Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
File: TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft (raw, json)
Hash identifier: gH6dfg90vr5Ks5+LfAqm1ruc/UFrxqNwjs33EoNDVbg=
Subject key identifier: 8C:73:DA:2B:12:35:5B:BE:66:E2:68:6C:BB:39:F6:08:E5:E7:7E:46
Authority key identifier: 4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6
Certificate issuer: /CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
Certificate serial: 019D37F789FA286388A01C3A19A1C4AB9EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
Manifest number: 0AD7
Signing time: Sun 29 Mar 2026 05:01:02 +0000
Manifest this update: Sun 29 Mar 2026 05:01:02 +0000
Manifest next update: Mon 30 Mar 2026 05:01:02 +0000
Files and hashes: 1: TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl (hash: PoUiQoVJSbX/t61EDRIQIpdjMr7BePuFBkjbpvx4QvA=)
2: aC8UNmy0l7OgPQTZ2nVPiNtSCxQ.roa (hash: L0i81KYUigHRpwI1gm1ehZ81UJds6Brs5hjYir4TlR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:89:fa:28:63:88:a0:1c:3a:19:a1:c4:ab:9e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
Validity
Not Before: Mar 29 05:01:02 2026 GMT
Not After : Mar 30 05:01:02 2026 GMT
Subject: CN=8c73da2b12355bbe66e2686cbb39f608e5e77e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d3:46:db:b2:04:33:5a:5a:59:0f:db:53:51:
14:a9:c6:4d:98:cb:a0:4f:1e:ac:3b:df:3b:a0:48:
00:d5:e8:40:7a:ee:68:2c:b1:9e:7b:47:e0:f5:b3:
52:2d:e8:98:66:e6:f9:08:c1:28:0c:5d:c9:d5:12:
d1:2f:1e:05:4f:27:00:c7:98:b9:90:25:e5:06:58:
ad:1a:89:96:16:8d:ac:54:6d:87:f4:c7:df:01:84:
52:8e:96:d1:ec:50:cf:42:92:15:f8:74:4e:33:84:
3e:3c:4c:86:83:28:4f:57:22:71:bb:d3:76:f0:c9:
9a:0f:8b:ec:41:52:72:f7:b8:8a:aa:17:cd:c4:32:
cd:15:26:51:67:23:bd:8f:40:cf:00:6a:a8:a9:8c:
d4:23:7e:29:34:ae:29:7f:0c:d6:f1:bf:e7:c8:1e:
cb:26:10:36:fa:4f:f4:96:ab:6e:55:c5:eb:fc:d2:
fa:3d:7e:78:8f:2f:2e:02:75:0e:c9:26:2c:15:1d:
b9:83:e9:e8:85:9c:fe:5f:48:3c:70:45:5d:3c:7d:
8f:2c:65:51:b7:29:58:14:d9:5b:58:58:0d:90:93:
79:dc:2e:1d:11:1b:81:39:26:da:dc:26:9d:9e:c2:
22:12:ba:12:09:cf:a4:85:f7:b4:d9:ff:aa:4f:ac:
f2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:73:DA:2B:12:35:5B:BE:66:E2:68:6C:BB:39:F6:08:E5:E7:7E:46
X509v3 Authority Key Identifier:
keyid:4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:bf:fe:00:7d:46:6c:31:5a:c0:f1:0d:6b:b1:ba:d9:6c:07:
11:87:78:ea:7c:6e:a2:d2:b2:70:94:1c:be:d5:08:65:4e:c8:
ce:01:24:06:58:fe:54:9b:33:c8:e1:d5:cd:44:d0:69:1d:a0:
c2:4b:7a:d7:01:59:3e:29:7b:e9:dc:96:8d:c1:9d:e7:41:41:
05:8b:0a:d4:da:f4:f0:57:44:37:aa:22:fa:86:40:06:f8:91:
78:e5:52:96:16:16:5e:bc:41:c0:23:55:d4:90:8f:ce:9c:c2:
dd:a9:a1:a4:f1:04:d3:40:d2:06:84:e5:d7:45:51:40:2c:96:
d2:13:4d:14:cc:f7:43:9d:94:d3:b8:32:61:85:fe:93:37:22:
8f:19:3d:24:24:81:1a:6e:d5:ea:93:ec:67:b9:2a:62:6d:98:
43:d8:22:70:30:a3:bc:20:24:82:7d:19:83:13:6e:5b:be:2e:
08:fa:fc:72:0b:8d:8c:cc:7f:c6:7d:1a:0c:b5:68:cb:96:b4:
15:82:0d:37:c3:69:7a:b2:5a:58:0a:56:2f:6c:33:b6:98:d3:
b4:1c:ef:e0:c0:06:31:b4:66:5c:cc:b7:3d:af:45:21:77:69:
49:9e:73:6b:be:18:40:b5:b3:bb:ea:db:75:d8:e2:ed:18:6a:
d3:45:a8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:16 2026 by rpki-client