Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
File: Tg854squjizxS8xBsj88huGnIPg.mft (raw, json)
Hash identifier: KtRyLlQTP7aUDp2jCueMg9Mjw5INRy46XiPtR/hmwMg=
Subject key identifier: 24:83:44:0E:5C:42:F9:48:32:05:D8:A4:DC:09:6C:87:F4:61:CF:F8
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 019D38D30AFAA45C3110860521D8382DA0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 09:00:48 +0000
Manifest this update: Sun 29 Mar 2026 09:00:48 +0000
Manifest next update: Mon 30 Mar 2026 09:00:48 +0000
Files and hashes: 1: Q_cKojzZsCR7sHqcACX5_Xsszdg.roa (hash: 13DJN0AYMyq7FKRePbvdklWh/SNv0jTV2Z45dv8uucM=)
2: RBXH0ektt1CQc3W3hp-LoPyoFDI.roa (hash: n7TnoGzFQ9ajRDTZ9C84X5KWHPVtB0cd7T1ju2YPzsI=)
3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: B/E9IjjRBltSS0aZBc3AOc9QVKOXz+KBon+8O3MJGDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:0a:fa:a4:5c:31:10:86:05:21:d8:38:2d:a0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: Mar 29 09:00:48 2026 GMT
Not After : Mar 30 09:00:48 2026 GMT
Subject: CN=2483440e5c42f9483205d8a4dc096c87f461cff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:81:fe:71:70:98:78:a2:54:ba:9d:ee:1a:4f:
c3:37:1b:e5:c0:fd:32:f0:77:d4:9e:12:54:59:18:
a8:89:f0:1a:73:75:95:20:17:2f:f9:8e:52:1b:e3:
69:ea:bc:62:8d:0d:94:cf:53:2f:5b:73:84:dd:ae:
5e:f8:f2:33:be:bc:e5:43:46:a2:eb:57:e5:9f:3c:
1d:f1:af:e5:b8:36:5d:7d:81:0c:a6:0f:0f:ef:f9:
8b:b3:3e:bf:b7:3c:65:3c:de:62:37:ad:2f:b4:c1:
3c:94:6a:04:ac:e4:5f:bb:f1:6d:79:e8:dd:32:e6:
3d:2c:3a:f9:3b:38:1e:71:a1:e3:a4:54:a0:76:29:
6f:91:4c:04:7d:4f:6f:d9:27:bb:59:e6:66:3f:e0:
45:53:77:3e:9a:75:c2:14:6f:9f:4c:2c:b2:db:ee:
9d:77:b1:f6:93:f7:c8:1e:90:79:65:15:db:d6:8e:
9e:8a:4e:15:06:a8:bb:2e:22:ae:17:d4:d7:94:1b:
86:2b:05:a5:16:1f:5f:43:dd:78:27:c4:f4:6a:45:
b9:d1:a3:4e:ce:8d:dd:60:2d:a1:37:d5:52:4b:75:
89:55:de:f6:05:27:9a:55:b4:fd:20:56:4c:d1:d0:
40:59:1e:a2:41:13:78:72:64:f6:a0:3f:6b:40:d9:
48:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:83:44:0E:5C:42:F9:48:32:05:D8:A4:DC:09:6C:87:F4:61:CF:F8
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e4:a1:73:b1:a7:fa:e2:54:6f:7c:a5:a6:ea:fe:da:76:ed:
53:55:f6:84:8b:9c:5d:58:a4:46:fd:32:2e:5f:e8:c4:41:6d:
90:0a:58:b0:41:98:e2:72:ea:0a:e6:a0:0b:68:ff:d2:2f:78:
11:cf:3e:26:ad:3b:ed:c9:23:9a:88:2c:3a:20:63:5b:0b:77:
26:47:47:ee:83:62:a8:58:bc:c4:16:1a:09:d3:d1:99:c0:10:
a5:05:62:5b:66:f0:67:c5:ec:70:60:26:88:63:bf:bb:25:69:
0c:f7:e8:91:27:18:20:41:38:19:a1:a8:55:72:5e:02:81:f7:
72:96:e5:ef:ae:13:0a:bc:af:e4:65:69:03:aa:b7:76:61:1f:
3f:e2:5f:fa:7e:b1:8c:0a:fa:d9:4d:4f:13:e9:68:de:10:a5:
45:7a:eb:ac:21:27:17:d8:63:36:e5:f2:69:3e:7d:fd:77:78:
1e:90:d7:57:1a:e1:55:0f:53:d6:94:18:9b:49:9c:d8:c7:d0:
da:17:91:04:d6:fa:e0:8f:71:c2:b4:e7:b6:45:62:50:62:37:
82:d6:2f:e0:14:9b:81:f7:d1:98:10:7e:cb:05:f4:cc:47:06:
26:0c:a3:a3:5f:28:03:99:97:9a:78:11:71:a5:b3:14:87:87:
e5:3f:e5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:43 2026 by rpki-client