Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
File: TJMCnFsmOc0pufndUpTMlO9S1q8.mft (raw, json)
Hash identifier: LLHkmJwujvO7v7mc+btp3FRTK37UT/KKjuf1eWNJduo=
Subject key identifier: C0:1F:8A:D0:A8:A1:2F:F8:42:05:60:E1:2D:23:EF:57:B2:6F:FC:26
Authority key identifier: 4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
Certificate issuer: /CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Certificate serial: 019D3A1C9526C60B14CA25C39C4C8CD90B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
Manifest number: 0EC2
Signing time: Sun 29 Mar 2026 15:00:44 +0000
Manifest this update: Sun 29 Mar 2026 15:00:44 +0000
Manifest next update: Mon 30 Mar 2026 15:00:44 +0000
Files and hashes: 1: MmCHZ1tigLx6qv-0vdY9p2DTybw.asa (hash: q4g5QLnj5C7tBM9YSoS7cbGeaJrSGDWbXD0wfTvKfKk=)
2: TJMCnFsmOc0pufndUpTMlO9S1q8.crl (hash: 38Q7IZSSIeSvv7RLFQdhSiHq3ja073ct9ln5/AycFFk=)
3: o-GuySAZav0PksHcDzno-EypQJ0.roa (hash: /pzSPA6PGMWrOD+vCeL5sGDbZ/TBSHFZKj+LgOJi0Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:95:26:c6:0b:14:ca:25:c3:9c:4c:8c:d9:0b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Validity
Not Before: Mar 29 15:00:44 2026 GMT
Not After : Mar 30 15:00:44 2026 GMT
Subject: CN=c01f8ad0a8a12ff8420560e12d23ef57b26ffc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d3:57:ea:d4:2b:3f:8e:a4:f6:da:81:2c:22:
6e:d4:38:23:57:18:95:95:73:33:8b:5e:fe:f9:66:
d8:e8:8d:cc:76:29:8e:a1:f5:f8:2b:db:d3:56:0c:
81:8d:72:4b:32:54:ee:ad:62:5c:ca:6e:ff:cf:1a:
ce:22:26:75:6b:b1:f4:0f:db:15:0c:9c:83:db:1d:
70:57:82:93:1a:ce:cc:1a:85:df:df:40:01:1c:d9:
ab:6d:8e:e5:1c:70:96:dd:83:de:6e:5c:9e:34:02:
47:b2:25:1f:68:61:d7:26:71:e6:06:c7:b2:c5:b5:
7d:2c:e8:ec:02:8a:f0:ba:c9:a8:4a:11:07:72:0e:
5d:ee:4c:ae:c6:ef:5a:0a:a7:40:a3:6c:ec:0e:c4:
c9:df:be:e5:4b:7a:f5:de:48:f5:0d:6c:7b:6c:90:
da:e6:c7:87:16:77:e8:ed:b6:5b:79:89:61:90:92:
27:20:04:05:70:a6:56:33:de:fe:0c:bb:08:b1:c6:
4c:48:8e:d8:4b:4e:3e:04:d1:e4:4e:37:d7:d2:f9:
d6:5e:5f:54:ab:dc:05:6f:d0:29:62:15:06:74:ad:
62:fb:ee:47:23:db:af:f8:23:31:cc:fe:a1:c8:89:
5a:17:72:52:55:60:09:18:27:93:a3:b2:ea:ca:ef:
2a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1F:8A:D0:A8:A1:2F:F8:42:05:60:E1:2D:23:EF:57:B2:6F:FC:26
X509v3 Authority Key Identifier:
keyid:4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:77:26:35:eb:6b:f1:27:fd:2e:49:cf:cc:f3:ac:1f:fb:92:
32:51:41:67:98:06:e4:e2:40:c1:6b:d0:1c:6e:db:2b:89:81:
5f:66:57:19:61:9e:57:d2:14:31:15:09:c0:0c:55:07:19:84:
9f:a8:92:71:a6:79:36:3d:05:f4:66:b4:4f:88:58:9a:d8:72:
1f:97:a1:3d:d0:01:86:ed:34:89:bf:9d:1c:99:a1:9d:fb:f9:
ec:93:d5:22:3b:2c:1b:5a:3f:2a:87:52:49:5f:35:48:2d:b7:
ae:2d:51:7d:ca:4c:af:27:80:70:c2:c6:b4:4c:9e:39:a8:ae:
9b:d3:0a:b7:cd:1b:83:f9:3d:eb:b3:77:61:2d:89:0d:d0:f4:
d8:7e:e0:21:6a:cc:78:1f:7e:ef:e8:47:b5:ad:43:5d:db:e3:
bd:4d:23:11:bb:b4:a9:b6:97:6b:1a:9b:5e:56:5c:d1:16:f3:
f7:e3:8c:f2:10:6b:0f:fd:a0:02:8d:e2:0c:4c:a8:d3:13:30:
fc:53:4b:75:27:29:3a:aa:1e:ad:66:10:3e:0b:e7:fd:85:39:
f7:6f:b4:36:1e:89:34:61:52:c1:3e:70:9d:48:53:a8:4d:ee:
7f:08:1c:0e:68:5d:e5:83:43:2f:e6:b1:13:17:5a:7a:46:48:
21:94:3c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:30 2026 by rpki-client