Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
File: TFTszmy8nFSSnqpLIrM3sP2bNr8.mft (raw, json)
Hash identifier: 6K7cuaPpGFKjwnFbmsz91WJWYNv+b0C+nvsTjAieHuE=
Subject key identifier: 67:18:85:58:7D:AB:DD:9C:AF:10:A6:35:62:5D:5F:98:74:2F:67:C6
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Certificate issuer: /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial: 019D390A6DA836E69B76B290B3167578FDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 10:01:17 +0000
Manifest this update: Sun 29 Mar 2026 10:01:17 +0000
Manifest next update: Mon 30 Mar 2026 10:01:17 +0000
Files and hashes: 1: G6FeIPbrFYt0Xs4RMbl3hxFSgPI.roa (hash: pCJOng4j62RgLgH4PaC9a8+B4/vINuGKFVNtITN4RoM=)
2: M_rnheFHEJEhvuv8N_w2Hds5XxU.roa (hash: 9c9DQN1bBCgnWk4FhLy9o/RslqwQ5t8KVo6nKa0ccUI=)
3: TFTszmy8nFSSnqpLIrM3sP2bNr8.crl (hash: 3vQF64LUiruqxFh7QCM0gxrDiV3ZU1tYcC2PrqiOjYw=)
4: nEGo15KsyAjBD-x5zbk8ARJINQU.roa (hash: 0lT9gQ6lEsFlDbleFuI9ud8vDG/jc8OcFzQhfPnweOI=)
5: vCLyUWR776gkWz1fg6zz0ef3IxM.roa (hash: SjoathDw0sUup7FL2NVGvfEYMvEvs24sBQi8PhmuU7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:6d:a8:36:e6:9b:76:b2:90:b3:16:75:78:fd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Validity
Not Before: Mar 29 10:01:17 2026 GMT
Not After : Mar 30 10:01:17 2026 GMT
Subject: CN=671885587dabdd9caf10a635625d5f98742f67c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:70:d0:23:42:bc:2f:d4:63:49:ef:b6:14:8f:
6a:fd:05:a2:3a:9f:e2:ba:66:54:6c:c1:74:f9:fd:
3b:ad:82:f2:cc:7e:68:63:c1:da:96:bc:d4:0e:73:
07:7c:1c:17:1d:fa:9d:5b:6a:41:7c:10:f8:c6:a4:
0d:54:ad:7b:34:eb:95:cd:a2:e0:18:e9:ce:2e:d1:
15:57:41:1b:2a:a4:f1:7f:df:1b:23:f7:99:86:18:
7d:f9:af:8d:6d:57:09:1f:f6:c0:7c:66:05:cc:c7:
5f:e3:e3:97:5a:22:01:f2:79:80:9a:0d:05:ea:af:
f8:4b:b5:d9:72:ce:62:26:2c:b0:59:42:ce:eb:ad:
81:aa:c2:fb:a8:21:09:5f:11:05:40:84:b5:19:6b:
3d:86:b9:05:12:53:43:bb:60:e9:e4:90:c2:19:e9:
7c:02:7d:13:e1:c7:b7:d3:3f:f5:3d:29:e7:b9:1d:
03:de:8b:cc:cb:ad:e9:41:f8:97:52:2d:bd:70:69:
75:a9:67:54:f1:5e:66:17:b2:be:27:a0:67:8b:e2:
40:cd:e5:46:63:7e:38:40:c6:3a:a3:66:05:8a:25:
70:99:63:8a:9e:88:de:01:3e:2f:a3:41:ea:c7:0f:
7d:b9:8b:9e:a7:05:6d:70:f1:cf:84:85:d2:19:b8:
06:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:18:85:58:7D:AB:DD:9C:AF:10:A6:35:62:5D:5F:98:74:2F:67:C6
X509v3 Authority Key Identifier:
keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:51:60:c7:6f:4d:eb:de:1a:80:c7:99:1b:39:ac:54:e0:76:
c7:6c:80:0c:9c:ad:5c:bf:59:d8:06:84:b1:fb:72:db:d1:9e:
a7:2e:30:dc:c2:d6:9e:40:8f:fb:01:92:95:46:82:9e:13:49:
ba:d6:56:fe:c2:8a:cf:f4:6b:83:a3:31:1c:26:6d:a0:ab:23:
92:39:50:bf:36:39:d0:d1:e4:9c:fd:c2:41:18:e0:6d:c3:1b:
fe:2e:37:f6:9a:a2:b8:4d:90:e2:ea:b0:27:75:f1:38:ff:01:
42:14:df:90:8a:66:df:15:c5:44:36:db:ce:a9:b3:06:ee:c3:
6f:c1:58:b4:0d:17:c1:e6:35:03:f2:22:17:7a:86:42:a9:7a:
00:84:c5:56:4f:7b:4f:79:cb:69:c1:a1:41:9f:82:07:f6:d9:
61:5f:91:fa:3f:39:17:90:a9:23:a6:98:05:00:9d:5c:d3:53:
7a:80:22:66:e4:7f:27:03:1d:e0:e9:9d:85:0d:03:3b:66:72:
77:7c:30:95:c1:34:15:1c:67:18:86:0e:02:78:4a:8e:17:9d:
3c:00:46:33:41:3d:e9:b1:fb:19:de:29:3d:0c:09:f8:44:4f:
91:c6:02:38:c0:ca:2d:c5:76:3b:1b:3c:e6:03:e5:6a:6b:dc:
0c:a1:ef:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:47 2026 by rpki-client