Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
File: TgTgpximE5qcZfDUiGu4JxTaZoI.mft (raw, json)
Hash identifier: KK5GxD4WqDUL6i6yw+tOXyU+Dkhqf4EgOk/RpiOT5X0=
Subject key identifier: D5:0D:4A:7D:2F:33:AF:FA:D9:00:E5:CB:A9:6A:3F:17:13:02:4D:42
Authority key identifier: 4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
Certificate issuer: /CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Certificate serial: 019CE55A28E22B3755129A7634FD5FC54851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
Manifest number: 1865
Signing time: Fri 13 Mar 2026 04:00:17 +0000
Manifest this update: Fri 13 Mar 2026 04:00:17 +0000
Manifest next update: Sat 14 Mar 2026 04:00:17 +0000
Files and hashes: 1: 5Nquyk_YS8j83lcZJdiswq8j9kg.roa (hash: BfZqdxUYisJtcIB1bX8hB4ZBa8K5totO7lD83EBGvt4=)
2: TgTgpximE5qcZfDUiGu4JxTaZoI.crl (hash: tbzenWN0Q4jAeHxB92f88UkfVru0W0yj0wAi7H55pvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:28:e2:2b:37:55:12:9a:76:34:fd:5f:c5:48:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Validity
Not Before: Mar 13 04:00:17 2026 GMT
Not After : Mar 14 04:00:17 2026 GMT
Subject: CN=d50d4a7d2f33affad900e5cba96a3f1713024d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:11:8a:f9:61:86:cb:24:cc:61:55:6f:b6:
32:71:45:eb:80:12:39:83:4f:70:c8:1b:f8:4d:09:
8e:77:1b:21:c9:19:07:0e:f9:97:c6:45:4f:d6:21:
27:54:dc:3b:26:8a:67:16:52:84:1d:0f:5f:97:d7:
f4:7d:6d:d6:c5:38:43:36:84:8c:f7:a9:62:c5:6c:
65:71:d5:72:bb:08:3e:24:f7:e3:31:96:6a:80:77:
d0:ff:2a:1c:ac:2b:84:10:b2:3e:8b:c4:70:35:f4:
5e:fd:a7:66:5f:0c:63:28:96:f3:69:fa:92:e8:52:
0f:d8:35:1e:b7:88:b6:7b:af:2d:da:28:33:e7:87:
f2:4c:38:18:5d:ef:1a:16:f0:d6:61:9b:a7:7b:b7:
53:b6:79:82:fb:91:89:61:69:f1:aa:af:f2:2b:24:
26:19:e9:8d:27:c0:20:5a:3b:5a:03:c2:58:32:ea:
6d:85:eb:73:6b:c1:d7:37:7b:51:97:56:c3:27:d2:
d1:94:42:e7:d9:92:06:98:03:9c:cb:c8:1d:22:5d:
60:ed:96:e4:65:3a:0e:4b:56:27:88:9a:10:a0:b9:
b5:ec:19:0f:dc:84:bb:6d:b6:f4:b9:15:64:c2:26:
16:f1:e9:e8:c4:e9:a4:5a:7d:d5:5c:2a:e9:26:d2:
c5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0D:4A:7D:2F:33:AF:FA:D9:00:E5:CB:A9:6A:3F:17:13:02:4D:42
X509v3 Authority Key Identifier:
keyid:4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:02:80:5d:1f:c7:c2:0e:5a:0d:53:f0:72:96:f6:e3:97:36:
6e:16:bd:06:7d:13:22:82:b0:a1:04:df:63:a4:25:7b:7d:b5:
ca:45:5a:33:78:83:99:65:02:bd:c0:a8:7e:43:9c:01:63:94:
18:17:b9:d7:52:b9:ba:4e:6e:d6:52:08:ed:f2:fc:ac:31:48:
7b:d2:da:88:38:f1:0e:5b:3a:d4:8b:eb:81:bd:ea:92:c2:6b:
89:14:0f:cf:dc:53:9b:fb:f4:b5:f9:3a:09:3b:f7:34:94:5e:
82:ae:8f:86:f9:6f:0c:53:77:6e:d5:91:3b:9b:cb:11:2d:11:
e8:c7:85:7e:d2:d7:36:07:28:0e:33:07:59:cd:4b:43:d4:b5:
79:40:63:8d:f1:14:28:5d:ae:b4:b5:74:16:7d:c5:7e:4f:21:
a3:a7:7e:90:b0:cf:14:a8:55:af:00:98:51:cf:12:fe:de:8b:
c4:ed:6a:63:d6:35:fe:cb:2f:fd:89:4a:a0:c4:72:b8:40:a5:
88:a2:8c:48:8c:6b:53:d8:53:e5:cd:b5:1b:91:91:df:31:7a:
e7:c5:29:b1:b1:d0:7d:90:4f:f2:9d:77:cf:f2:33:b0:3e:66:
78:8e:de:2a:80:1a:e4:4e:fc:1e:e8:e0:64:20:a8:5e:07:87:
a0:8b:88:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:20:32 2026 by rpki-client