Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
File: tpJFTBZpZIbPBx7Rjnl240BJCfs.mft (raw, json)
Hash identifier: uRiafY7x13AhxKxlr+YIxKJ90rZQ2VFxvzjNiFwD+3I=
Subject key identifier: 34:75:93:DA:76:AD:A4:D6:83:75:94:6B:95:D1:25:6A:16:CB:DC:FB
Authority key identifier: B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
Certificate issuer: /CN=b692454c16696486cf071ed18e7976e3404909fb
Certificate serial: 019D38D385098BC97D686A72E04B031C5F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
Manifest number: 0CDE
Signing time: Sun 29 Mar 2026 09:01:19 +0000
Manifest this update: Sun 29 Mar 2026 09:01:19 +0000
Manifest next update: Mon 30 Mar 2026 09:01:19 +0000
Files and hashes: 1: MXpmWhbVyPq4rmweRCFwVrTv_-A.roa (hash: 7v8WygVCKT2B/KZ8B8RmDLY2b/Xhyo57To56E6VXxLc=)
2: tpJFTBZpZIbPBx7Rjnl240BJCfs.crl (hash: aJZ9gnHrjKYbR5stt5E2d+yai/7J7T3CxY3sCuvfGfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:85:09:8b:c9:7d:68:6a:72:e0:4b:03:1c:5f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b692454c16696486cf071ed18e7976e3404909fb
Validity
Not Before: Mar 29 09:01:19 2026 GMT
Not After : Mar 30 09:01:19 2026 GMT
Subject: CN=347593da76ada4d68375946b95d1256a16cbdcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:f5:91:17:8c:cc:d3:66:42:b2:97:63:c0:
81:0b:e6:0f:aa:ae:8a:f9:e0:8e:be:f4:6a:32:68:
39:c8:d3:59:54:18:4f:11:ad:b1:5c:a9:9d:c5:11:
f0:46:f6:a0:db:0f:c0:37:ab:dc:b1:c9:01:8e:03:
c1:05:bb:fa:9c:3e:f1:fe:19:de:a5:c7:2c:37:46:
75:f5:02:b2:74:e0:78:e0:dc:13:50:53:46:f9:37:
ab:3b:7a:d0:6d:c4:94:b3:f6:18:1d:c6:b7:97:18:
f5:53:f8:57:bf:2d:4f:d8:5d:59:1b:3c:75:08:7d:
3d:ac:1a:c6:41:ce:30:11:9d:33:32:6f:ae:49:3c:
41:b8:2d:fb:cf:d9:15:f1:75:9f:eb:64:51:bc:05:
5d:73:3b:52:12:07:b0:eb:7b:5d:6e:20:f8:09:1a:
3b:1d:81:5c:e7:30:51:96:ce:40:48:cf:a5:9b:82:
e6:74:a3:d1:a5:9b:ed:b9:84:50:a1:62:dc:8d:19:
b5:48:1d:e7:06:d6:82:e3:6a:2c:d5:b3:6c:0c:87:
78:28:4e:60:60:ab:83:76:48:ef:ba:17:c7:38:5e:
01:34:35:d4:63:c7:21:2f:fe:a5:e6:34:93:62:26:
5f:ca:61:4f:fd:b1:e7:3c:e9:00:5d:25:d9:39:18:
d9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:75:93:DA:76:AD:A4:D6:83:75:94:6B:95:D1:25:6A:16:CB:DC:FB
X509v3 Authority Key Identifier:
keyid:B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ce:4c:cf:ff:1a:dc:bf:77:3d:d2:fc:93:66:d8:ab:0a:8f:
71:2c:4c:3a:88:23:e1:1b:a2:a8:76:40:6f:ad:d3:98:98:cb:
8e:8e:c8:3c:cf:33:8c:1f:7e:d3:49:42:6f:9c:bc:b8:7f:a4:
c9:3a:02:a8:fd:c9:68:ec:c8:aa:a6:7b:a8:f8:08:64:7d:3c:
86:c9:dc:dc:99:db:d5:d4:5a:ec:9b:6b:a1:b9:92:39:55:8f:
ca:f1:bc:7e:9f:98:2c:63:41:b4:c2:ec:f1:2d:36:01:7e:c3:
9c:8b:3c:c3:3b:a9:e0:78:f7:2a:4e:23:16:78:8a:50:5b:e3:
0b:b3:41:f3:f3:35:66:52:0b:09:1d:f9:7c:65:a6:78:55:fe:
1e:f5:ff:40:33:dc:72:c9:eb:0d:85:00:ab:1e:f2:d1:35:09:
a4:53:dd:02:19:57:bb:30:3e:4d:0a:c7:29:cb:5c:3b:53:df:
ae:34:d6:4c:fc:24:6a:27:6f:c8:b9:42:a0:df:7f:1b:bc:38:
cf:71:ed:05:fb:34:74:7e:ab:a6:de:76:19:71:f2:ed:43:4f:
7d:7a:c5:53:64:cb:62:a0:7e:eb:95:7d:40:27:9f:31:6a:09:
51:3f:91:5c:0d:fd:b8:3e:37:4a:86:25:c9:5e:1e:a5:eb:1c:
d0:6c:23:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:46 2026 by rpki-client