4e:53:87:9e:52:2a:f4:68:32:55:87:a7:7d:89:48:
bd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E8:D7:4E:12:AC:90:AE:49:14:FB:18:14:CD:B7:75:A7:83:0E:F2
X509v3 Authority Key Identifier:
keyid:B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1a:aa:3c:7e:83:05:bd:8d:71:42:bb:29:af:09:17:08:16:
36:14:f4:f7:99:ba:a4:57:31:86:b9:a0:fd:89:a6:2f:37:77:
3c:e6:86:1a:34:e9:7e:3d:30:79:e8:6b:32:a4:4a:75:7d:5f:
14:58:b0:cf:9d:35:c9:c7:40:96:7b:0c:ac:65:7f:91:cd:16:
8d:bf:3c:a6:64:8e:9b:cd:2b:de:3f:97:e3:b1:6b:b4:1e:73:
8b:6b:50:ed:fb:43:78:bd:68:3a:10:1b:f7:fb:6e:7e:58:be:
9e:a4:dd:97:9d:08:ed:b2:b5:d8:74:ed:b1:5c:c7:e6:2d:48:
95:66:d2:43:92:2e:d6:24:a2:47:c8:89:92:63:7c:ee:f9:92:
63:cc:99:c6:4c:10:2c:84:8d:0c:cf:59:5c:c6:27:51:69:2e:
96:02:96:31:37:40:8d:8e:28:50:2b:02:22:c7:03:f0:57:8c:
38:75:d4:c0:bb:09:42:8c:d2:93:86:ad:3e:bb:84:90:18:8a:
9d:ea:af:fa:c4:2f:73:2b:08:a8:71:b0:78:d9:fb:28:30:cf:
18:75:15:6c:33:a5:98:ac:ad:0b:af:98:76:69:98:d0:a9:cb:
02:51:1d:64:2b:85:12:bf:73:d4:7a:37:63:f4:23:9d:9b:b9:
25:04:5d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 05:09:01 2026 by rpki-client