Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
File: TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft (raw, json)
Hash identifier: q98NCUs8QCnOAckteenkKsK9i6gMvlhmpSsQ2gxwrsg=
Subject key identifier: EB:CD:DD:06:1E:64:09:AC:F9:F1:1A:E0:F0:98:8E:A6:A4:C9:F9:87
Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
Certificate issuer: /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Certificate serial: 019D37C0E86095D1DCE0CF5550E860797264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
Manifest number: 094F
Signing time: Sun 29 Mar 2026 04:01:22 +0000
Manifest this update: Sun 29 Mar 2026 04:01:22 +0000
Manifest next update: Mon 30 Mar 2026 04:01:22 +0000
Files and hashes: 1: 5cyx45wBsDWUW4HLBveZ_qT2fcI.roa (hash: 8zrBvmy9ZVUIH/JDFlTLI0bEMjkf56i51k/bt1Lb1pQ=)
2: BGnZrxh766n-RwiVyZM8GwNTqh0.roa (hash: /zWDyCDhQQVXOZUHRipaDLFDgbYWX/UYPO8XJtBp0uE=)
3: JI6F6sKwmFDB-S9XODKhAA660AM.roa (hash: /b/qNAizl4V5sFYHPlaPbBReehGSPPstai3HlyE9iGo=)
4: OB0voxOvgqvD6w4CwDmCo19dJlY.roa (hash: 9mhFY39YjN1Cc/funyTGbxD0WJvEdMakoR8u2Fsujz0=)
5: TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl (hash: gY4s7zdl3GRPlQIFjXXg56yl8vQFL9ugLBHLEbMSgrE=)
6: X14l7kvlYYBF3EHNWSg-svsFuOQ.roa (hash: Y9BNprLjsgal1cKXYYlZbO0fiea/j/rMdHY3dC/wqFY=)
7: sGobVjVtmpTG3eIQoRngSBlxcMU.roa (hash: UMoTBGpuj0hrOh47PvNUlOhwfEbv/t4MSoG5XZ2RuSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:e8:60:95:d1:dc:e0:cf:55:50:e8:60:79:72:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Validity
Not Before: Mar 29 04:01:22 2026 GMT
Not After : Mar 30 04:01:22 2026 GMT
Subject: CN=ebcddd061e6409acf9f11ae0f0988ea6a4c9f987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ce:f4:7a:6d:34:04:bc:07:10:87:85:14:44:
12:cf:8e:f3:9a:ad:3c:cb:c3:db:28:9b:3a:35:52:
98:71:66:97:08:0a:4d:b7:d3:e4:8e:39:1e:c2:97:
36:fc:44:6d:a0:1d:c0:ca:42:f1:d6:19:3d:c5:ba:
ab:0e:b5:2b:fb:88:64:aa:a3:b0:7f:11:80:cc:50:
3c:86:58:7c:b2:4a:e2:28:af:86:13:36:08:96:78:
3b:fe:c9:7d:78:8e:42:a8:49:a2:65:14:01:e5:32:
60:a6:2b:18:ab:75:22:9b:4d:05:ee:d4:9b:67:01:
3c:20:c9:51:be:b9:b4:52:b5:af:c0:ac:ac:e7:69:
30:c1:99:e3:55:51:19:15:95:06:56:73:fe:fc:86:
09:5a:18:28:55:42:90:80:68:70:c6:a5:f1:83:d0:
1d:b4:9c:dd:b0:37:3c:45:28:fa:3c:27:0d:73:92:
40:fb:86:7e:22:a1:18:3e:cc:9e:83:6f:cb:0c:57:
49:87:66:f9:2e:00:08:0a:6e:e8:4e:cc:84:3e:a6:
ef:f4:61:7a:75:04:6a:16:04:60:89:95:79:5f:b2:
8a:f8:4d:42:a4:8f:f2:3e:ee:af:b4:ed:f7:cc:98:
ed:3b:86:03:c1:c2:43:65:01:69:40:44:bf:91:e5:
6d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CD:DD:06:1E:64:09:AC:F9:F1:1A:E0:F0:98:8E:A6:A4:C9:F9:87
X509v3 Authority Key Identifier:
keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2c:d5:48:b4:d5:41:45:72:96:1d:d2:7b:3b:a5:ba:3b:ea:
27:2f:4e:98:e3:05:69:16:7e:de:0c:7c:0b:52:1f:03:94:49:
5a:06:51:8a:2f:2a:e7:b7:86:81:30:53:18:5b:d3:ef:34:6e:
de:94:85:a8:79:33:5e:76:91:45:5b:41:51:fe:07:4b:c8:2e:
b6:bb:a4:94:47:66:97:e1:ce:00:ad:8d:63:86:c1:4e:b4:ea:
e8:9e:99:bb:47:2f:ad:eb:dd:7a:3d:bc:53:59:01:12:d6:cb:
4a:d3:0b:8f:eb:59:e1:ad:20:d4:a1:ad:f6:cf:8f:d1:a5:27:
ea:ac:5b:56:e1:c3:ef:e4:f9:fe:39:6a:db:fc:ff:82:38:fc:
5f:03:a4:21:09:75:02:96:cb:17:db:18:7d:37:dc:f0:8e:60:
82:e5:b7:4f:33:6d:98:ca:33:fd:c3:58:26:a2:e8:2a:bc:38:
3e:aa:5a:8f:5d:fd:eb:12:74:c8:15:c1:33:5a:34:2b:6c:c4:
5e:bd:2d:65:40:73:e2:f5:f4:67:43:ce:f6:32:28:db:68:57:
52:e9:92:df:f8:c9:71:c6:98:98:aa:09:34:16:c3:d3:7f:d8:
3e:88:42:2b:71:da:19:a3:55:ff:73:c3:13:05:cd:2a:be:b9:
00:9d:58:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:21 2026 by rpki-client