Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft
File: TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft (raw, json)
Hash identifier: 8+4dl+rui4aa2hGBwDjbgMiYvB51KE7+RdqsO+nnr18=
Subject key identifier: 80:80:DD:60:35:4B:22:E0:88:09:EF:AF:48:F6:3F:BF:81:1A:DF:54
Authority key identifier: 4C:EA:66:AD:DA:9D:F9:62:5A:3D:78:D6:28:FB:05:E2:48:4D:D8:78
Certificate issuer: /CN=4cea66adda9df9625a3d78d628fb05e2484dd878
Certificate serial: 019D382E2E63FC66229DC1B99491AF3E41DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOpmrdqd-WJaPXjWKPsF4khN2Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft
Manifest number: 0538
Signing time: Sun 29 Mar 2026 06:00:43 +0000
Manifest this update: Sun 29 Mar 2026 06:00:43 +0000
Manifest next update: Mon 30 Mar 2026 06:00:43 +0000
Files and hashes: 1: GHKMa_KSipTSmf3pI2wnkS6Tr20.roa (hash: OnS7nAX4PtptEhEkwUT11ufA7pPlMC3cHL0kMdeoeW8=)
2: TOpmrdqd-WJaPXjWKPsF4khN2Hg.crl (hash: dz47TC2X2d+/Jm7Lzg78bRTMazRFLQEUss7SXv883YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOpmrdqd-WJaPXjWKPsF4khN2Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:2e:63:fc:66:22:9d:c1:b9:94:91:af:3e:41:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cea66adda9df9625a3d78d628fb05e2484dd878
Validity
Not Before: Mar 29 06:00:43 2026 GMT
Not After : Mar 30 06:00:43 2026 GMT
Subject: CN=8080dd60354b22e08809efaf48f63fbf811adf54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:e0:d3:8a:e3:04:57:7e:ed:13:86:88:0a:
c9:12:5b:96:8e:4e:84:6f:86:f8:fc:3f:c0:22:3c:
6a:4f:47:a3:6f:58:a6:81:5f:12:0a:ca:76:aa:8f:
2e:1e:1b:36:dc:8d:fd:fc:42:7b:7a:2a:79:3e:b1:
5d:9b:78:f2:92:da:81:65:4a:4f:03:9b:06:b7:49:
87:d0:8c:5e:1e:46:c1:e7:9b:23:02:84:e1:eb:76:
76:6c:e7:09:f2:9b:87:da:42:fd:68:d2:40:f1:02:
2f:00:ff:c6:af:12:64:c2:64:06:2e:11:ff:04:ca:
2a:f6:d2:80:a8:06:fd:12:48:c4:5b:34:e9:24:ca:
d4:1b:8e:53:24:f8:07:29:8e:1d:a0:02:e0:2b:ff:
e6:b3:06:13:9a:15:84:0c:8f:6a:58:06:a8:ce:81:
7b:9b:40:46:4d:ab:be:17:10:03:28:af:1c:21:a0:
21:4c:19:e5:0b:ab:3b:4f:02:00:04:5e:c9:ba:e8:
af:a2:d6:7b:97:ba:ed:df:cb:70:03:d1:f3:4a:97:
2a:3c:2b:7e:5c:e9:6a:8b:af:21:08:93:d1:cd:31:
e0:f3:d2:a4:f1:f8:27:b7:c5:94:cf:50:e0:1d:9d:
59:dc:77:bc:01:ce:37:d4:59:64:2b:1b:7c:47:b2:
49:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:80:DD:60:35:4B:22:E0:88:09:EF:AF:48:F6:3F:BF:81:1A:DF:54
X509v3 Authority Key Identifier:
keyid:4C:EA:66:AD:DA:9D:F9:62:5A:3D:78:D6:28:FB:05:E2:48:4D:D8:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOpmrdqd-WJaPXjWKPsF4khN2Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:61:58:08:40:d1:36:05:f1:a8:2e:84:ce:47:8c:0c:ca:ad:
20:e3:88:7c:40:1f:b2:41:30:08:c2:c8:b9:b3:27:8e:b3:12:
63:ae:bd:c7:ac:32:e6:f4:0f:fc:bd:0a:88:79:95:1b:bc:eb:
a1:11:04:56:6b:e6:7f:ce:a4:95:e1:8f:2b:7c:50:25:fb:75:
14:ea:71:de:2a:b7:fa:14:58:1d:d8:61:3c:5b:de:5c:85:49:
a6:2b:4e:fb:e9:bf:a3:c4:88:1a:c0:42:a4:a5:9b:ce:f4:aa:
91:e5:f3:59:69:a4:cd:a6:e9:c2:68:ce:32:22:b3:b8:ee:c0:
17:2a:3a:b7:b4:ee:57:df:14:d9:4a:2d:57:5c:bd:57:23:16:
0b:9a:74:14:54:45:b6:f1:1a:e7:10:33:55:24:59:00:c6:1f:
9c:26:ab:9e:50:aa:0f:ec:a9:4e:86:da:cb:29:14:d0:75:c3:
10:67:b2:58:e5:10:21:d4:eb:fd:c8:67:03:b1:a7:a5:7c:d2:
59:e4:c0:a3:cf:0a:2f:7f:3a:ae:67:ca:75:b4:40:bf:a5:a4:
93:d5:06:8d:db:e6:ed:b7:93:92:db:2c:f8:a6:a8:10:a2:9b:
40:86:dd:08:c2:f2:ea:52:71:e5:fa:6a:a4:f1:2e:96:e5:59:
56:db:03:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:11 2026 by rpki-client