Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
File: TZRvTfIjdJGmjfpAe-QfroS72mY.mft (raw, json)
Hash identifier: gqxafWxyXuUeIK2poBD3Wkcjk7HwbxfSRKx1pwtffrs=
Subject key identifier: 81:A7:9E:84:EE:AF:9A:B5:AA:C5:63:A9:93:7C:85:5E:B5:BA:8D:7B
Authority key identifier: 4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
Certificate issuer: /CN=4d946f4df2237491a68dfa407be41fae84bbda66
Certificate serial: 019D3789D57810C18B6A9D6E77631F43E1AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
Manifest number: 11F1
Signing time: Sun 29 Mar 2026 03:01:13 +0000
Manifest this update: Sun 29 Mar 2026 03:01:13 +0000
Manifest next update: Mon 30 Mar 2026 03:01:13 +0000
Files and hashes: 1: TZRvTfIjdJGmjfpAe-QfroS72mY.crl (hash: xb6MTI81OCjCH5oaL/7K11ftdhXE/Yrd2S2MkdauDU8=)
2: ytSYW9uePGMbZ79Lq_rgcm-M5Zw.roa (hash: Y13kOAlNy0Wbk1bHbXfUJdX2fwgc6gfKxcan1EEpTzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:d5:78:10:c1:8b:6a:9d:6e:77:63:1f:43:e1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d946f4df2237491a68dfa407be41fae84bbda66
Validity
Not Before: Mar 29 03:01:13 2026 GMT
Not After : Mar 30 03:01:13 2026 GMT
Subject: CN=81a79e84eeaf9ab5aac563a9937c855eb5ba8d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7e:82:ca:79:4a:78:70:b0:0a:6c:c9:66:1b:
38:dc:94:1c:53:07:e3:3d:9e:45:b8:2d:2f:ed:0e:
b2:2f:71:ee:f1:52:7b:dc:db:db:33:f3:8b:af:76:
cb:21:ed:9d:50:1b:3b:bf:7f:fd:ee:c7:15:77:a2:
b7:28:22:ed:b8:eb:28:1b:b0:bb:15:e8:2c:45:95:
d7:20:93:93:0e:1a:c2:74:e1:e4:10:2f:a2:29:9e:
f7:42:0e:bf:e8:f4:e5:e9:db:58:fc:0d:f1:22:61:
7b:01:89:9f:bc:5f:87:af:8a:a9:fc:5f:82:df:d8:
92:c8:82:69:dd:2d:83:77:b6:d0:0d:fa:ba:5c:1e:
37:23:24:b7:d4:f6:42:2c:3d:db:4c:61:6b:0f:44:
32:10:af:f6:6c:23:8c:3b:b3:fd:04:01:82:5f:c7:
cb:dc:75:1f:b0:60:28:f1:c6:18:4e:10:3a:1e:32:
76:af:14:be:02:ca:6b:45:17:0d:33:62:51:63:fe:
14:56:52:55:6a:0c:2a:da:ca:85:60:f4:93:70:62:
03:2c:29:55:ea:17:54:46:12:36:92:96:08:c1:31:
b9:06:f3:bc:fb:7c:e7:ef:b2:6e:40:6c:ad:66:e9:
ec:17:61:b9:65:f8:5b:7a:3e:f0:ae:e9:bb:54:b4:
7f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A7:9E:84:EE:AF:9A:B5:AA:C5:63:A9:93:7C:85:5E:B5:BA:8D:7B
X509v3 Authority Key Identifier:
keyid:4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b5:7c:c7:35:4a:bb:c4:6e:bb:25:11:49:cc:c2:31:af:09:
3c:37:66:01:0e:17:22:61:c9:f5:db:db:f8:0f:e1:9b:fc:39:
27:75:ef:8f:1e:f9:85:41:07:93:ce:a2:bd:37:77:5a:22:e6:
df:ae:f7:66:eb:7f:4d:1e:8d:59:dd:d7:7e:2d:87:fa:82:d8:
fe:00:95:46:a5:88:78:77:18:d2:af:a0:52:4c:5f:b9:b2:7b:
54:94:48:ce:b4:7d:0a:59:6c:96:2d:c7:f6:8d:4e:e6:db:18:
61:7d:95:d5:4e:05:7e:ef:3d:6a:12:65:7b:ed:71:6f:56:67:
de:ae:ca:82:f6:c6:9a:6b:37:65:15:5c:96:ed:d4:e2:f0:ea:
c7:ec:4d:9b:c7:73:06:39:11:00:f4:b5:77:99:60:00:02:ad:
a3:be:78:24:01:f2:07:3f:4d:ac:45:39:21:2f:80:fe:d7:9e:
96:1a:10:b6:49:af:c7:9d:1f:1a:2b:a7:5c:07:f0:e8:37:29:
56:79:8b:be:d0:56:64:4c:ee:6b:ce:1b:46:ec:91:aa:8e:be:
12:8f:b9:23:1d:c1:cc:11:01:4f:d7:e4:ed:08:06:3f:88:b5:
af:33:24:57:e6:7d:ea:9f:ad:6f:47:c0:4e:8c:a8:eb:b6:b2:
49:8a:63:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:26 2026 by rpki-client