Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
File: TS-f1cihTNyfMcRYXNYNtXz_tMI.mft (raw, json)
Hash identifier: 7ckUlcZMMHrVTxhgII08iIn94ki858ngintqdUgWUW4=
Subject key identifier: DE:C8:C9:62:71:1C:84:FD:FC:75:37:5D:6B:A8:04:CE:25:8B:86:7E
Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
Certificate issuer: /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Certificate serial: 019D390A6864EF154E30CB18163F6281469F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
Manifest number: 0F53
Signing time: Sun 29 Mar 2026 10:01:16 +0000
Manifest this update: Sun 29 Mar 2026 10:01:16 +0000
Manifest next update: Mon 30 Mar 2026 10:01:16 +0000
Files and hashes: 1: 1-PcZA739O5jfsTyXtX2e6TIscS4.roa (hash: 8TW2rD12HBFWQAtxdbCJfapV59e5j+ulrB4BqMjg04I=)
2: 3bJDocgywntndtsfu_qK9cHpMt8.roa (hash: yNfaNNmmyD1SlEI3Ljm5OugJbl2m1Klcep+P5DT4G+s=)
3: O7SMXsiP2jcDC8ds3aHzihHcVV4.roa (hash: dRUITjUibnbbNquhA0z/5LyEKxqqyfiN2wuu/O3f8z4=)
4: TS-f1cihTNyfMcRYXNYNtXz_tMI.crl (hash: XhMl6MH2MsAin01Lq4jwRPBllyq4yDVEiSxMa0P9CN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:68:64:ef:15:4e:30:cb:18:16:3f:62:81:46:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Validity
Not Before: Mar 29 10:01:16 2026 GMT
Not After : Mar 30 10:01:16 2026 GMT
Subject: CN=dec8c962711c84fdfc75375d6ba804ce258b867e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7c:4c:47:34:d0:8c:c3:09:f9:7a:6c:4e:19:
09:d7:d7:aa:aa:38:8d:09:fe:46:4f:a5:81:aa:3e:
92:ee:b8:7f:31:6e:be:34:80:2a:a0:82:98:af:39:
c7:0e:7d:d8:38:19:91:7a:9e:30:d4:02:a6:49:56:
b5:51:84:6b:ff:d0:78:fc:0c:77:c4:3b:fe:1d:08:
68:06:1d:a5:78:18:97:b0:3b:1c:22:bd:06:fe:97:
1c:8c:d7:eb:b2:df:0e:b4:25:67:4b:0c:aa:11:d8:
ae:07:41:72:55:6c:b4:ac:29:8a:b6:da:1a:1a:ce:
71:ae:44:0c:ee:9d:64:28:9d:9c:de:c1:c9:7c:4c:
a3:08:ba:c8:58:27:e7:56:06:ca:f4:8a:f6:1d:62:
04:55:e3:ba:b0:1d:64:ca:1d:04:48:4f:ea:d2:52:
76:ab:e3:f1:e0:32:a5:6a:c0:ae:83:fc:c2:3d:a1:
c8:4f:d4:fe:f2:df:ea:44:cf:88:4e:5f:f2:13:16:
08:a8:d2:c2:08:29:8c:03:8d:ce:bb:0e:f5:ca:54:
a3:a2:a6:55:54:44:18:02:4f:d6:da:b3:81:b2:b6:
c2:b7:c5:e7:cc:6d:5f:d1:02:6e:1b:50:4d:12:86:
e9:e0:2c:2c:d3:0c:03:28:e1:5a:f3:e1:56:7e:bf:
03:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C8:C9:62:71:1C:84:FD:FC:75:37:5D:6B:A8:04:CE:25:8B:86:7E
X509v3 Authority Key Identifier:
keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:27:e2:cf:f5:2d:ea:52:6a:99:3c:d4:35:4a:9d:f6:3c:e2:
1b:a2:97:49:ee:e1:b3:54:05:4b:2d:89:1a:50:1c:48:2e:88:
26:6a:19:09:5d:c3:1f:1a:3b:64:6d:26:6b:ea:3d:52:03:e3:
d9:81:a3:d7:02:a3:dd:40:1c:7d:d8:44:16:8c:4d:29:c0:df:
20:49:7a:67:fe:fd:5c:ae:2c:47:b8:73:2f:20:04:10:56:39:
78:0b:b8:06:f0:34:8e:4b:64:2c:e9:c3:a1:04:cc:9a:2f:66:
1a:49:52:87:df:36:b2:58:07:6d:3c:f7:6b:1d:06:fc:5c:0d:
b7:dd:fa:51:56:4a:b1:9d:ce:1b:02:ee:47:8d:54:e5:89:12:
85:f8:57:47:22:33:ef:21:bb:6b:4d:b2:d8:49:fc:5d:cf:7b:
d2:6f:f4:a2:09:5f:fd:9b:99:7a:b4:12:95:3b:81:30:42:e9:
ce:f3:2c:84:98:98:96:3f:c7:53:8a:33:08:d1:77:4c:1e:7c:
0e:a5:34:77:d2:b9:6a:87:85:09:34:dc:7c:c5:99:23:61:79:
1f:e6:b1:1a:54:ba:fd:9f:9e:3e:93:aa:a1:6b:9b:34:ad:9f:
2b:f7:82:f2:ca:f3:fa:11:90:1f:67:c7:45:54:8b:ad:dd:21:
a4:90:de:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:13 2026 by rpki-client