Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
File: TkwTiahJ713MuDA3A7iYyR5j0U8.mft (raw, json)
Hash identifier: KlfVJAMxwTPjGoLjTfdXaKL4vmIlLmNchociDlC8bog=
Subject key identifier: C8:AA:22:9A:02:22:3D:87:BD:86:AE:D6:22:08:A7:20:15:AA:82:D6
Authority key identifier: 4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
Certificate issuer: /CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Certificate serial: 019D3865DC8036389173CE109A26AA7D37AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
Manifest number: 118B
Signing time: Sun 29 Mar 2026 07:01:32 +0000
Manifest this update: Sun 29 Mar 2026 07:01:32 +0000
Manifest next update: Mon 30 Mar 2026 07:01:32 +0000
Files and hashes: 1: OTmYG5w2zWjBDBJnDDKBYpbFxQE.roa (hash: wOCD2A3JYKhAmA4Jxehzqr2P6WlUUR1QNP5GZ7+5dNU=)
2: TkwTiahJ713MuDA3A7iYyR5j0U8.crl (hash: 6dAJbGTTQXdMk9xF+kJzfasMKhzRbFXGL9kwfSJELhg=)
3: fPUxVV7UyTZqibxa_fO2Z7Dv9bw.roa (hash: rWKalIAkW6Zh9W6BAPZNwld+hHBcJmoL3lPHNNP3Pi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:dc:80:36:38:91:73:ce:10:9a:26:aa:7d:37:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Validity
Not Before: Mar 29 07:01:32 2026 GMT
Not After : Mar 30 07:01:32 2026 GMT
Subject: CN=c8aa229a02223d87bd86aed62208a72015aa82d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:4f:b3:9b:63:92:08:0f:c4:4a:10:16:d1:
2f:fb:f6:4a:7b:61:01:c5:95:f4:1c:e3:2a:ce:6a:
2f:d2:0c:06:79:64:19:80:dc:0b:fc:40:1e:a9:55:
c3:19:f2:b5:02:cb:e1:3b:3e:6f:08:2e:37:7a:f9:
48:c5:8a:ba:79:c8:60:2c:cd:5c:f5:2d:79:c2:9d:
95:04:98:a6:cc:c4:ec:b6:bc:25:87:74:b2:cb:1e:
61:0e:39:64:ac:97:6a:ab:93:cf:47:a2:e2:cf:f9:
03:00:a9:a9:68:58:c7:1b:44:d3:55:3f:07:8f:b6:
30:54:dd:c1:69:0f:d1:fd:71:46:4a:5d:f0:22:67:
a2:24:a5:72:e1:86:ab:f6:89:1d:f5:b0:36:b6:c5:
c7:a9:7b:85:28:a3:28:32:6b:b7:f1:58:4b:c9:50:
40:1f:31:f0:c1:ae:90:20:ef:4a:11:5d:d8:a9:85:
06:cc:05:9f:a1:37:64:da:21:30:81:da:82:85:d2:
4d:79:1d:5a:63:eb:85:f0:8d:69:f2:18:5e:5f:ab:
9e:1f:59:e2:5e:01:dd:10:59:5c:5f:98:1c:06:7b:
43:86:1d:7e:82:49:d0:b2:e7:a3:fe:f1:6b:f4:ce:
24:54:0f:81:93:6b:2e:95:96:d3:b7:f2:70:81:6a:
4b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AA:22:9A:02:22:3D:87:BD:86:AE:D6:22:08:A7:20:15:AA:82:D6
X509v3 Authority Key Identifier:
keyid:4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b2:1f:ed:fe:78:e8:5b:e0:4b:83:03:18:2b:26:87:91:64:
c9:63:c5:20:05:5b:e4:2b:c0:8e:b1:43:17:98:6e:9c:1f:8e:
18:5f:47:be:4f:c6:d0:e5:3b:0f:43:24:a0:ed:53:ae:9d:28:
6b:e2:c6:28:af:11:be:ed:64:a1:6a:4c:f1:05:28:23:14:83:
9a:9b:32:27:78:d1:fe:7b:8c:65:8d:a2:f2:26:cb:69:ac:0f:
f0:d4:6b:7a:a6:53:db:d2:de:db:07:e6:7c:ee:7b:40:f5:bd:
36:ae:66:dc:a2:80:7c:ce:3e:ea:44:c6:09:fe:5e:33:ca:d0:
3c:96:c9:74:fd:db:bd:22:b9:c8:53:79:ba:d3:f4:04:b0:06:
df:e4:46:b4:2c:8d:d7:44:2a:f1:de:82:a6:5d:59:97:9c:de:
e0:d5:fa:f8:ca:d9:1b:dd:75:27:17:23:cc:29:99:3b:73:6e:
b5:cd:3c:7c:a9:a9:ce:6c:e9:c6:bc:6d:f7:94:d0:b0:89:f8:
54:75:45:51:b2:3f:99:1e:d7:bf:12:f2:03:ab:0f:f3:38:fb:
7e:84:a8:37:78:5d:61:71:02:73:32:4e:5b:9d:c4:46:8f:33:
2c:a3:04:e6:50:df:ce:e2:3c:09:4b:bf:fb:f0:90:52:3c:e0:
d6:60:b3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:04 2026 by rpki-client