Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
File: TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft (raw, json)
Hash identifier: jxJYLUZlNEhZuiAAWkH1DThUmuhX5bxPvJZ9XGtbUQA=
Subject key identifier: EE:F0:CB:78:81:6D:0A:5D:BA:53:DB:51:69:EB:47:3E:97:5C:B8:9B
Authority key identifier: 4D:2F:4D:10:8A:C1:84:BD:1B:53:2F:F8:8F:C6:64:4A:DE:16:DA:75
Certificate issuer: /CN=4d2f4d108ac184bd1b532ff88fc6644ade16da75
Certificate serial: 019D3866155EB4CDF32BAFDFDB24FD708305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
Manifest number: 0C17
Signing time: Sun 29 Mar 2026 07:01:47 +0000
Manifest this update: Sun 29 Mar 2026 07:01:47 +0000
Manifest next update: Mon 30 Mar 2026 07:01:47 +0000
Files and hashes: 1: 0IfBuJKTc-ZAapBVoo09IVcjirw.roa (hash: DTT3atnBIKRsyqC7V02d68tnwY+R6xQKAabUDXEqKAI=)
2: TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl (hash: Gn8kcyOAlY/p8EwBFDa9ipax7jdiAj0soCp4Sf3Dwr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:15:5e:b4:cd:f3:2b:af:df:db:24:fd:70:83:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2f4d108ac184bd1b532ff88fc6644ade16da75
Validity
Not Before: Mar 29 07:01:47 2026 GMT
Not After : Mar 30 07:01:47 2026 GMT
Subject: CN=eef0cb78816d0a5dba53db5169eb473e975cb89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:85:a9:33:61:6f:41:09:6e:44:90:4b:21:
46:02:b4:15:72:04:f8:b7:c3:6c:a8:87:b6:e1:16:
44:02:a5:0e:43:f3:9d:b1:c5:52:45:23:43:ba:51:
9d:1b:48:cc:4b:79:3f:a5:87:62:f1:6b:86:8a:8a:
b1:1e:17:ed:66:83:ab:46:f4:17:d1:d9:b9:82:03:
7a:f9:cc:16:cb:70:d4:1c:0a:53:5a:0c:45:87:57:
09:02:89:af:25:b4:6c:da:5d:70:a2:3d:c8:5d:76:
df:37:1b:cb:ec:7e:45:b5:7d:f4:a4:ec:f0:52:e9:
06:8d:73:e6:26:0d:ef:e8:ea:67:11:b3:7a:a9:b8:
3d:ff:88:a9:33:b9:a6:ea:d8:d5:1a:c0:ff:c2:35:
90:e4:21:76:ae:ec:82:5e:7c:28:df:cc:5e:88:03:
2c:53:52:c5:a9:1a:84:e9:b4:cd:79:4b:e9:99:be:
3f:8d:11:79:fa:3a:2b:d3:3e:df:86:01:d0:96:ff:
84:6e:ce:cd:c5:6a:33:e2:d4:d7:b7:e7:0f:d2:9a:
ca:1e:01:67:f0:e9:48:73:60:65:d2:8d:24:72:2f:
60:03:85:1a:9d:44:14:e4:47:b3:03:a6:ec:28:23:
1c:1b:cb:c1:33:f3:79:b1:49:46:d5:73:60:a9:3d:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F0:CB:78:81:6D:0A:5D:BA:53:DB:51:69:EB:47:3E:97:5C:B8:9B
X509v3 Authority Key Identifier:
keyid:4D:2F:4D:10:8A:C1:84:BD:1B:53:2F:F8:8F:C6:64:4A:DE:16:DA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6d:13:63:6f:6e:5c:48:0e:6a:a0:3c:2c:3a:0e:34:72:92:
b0:08:64:7f:87:f2:37:96:82:d4:db:d8:06:73:a2:9a:85:cc:
db:c0:ad:2a:e4:7d:64:c9:e1:ce:5b:dc:c3:da:ca:ba:bf:55:
36:64:a0:9b:37:00:35:6f:87:14:b4:a8:e2:a2:24:7a:48:6d:
65:5a:93:6d:0d:1d:0a:7b:cd:31:d6:34:dc:8a:89:85:50:7d:
c4:be:1c:0b:9f:54:ed:6f:c3:ee:81:18:ad:e5:a2:15:69:2c:
bd:2a:c8:a8:b2:37:f3:68:14:87:d8:96:7c:b7:97:a3:3d:43:
69:6d:42:4a:02:4a:b6:df:3c:94:aa:8a:55:77:a9:11:67:57:
54:13:52:22:69:6a:f9:45:38:d5:2f:bd:a1:27:57:79:6a:a6:
1b:86:46:70:b8:78:89:69:28:4f:3c:98:1b:1c:a1:8c:9d:af:
08:f1:a6:47:83:f5:b1:0a:f8:2c:f9:d8:5f:28:77:ea:76:53:
31:ba:37:1f:36:1b:a6:b9:ff:c1:7d:f3:f6:16:f1:a3:60:4c:
12:25:bd:10:8a:b0:b4:95:04:b5:14:b1:65:7c:bf:65:8a:f5:
71:01:01:88:03:b3:ef:59:6c:95:5a:0d:16:9e:1f:81:ad:23:
0c:4c:98:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:34 2026 by rpki-client