Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
File: TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft (raw, json)
Hash identifier: shgBeQujF6X9mGp0aCVHZRW/Zzfi5SxZJCnepWvgcuI=
Subject key identifier: A8:F7:DD:EB:FC:B3:4D:AD:D8:41:48:12:C2:E3:34:A6:30:B0:B6:E4
Authority key identifier: 4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F
Certificate issuer: /CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
Certificate serial: 019D38D3D8EFDD7D8A04A46EA1D0532476BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
Manifest number: 12AA
Signing time: Sun 29 Mar 2026 09:01:40 +0000
Manifest this update: Sun 29 Mar 2026 09:01:40 +0000
Manifest next update: Mon 30 Mar 2026 09:01:40 +0000
Files and hashes: 1: TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl (hash: vqWb3ybNGwXrWUDSri8c6ObUmehwPixgXwblftqaEkE=)
2: qdG_Gv-Z2yCeI5FZ0wm9b0l6kSw.roa (hash: qEsauC0Q7PPkI4NMJ7sTsrOSfvgrVIwh8wnzn4v958c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:d8:ef:dd:7d:8a:04:a4:6e:a1:d0:53:24:76:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
Validity
Not Before: Mar 29 09:01:40 2026 GMT
Not After : Mar 30 09:01:40 2026 GMT
Subject: CN=a8f7ddebfcb34dadd8414812c2e334a630b0b6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8d:6c:28:8a:de:0e:0c:10:ea:27:0e:fa:f4:
15:5b:ff:e8:bc:11:d2:45:e2:ed:bf:ee:5a:28:db:
bf:d1:8d:aa:36:f3:af:4b:3d:46:65:a6:83:ce:f9:
3d:76:f2:25:aa:0e:72:a3:11:4e:d2:89:0b:50:b2:
a8:59:d4:2f:07:c3:1b:fb:36:14:79:73:a4:a9:18:
78:39:6c:07:b1:63:96:65:25:3d:cd:10:d5:02:53:
23:f9:06:41:83:96:8e:e7:84:81:68:4b:c5:7e:f8:
05:df:e4:5c:be:e4:df:54:78:b4:5b:67:e6:9b:92:
27:c5:7d:d6:53:32:f3:1f:8c:65:26:87:5d:90:0a:
f1:08:e6:a0:5a:09:04:18:4e:c1:87:8a:12:31:26:
3f:77:41:00:96:62:d7:91:e4:a7:27:df:45:3e:0e:
e0:d9:1e:0c:25:35:21:e6:f2:86:53:6c:eb:6e:9c:
1e:10:49:12:d5:d4:ea:19:21:cc:4a:71:13:70:8d:
12:07:ff:05:3a:fe:ec:f4:9e:41:e6:68:e3:c6:f3:
2c:68:08:d0:11:96:0e:74:71:55:4e:8b:08:08:60:
b9:78:dd:6f:94:c3:25:41:b0:f1:ed:c5:7e:83:58:
8c:4e:56:ad:20:ba:09:df:26:7c:9f:3c:6d:72:a4:
e3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F7:DD:EB:FC:B3:4D:AD:D8:41:48:12:C2:E3:34:A6:30:B0:B6:E4
X509v3 Authority Key Identifier:
keyid:4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:db:4a:13:d6:81:65:1b:ce:78:a3:a0:9d:42:d8:b5:ef:88:
66:06:50:ef:01:5c:c0:00:22:52:98:23:1b:56:b9:36:ef:ef:
ca:fd:f2:73:e8:e3:71:49:53:f8:0a:d8:21:a7:39:7a:22:82:
2e:86:5f:69:9d:b2:30:75:29:dc:c5:5d:99:9d:ba:44:a5:b1:
e9:a6:a3:9e:8c:38:83:ec:7f:de:4d:4d:50:3d:23:9d:b8:c6:
52:f1:9a:78:6e:23:a3:68:66:17:e6:2e:86:49:79:4c:7c:09:
a8:a4:8e:81:1c:8b:da:ec:09:fa:aa:66:e6:aa:86:8a:54:e9:
d9:93:26:ee:ad:eb:57:5a:fe:75:dc:f7:13:13:a3:f9:11:02:
5f:fe:66:9a:c0:13:df:d9:24:bc:ca:bd:55:97:58:3a:16:cc:
1c:5f:62:5f:b5:01:a5:9f:98:05:53:1d:fc:bc:04:64:4d:c2:
0c:ae:3a:be:e2:cb:85:a4:25:5a:7b:45:bd:16:57:38:52:1b:
4b:fd:d8:2c:4a:db:dd:30:72:68:0c:92:e9:5c:a8:a5:bb:7e:
00:30:35:7b:a3:aa:44:23:9a:dc:7e:48:e3:67:22:a9:1e:57:
9a:dd:93:80:51:fb:1a:8b:f2:37:01:da:48:24:34:8d:a2:21:
b3:e5:c0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:49 2026 by rpki-client