Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
File: TxUpALDTI9NtlFEKsLAck_RRfIk.mft (raw, json)
Hash identifier: vWjOrQLW8ndIjkgRonaTrr3IuX3i4c5NRoKDjp9swI0=
Subject key identifier: C4:13:8A:36:F2:13:16:9F:DD:D8:4A:91:63:9C:32:40:AD:48:BF:C5
Authority key identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
Certificate issuer: /CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Certificate serial: 019D3977743E39F3D006DC397F106CD913B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 12:00:22 +0000
Manifest this update: Sun 29 Mar 2026 12:00:22 +0000
Manifest next update: Mon 30 Mar 2026 12:00:22 +0000
Files and hashes: 1: 3bsIQIUMB3wEM7UpYsUhEhh9TDM.roa (hash: JUK0LWzP12KIpgwQRI9/y3rNyJiup+Z+mcnNsCbamT4=)
2: TxUpALDTI9NtlFEKsLAck_RRfIk.crl (hash: Whz1lf8KtvN0aV2xuWoLY/Pqw/3R1LBIEOa8fWMJSrs=)
3: UBcqPXEQnKrJnYhEGTvOR6j6EUo.roa (hash: wZthjYgNfjrS6L37NpRR1qXSrJcuxPFMsxRLKIg6JX8=)
4: Z0hS5fWo-y_SX9oUly3wZoFqg80.roa (hash: QItwS85WIhN170At5hmC7mNxoC4+AyHXJZmT2uZ7v2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:74:3e:39:f3:d0:06:dc:39:7f:10:6c:d9:13:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Validity
Not Before: Mar 29 12:00:22 2026 GMT
Not After : Mar 30 12:00:22 2026 GMT
Subject: CN=c4138a36f213169fddd84a91639c3240ad48bfc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:06:21:fe:52:24:87:5b:c9:e5:ef:91:29:ae:
59:ec:cb:36:33:d4:75:65:d0:44:b1:e1:b9:ac:44:
a9:53:e3:58:8e:a2:53:9b:d8:3a:a1:3d:de:e8:38:
71:a2:52:97:1f:3e:b0:5c:1b:51:c2:7b:1c:50:49:
62:91:c0:8d:21:37:17:0f:9a:90:60:f4:b7:48:21:
33:d7:28:da:34:35:33:c5:aa:20:22:cb:cd:c3:4f:
5e:b3:99:b3:6a:4a:4f:53:2d:06:c2:a2:7a:d7:03:
5f:fc:94:b4:3d:a6:8e:bd:20:86:c6:c5:48:ec:af:
4a:d4:e0:f3:07:0d:5a:0d:9a:5f:7f:37:c0:2c:9d:
f2:9e:db:9e:15:55:c3:f5:75:52:e5:8b:af:a4:e5:
78:2c:22:ce:5b:9f:d7:6a:08:4f:fa:bc:58:cc:cb:
7e:5e:4b:86:3f:aa:04:6f:96:b7:0d:d2:f4:0a:18:
20:ec:eb:f9:f7:42:41:57:9e:7a:c7:39:a9:ad:37:
19:1e:74:be:69:20:c3:3e:a9:f7:90:d9:9d:6f:06:
e3:bc:8a:a0:cf:72:95:65:7a:05:ca:e3:df:24:78:
0d:8e:61:d6:05:bc:39:47:02:70:d2:99:b5:f9:24:
93:39:58:29:54:4b:8e:60:97:26:31:ac:8d:98:58:
ef:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:13:8A:36:F2:13:16:9F:DD:D8:4A:91:63:9C:32:40:AD:48:BF:C5
X509v3 Authority Key Identifier:
keyid:4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c1:39:f4:fd:6a:ae:06:cf:89:a2:06:38:d3:85:51:34:9e:
39:01:e8:86:5f:92:ff:8a:d3:f5:cc:9e:6f:78:09:9f:10:d6:
91:2c:4b:8a:b8:7b:51:18:88:7a:3b:00:3a:eb:06:5b:ce:b6:
08:19:91:82:17:b0:5b:ae:05:58:e0:fd:76:03:d3:cc:e4:d5:
26:fe:e9:fb:55:f4:f0:49:41:76:5d:46:8f:08:2c:be:32:2f:
e6:f9:79:64:de:e7:50:e2:15:23:41:d6:ea:3f:ec:69:31:cc:
c0:d5:68:b8:d2:40:5b:ca:e6:4e:42:bf:7f:13:f8:6f:f4:ba:
93:6a:37:c0:85:32:15:5b:c2:de:94:81:b0:cf:12:21:e9:50:
04:ec:90:66:02:d4:8d:61:65:3c:9f:3e:31:5a:19:28:e9:69:
54:da:f0:b9:5c:2c:25:a4:37:aa:d3:bb:26:4c:62:c9:05:d9:
1a:19:72:fd:1f:f3:b3:d5:28:55:f8:75:d3:04:f7:af:f8:7c:
92:c2:ea:89:74:b1:a8:8d:4e:55:8e:9d:53:cc:4b:8a:9f:31:
bd:36:9c:31:46:9f:27:8f:7c:43:d3:4e:13:e5:cc:20:a0:c7:
21:be:6b:d3:46:e8:e1:16:fc:47:52:ed:9d:0d:22:ff:88:50:
5c:d8:e0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:52 2026 by rpki-client