Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
File: TJMhPYj6h060Rg4sXPG7GpHakHg.mft (raw, json)
Hash identifier: 8aXEwzJ5wjufiPPyb/txXI8Rg9YZuAqM3UkqlgfziRs=
Subject key identifier: 39:40:70:23:26:1D:CF:92:1D:4C:4A:35:76:7C:2D:4E:D5:2A:2F:C7
Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
Certificate issuer: /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Certificate serial: 019CE2224A990F6879BF27BC0FC6A59F18DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
Manifest number: 1863
Signing time: Thu 12 Mar 2026 13:00:23 +0000
Manifest this update: Thu 12 Mar 2026 13:00:23 +0000
Manifest next update: Fri 13 Mar 2026 13:00:23 +0000
Files and hashes: 1: 1SMtyrFP6eFZxMb7PZMbKYGMJi8.roa (hash: XxgHh0JzLHhNi3/TyAFFwO5EFUtAwR/nBi3ICijq0Hg=)
2: TJMhPYj6h060Rg4sXPG7GpHakHg.crl (hash: K3t1hhP83ZLQXcU1WpUD3YvfnGELiSS/FFsyuqNn9Fw=)
3: hcvV5X31DOlZw_gVMi_djA-Z_mg.asa (hash: WAnv7aq02dLiZbIe0+xzCaSba+xJWqlxkJbqWJcgVKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:22:4a:99:0f:68:79:bf:27:bc:0f:c6:a5:9f:18:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Validity
Not Before: Mar 12 13:00:23 2026 GMT
Not After : Mar 13 13:00:23 2026 GMT
Subject: CN=39407023261dcf921d4c4a35767c2d4ed52a2fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:ea:61:e3:39:8f:5b:6f:dd:66:86:5b:7c:
8b:83:0e:2e:5e:77:a6:9b:78:7a:fa:7b:3f:b1:9f:
66:c5:44:e2:6b:83:1f:12:f5:96:74:fc:0a:36:88:
07:10:41:3f:b4:a2:c7:a3:f5:5b:67:cf:74:b0:41:
ee:6b:d3:12:fc:02:49:ce:cf:d8:c6:86:d5:29:04:
7b:4b:5b:b8:c0:8a:55:fc:13:6b:37:8b:7c:4d:a6:
35:5c:fa:b5:06:58:51:f3:e7:fa:b6:fd:93:92:f7:
32:81:a5:69:0a:84:6a:38:f4:88:10:21:56:2e:b3:
41:46:83:ab:35:e2:68:a0:25:03:f5:19:28:c8:c7:
06:f1:17:74:71:95:ec:f0:8e:1a:8c:8c:cd:70:ef:
36:95:ab:aa:b4:05:2a:72:4b:02:b2:ab:42:03:f4:
d0:61:c7:c8:a5:11:f4:c4:ca:a5:ee:fa:81:82:db:
ff:a7:0e:e5:40:94:2a:4c:d5:ef:55:fe:0e:7e:a7:
98:34:3c:32:ce:e2:31:81:3e:73:b4:2a:b7:b8:cb:
7f:e7:d5:4d:17:c9:bb:c3:94:21:3a:61:c0:a0:37:
48:00:22:cc:d7:f0:44:bf:ae:e2:31:3e:81:26:cb:
8f:0b:fd:a1:43:2b:1c:c1:f4:b3:5a:16:48:5a:60:
a8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:40:70:23:26:1D:CF:92:1D:4C:4A:35:76:7C:2D:4E:D5:2A:2F:C7
X509v3 Authority Key Identifier:
keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:6b:a9:b7:03:3c:0b:c9:9b:38:bd:92:4b:e5:a5:13:e8:3c:
54:7c:e9:f1:4d:0e:ad:26:35:f7:58:c9:63:5d:5e:b2:08:d9:
9d:03:eb:28:88:45:a9:3a:02:1b:d6:9f:d9:43:8c:9c:69:46:
a1:5f:0b:d9:db:49:6f:55:94:f2:d0:74:2a:8c:36:3f:94:31:
ec:6d:a3:b7:ad:72:01:c1:88:0d:58:b8:02:70:98:a2:10:a0:
d1:d8:d5:c9:17:28:2b:6b:4e:cf:93:0f:3a:99:8b:5b:03:83:
67:cf:34:06:9f:4a:f7:b7:d7:89:d1:2c:91:82:2b:91:24:2e:
22:e0:21:b1:0f:a8:a8:61:3b:b9:f7:1c:6e:f7:27:01:83:1f:
32:22:b8:f0:cc:c4:7a:ef:fb:4b:b7:7a:5f:56:7d:0e:fc:0e:
51:c1:77:21:ed:e7:da:8f:38:0c:be:c4:8b:75:f5:4b:b4:ba:
7c:0e:57:de:2d:ac:54:aa:26:8b:61:3c:60:db:6a:ff:6c:db:
da:0c:43:dd:35:2b:fe:ae:14:11:e5:a4:37:6d:cf:1f:f1:ed:
ec:21:63:1d:74:be:99:77:5f:ef:3f:8a:fb:a4:2c:db:3c:d4:
32:8b:76:ac:6a:78:bc:de:7a:7c:c2:17:89:cc:2c:ea:fd:59:
2d:af:0f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 23:32:20 2026 by rpki-client