Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
File: TjwBugxcvyCuPpPKPTeeYt9clZo.mft (raw, json)
Hash identifier: k6MtQZbXKLsKu00YnEp5Ir6MCG4hez3J613byoVEIEk=
Subject key identifier: 2C:19:E7:07:17:F3:1D:62:D3:29:0B:B2:B0:E6:C9:85:7A:48:25:F0
Authority key identifier: 4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
Certificate issuer: /CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Certificate serial: 019D371BA1DB948122E603601EB1C85ACE5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 01:00:50 +0000
Manifest this update: Sun 29 Mar 2026 01:00:50 +0000
Manifest next update: Mon 30 Mar 2026 01:00:50 +0000
Files and hashes: 1: FjQD5obfjitF4TyVNiOnrUuu6ko.roa (hash: 4qN5nXtzPSFJUF4nfX9RAWVMRw9xA5tlQvP0vuood6U=)
2: TjwBugxcvyCuPpPKPTeeYt9clZo.crl (hash: v2sPJialAZol3RwdosEEZaS4j9XdnYzpK3yQRJ7Mi7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:a1:db:94:81:22:e6:03:60:1e:b1:c8:5a:ce:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Validity
Not Before: Mar 29 01:00:50 2026 GMT
Not After : Mar 30 01:00:50 2026 GMT
Subject: CN=2c19e70717f31d62d3290bb2b0e6c9857a4825f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:e9:a3:f3:ce:82:49:f2:97:9f:20:cb:c0:
03:a2:6b:b1:66:71:4e:74:0e:76:46:f1:0d:5d:41:
b9:d8:45:0d:66:60:84:14:30:ba:87:97:57:64:db:
58:f1:81:cf:9f:2e:b5:f7:ed:7a:89:78:e3:b6:87:
49:a2:c1:0f:64:64:24:8c:50:7b:13:23:ce:94:92:
d9:ea:8e:0f:2d:70:3e:6e:e1:05:d6:72:81:46:24:
66:0b:08:2e:ec:3d:f2:34:5e:a5:2c:28:4a:98:52:
70:91:ef:3f:fc:dc:37:62:7f:34:12:b1:22:20:22:
df:5a:38:04:9c:f3:bc:99:32:bf:0b:c1:b9:da:94:
85:23:a7:2c:69:cb:fe:79:b1:5b:5a:7d:7b:f1:37:
82:46:65:81:ba:e1:ce:b0:ae:58:7f:4e:7a:8d:d4:
0e:20:f0:83:28:2a:1a:98:7d:fc:18:4e:0d:a4:1d:
ec:a9:a5:ec:82:03:58:1d:67:78:ba:8b:1f:db:4b:
8a:db:e9:e1:f2:1a:87:91:45:7d:cb:f7:d5:2a:83:
ec:45:21:c2:e6:00:15:50:06:f1:e0:0d:4e:96:fb:
c6:bf:7c:48:6f:80:77:f2:bd:67:ed:f0:46:81:6e:
52:77:16:6b:23:3b:3d:1c:2b:7f:fd:b0:40:ec:a7:
13:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:19:E7:07:17:F3:1D:62:D3:29:0B:B2:B0:E6:C9:85:7A:48:25:F0
X509v3 Authority Key Identifier:
keyid:4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:88:ad:cd:42:76:cf:94:d4:6f:88:d8:0b:70:d3:7c:e4:54:
ef:c4:0b:0f:87:eb:53:fc:75:61:b5:3a:ad:22:38:07:7d:e8:
e6:e5:9f:5f:cb:1a:e6:51:e0:67:c6:51:7a:bc:8e:33:d4:b5:
4e:8f:39:25:a1:da:6c:be:b6:82:77:74:45:7a:da:30:69:3b:
44:9e:76:5d:97:eb:b4:59:bc:16:8c:cc:56:2e:b7:f3:f0:b2:
a5:9e:7b:d5:91:2c:8e:1d:84:77:f9:e3:c8:72:76:11:12:07:
f0:8c:7e:b3:7f:e8:0c:b6:b1:03:19:4a:4c:7d:09:a1:ea:16:
d3:27:73:67:32:61:bd:93:2d:eb:7e:0d:98:06:de:5f:73:fa:
50:40:aa:d9:8e:0f:1d:f8:4a:31:57:44:58:76:36:48:a8:ed:
1d:7e:6b:5c:b5:8b:eb:0a:f9:26:fa:7f:20:3f:97:37:07:de:
1c:82:23:27:b3:17:cd:5c:15:e3:f0:8f:94:fe:6b:e8:0c:b8:
cb:82:44:2b:1d:c7:e7:66:39:b4:c7:a4:48:a2:af:ba:d8:24:
de:c3:2c:4c:21:b7:46:b4:f8:5e:6f:17:b2:ac:dd:fe:43:9a:
bc:ae:29:52:bb:49:1b:15:61:7e:a3:ec:07:34:15:3a:d9:fd:
08:f0:69:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:13 2026 by rpki-client