Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
File: TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft (raw, json)
Hash identifier: THarFUE0+A+BqGpOZlIG2Qqb7iYF6YTqMTc6WSnDpIY=
Subject key identifier: 88:66:3F:E2:BA:03:C1:0B:60:43:A6:26:15:BB:BA:3F:40:B2:7D:1B
Authority key identifier: 4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
Certificate issuer: /CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Certificate serial: 019CE52361733367BF552E46B87269BFB58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
Manifest number: 1863
Signing time: Fri 13 Mar 2026 03:00:27 +0000
Manifest this update: Fri 13 Mar 2026 03:00:27 +0000
Manifest next update: Sat 14 Mar 2026 03:00:27 +0000
Files and hashes: 1: TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl (hash: IIFR9qRbe3HD5SOFvIFPRfYbrP3FyuErUXZm+BUnWVg=)
2: WAeLgGdzqW62R3XT1JnNrx8DFw0.roa (hash: u2qcj3/aGyotDnZkp7n2BDjtQTbTd2cHSPO2kqQnPxc=)
3: ddrx84-m9QT2CvYQ4rYUaQFT-V4.roa (hash: +34dpqFO+p0Lo2t/qjx/upoiDGo64OhUtxpuKNK8lMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:61:73:33:67:bf:55:2e:46:b8:72:69:bf:b5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Validity
Not Before: Mar 13 03:00:27 2026 GMT
Not After : Mar 14 03:00:27 2026 GMT
Subject: CN=88663fe2ba03c10b6043a62615bbba3f40b27d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:16:e0:df:df:d1:86:3c:36:3c:6f:92:3c:0c:
d7:de:ff:7c:21:c1:b1:06:05:cd:73:4c:88:ed:17:
56:8d:a7:b4:be:bd:7f:46:09:f5:00:17:6b:f7:4d:
98:86:de:52:b1:b7:02:33:52:ae:7f:8a:04:8d:1b:
d5:df:56:8d:e5:9a:20:28:2b:66:76:c7:2a:6c:fa:
7f:de:ff:76:fe:82:1e:62:60:fe:62:67:7d:d5:09:
3c:24:ff:d3:a6:e6:7c:d8:d7:71:fc:ea:4b:75:1e:
99:5c:2e:fe:91:1f:d2:6f:37:90:fe:77:b1:c9:c7:
e5:ea:33:e7:26:32:3e:65:91:3b:ca:c5:03:0f:05:
05:22:b0:d2:85:3e:1f:2d:f6:d5:07:17:cb:54:39:
28:ec:36:e1:9c:22:eb:38:6f:37:42:c1:13:ca:91:
8e:d1:89:10:85:06:1d:bd:5a:4e:17:aa:e7:66:93:
b6:f1:d1:a8:6d:ef:6f:d3:de:d6:3c:ff:c0:4d:73:
04:b7:b3:47:83:16:71:bc:d1:d4:32:c7:03:f1:92:
f9:6c:ce:e5:0d:2d:ea:47:88:5d:da:a6:e8:af:94:
0c:85:3f:9b:ae:9b:e6:49:ec:93:76:95:50:6d:74:
28:47:2a:19:25:56:71:1d:51:41:5b:4e:68:b0:30:
8d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:66:3F:E2:BA:03:C1:0B:60:43:A6:26:15:BB:BA:3F:40:B2:7D:1B
X509v3 Authority Key Identifier:
keyid:4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ba:5a:a7:02:9b:c5:ad:5b:48:0a:30:19:5f:17:f9:99:09:
2f:ea:fd:e1:db:f2:39:c3:b2:1a:12:61:ce:e1:95:43:34:dd:
b8:b4:05:d8:41:0c:e1:86:c6:39:35:d5:a0:98:57:12:3e:75:
7f:5b:fb:b0:0d:35:6b:e7:f3:75:8e:0c:18:3c:cd:ab:40:25:
d1:52:bb:ec:54:d4:0a:5c:ba:7f:fc:2f:3b:42:98:95:ae:31:
66:7b:09:87:92:b4:11:11:3d:7e:48:8f:5b:0d:35:21:56:16:
36:00:7c:38:88:5a:2e:80:77:f2:93:fe:ee:7c:3a:ed:c1:5e:
35:0b:73:8b:45:cc:dd:2c:00:69:3e:92:7e:9d:a8:0c:02:5c:
5e:97:be:61:d8:b1:10:08:f5:b7:52:a7:34:08:62:23:ea:81:
b3:88:98:1e:9f:8d:e8:b3:2a:f6:88:b4:f5:88:76:86:4c:38:
45:43:30:aa:75:a1:a8:63:7b:9d:5a:ca:90:d6:41:a5:c6:55:
f3:d3:71:12:27:58:d6:04:b8:c5:26:6d:f7:07:78:6d:a1:ab:
f7:71:57:a8:24:31:00:83:ee:e1:eb:e4:2b:e4:cd:c1:55:3d:
b1:e3:35:a4:41:a5:84:a5:db:da:f3:53:06:b3:8b:9e:da:f7:
8c:0b:dd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:58:27 2026 by rpki-client