Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
File: TfLG-lSozC3HHoAs-D9cd2zpdMk.mft (raw, json)
Hash identifier: AbIeMCSKqXrEeQxUiteiBBK0uwusljjsWpAnK3Kp/dk=
Subject key identifier: 8A:1E:20:BA:03:62:EE:2A:78:35:C4:3A:9E:41:8D:21:3F:AD:42:BA
Authority key identifier: 4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
Certificate issuer: /CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Certificate serial: 019D37F70D9629031D03480F16E22A78CE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 05:00:30 +0000
Manifest this update: Sun 29 Mar 2026 05:00:30 +0000
Manifest next update: Mon 30 Mar 2026 05:00:30 +0000
Files and hashes: 1: 1-9VvIj4I5VuB1gt29vzT-2uQZlA.roa (hash: aDxytIY+QLBvjB+sNfj6erO7LbHVI7jcd1DbRYQbTzE=)
2: TfLG-lSozC3HHoAs-D9cd2zpdMk.crl (hash: km+7Cg2HIFeaR0nCcunLyZoyqUzgnh+WEvP7fdtj32A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:0d:96:29:03:1d:03:48:0f:16:e2:2a:78:ce:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Validity
Not Before: Mar 29 05:00:30 2026 GMT
Not After : Mar 30 05:00:30 2026 GMT
Subject: CN=8a1e20ba0362ee2a7835c43a9e418d213fad42ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c0:01:59:b6:92:7f:37:de:8f:9f:57:46:5b:
eb:e0:8b:c8:37:77:4c:5f:94:70:fa:ae:10:47:81:
77:bd:e0:35:17:71:54:04:5e:de:ef:6b:0f:18:58:
62:c7:b1:98:13:17:87:2b:c0:f2:f0:4b:70:e0:34:
cb:c2:71:04:e6:27:fb:8f:5d:48:7b:b0:ac:8f:1d:
14:54:03:e5:9e:40:ec:12:b8:ae:97:58:83:c1:20:
53:9c:bb:e2:d2:24:82:39:1c:2f:20:de:69:2e:61:
9b:c0:6e:b4:0d:a1:76:3d:45:2e:17:02:70:d1:d0:
0b:3a:0f:45:18:d9:d5:b3:13:f7:29:52:32:e0:52:
b8:99:fe:f8:e8:94:2f:e0:d3:1c:c3:4e:86:e0:92:
5b:0c:55:6e:cf:1a:67:72:0b:fa:78:b6:35:83:0f:
ca:1e:35:b9:85:94:a1:f9:88:39:1c:73:38:da:5f:
cf:31:07:94:d2:f0:45:e3:c7:c2:17:9e:2d:89:c6:
2a:7e:51:29:b4:ca:c8:bd:e4:fd:1a:c3:4b:5f:16:
dd:60:68:96:a6:c8:d1:a1:ae:cf:13:12:dd:40:0f:
87:8c:53:80:22:82:6b:fa:b6:cf:fb:dd:69:d9:e8:
ab:5c:10:a4:73:99:6c:b8:5b:f8:d5:cc:4b:19:f8:
e3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1E:20:BA:03:62:EE:2A:78:35:C4:3A:9E:41:8D:21:3F:AD:42:BA
X509v3 Authority Key Identifier:
keyid:4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a6:24:6a:31:c1:f7:eb:e0:b1:88:11:c7:37:54:16:79:2d:
02:1b:02:4e:98:a9:ef:5b:d0:ae:85:95:81:11:28:90:d5:df:
9d:1f:0b:4d:21:80:25:a3:13:4a:8f:9c:02:4b:76:94:45:4e:
d8:25:6b:f0:95:c5:de:d7:18:ee:a3:56:dc:93:98:d1:90:12:
9e:4c:11:79:3c:1a:1f:13:a8:f4:87:00:64:0f:3f:27:c4:b8:
2d:73:61:93:7b:57:fb:5a:58:2e:60:75:4f:1e:c7:91:8f:6d:
53:29:fc:a4:71:66:e4:08:74:e5:55:0f:1a:d5:a4:2c:0b:ed:
c9:b9:75:04:de:38:9b:a2:38:23:3c:bb:a3:c2:b3:ec:61:f3:
f1:44:77:c1:f5:16:3b:cd:4a:98:69:22:61:5a:7f:2a:a5:20:
d1:bf:cd:50:2a:ea:49:35:b1:59:59:e6:32:3a:cb:9d:24:43:
ca:4d:a6:42:bd:7a:01:b2:65:c5:75:52:88:25:e1:97:17:7d:
3e:e2:cb:7b:1c:ad:2c:8d:59:19:cd:17:af:75:51:62:4d:c9:
b5:d3:c5:0e:f6:2f:29:91:23:3d:96:84:e7:f8:ea:fd:04:d2:
b1:04:f2:b8:39:c8:2f:cf:0d:e7:0f:93:c9:97:31:5e:9f:71:
96:84:14:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:33 2026 by rpki-client