Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
File: TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft (raw, json)
Hash identifier: njofzX/BlY1msjqxLlivBQCFd21zuZeTS284qdiHEPs=
Subject key identifier: B2:7D:BE:E0:41:35:78:FF:FE:A2:72:5B:A9:27:DC:54:DC:E7:FC:0B
Authority key identifier: 4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
Certificate issuer: /CN=4cca52610c77c24069c6a659f5f75862444d21d1
Certificate serial: 019D39E5622C5E45121EC0CD2F9ED8E76F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
Manifest number: DC
Signing time: Sun 29 Mar 2026 14:00:27 +0000
Manifest this update: Sun 29 Mar 2026 14:00:27 +0000
Manifest next update: Mon 30 Mar 2026 14:00:27 +0000
Files and hashes: 1: 7zHV66w7Bkb2Ny1dDTCLE7Wl8ao.asa (hash: lHxtADA9XD8WHImnlrIbVNB8iNbIHqkbRGv2EysJnKE=)
2: TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl (hash: tda9T4Kus6Yo2MJdVQ8CLbwYTIJOXYlZI7aWndkcrXQ=)
3: xG9NFV14N6jhxkLPrteP6dgm9Uo.asa (hash: j7yw0JA2orCei5mBZaM+jkEs+OnrVp/04Pg2/7YewKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:62:2c:5e:45:12:1e:c0:cd:2f:9e:d8:e7:6f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cca52610c77c24069c6a659f5f75862444d21d1
Validity
Not Before: Mar 29 14:00:27 2026 GMT
Not After : Mar 30 14:00:27 2026 GMT
Subject: CN=b27dbee0413578fffea2725ba927dc54dce7fc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5a:c9:b8:d6:b2:65:27:9f:84:f3:47:dd:18:
aa:35:7d:13:7f:45:c4:82:29:b6:cd:fd:18:04:42:
cc:ce:88:2d:18:f1:06:06:4f:62:7e:73:b7:f5:23:
53:c8:64:27:cc:a5:e2:10:6e:d8:da:b8:d6:f1:e6:
5e:9b:6f:98:72:3b:1f:44:bf:73:b4:aa:88:02:74:
5d:c9:5b:22:1d:56:21:f9:4d:3d:85:6f:10:30:1a:
a3:96:89:37:40:a1:75:40:ec:f4:ed:51:f2:1e:30:
3f:f5:76:51:3b:c7:d3:d5:79:73:63:73:c4:05:fa:
c4:b5:75:9f:32:93:ff:b6:53:81:27:46:c6:41:3c:
54:61:e6:3b:08:5b:e0:de:a9:2c:1e:47:5c:65:8c:
46:d8:bb:d4:24:fb:64:00:dc:d4:d5:95:97:ef:0b:
8e:65:07:db:2a:ed:36:53:7b:af:e6:6f:99:0e:43:
ef:52:8c:5e:0e:6f:01:27:37:7d:de:f2:b2:9f:f9:
6b:8e:74:66:38:6e:88:86:ee:6b:db:d1:a3:f4:f0:
63:a8:84:7a:8f:f2:38:6f:a3:dd:45:42:58:62:19:
26:b6:2b:e4:7c:94:5a:b2:c4:8e:87:c4:82:a4:ff:
5c:cf:0d:d1:1b:6d:c2:2e:a7:96:35:c8:2e:de:82:
cc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7D:BE:E0:41:35:78:FF:FE:A2:72:5B:A9:27:DC:54:DC:E7:FC:0B
X509v3 Authority Key Identifier:
keyid:4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3b:77:cf:21:14:c2:0a:5d:4b:8a:b6:05:38:d5:a8:c4:91:
70:20:9a:ae:4b:7e:56:da:e1:b4:f1:0c:2a:9d:27:84:18:62:
76:3b:cf:77:48:11:62:f3:48:25:25:0b:11:9e:87:91:ff:2d:
36:49:05:96:d7:5f:27:00:fd:5d:e1:a8:58:55:d4:e9:4d:45:
71:c2:9e:7a:6f:aa:43:6e:14:72:63:96:c6:e5:59:7b:88:55:
77:2e:b2:86:a6:bd:b6:db:61:97:7e:1a:22:f8:27:03:86:3d:
c3:c0:98:76:97:1a:e0:0e:ca:2a:f8:ca:55:2b:53:87:4f:ba:
fd:8b:42:6f:19:c9:df:58:46:18:aa:d4:59:19:c9:16:9a:0a:
1e:ab:f8:ba:f5:9c:08:8f:d6:76:57:de:1d:51:a6:cb:b1:ed:
e1:c3:01:c2:a7:f8:ec:65:c7:a8:5d:b7:8b:92:8f:b1:17:9a:
c5:a7:97:9e:14:15:24:6a:4a:61:e4:b4:cd:ed:3b:e9:6d:aa:
48:e5:74:e2:38:01:8e:2e:ae:be:15:6f:bc:7f:50:ed:37:07:
af:aa:ca:8b:b9:7a:bb:6a:cc:48:e2:57:81:b5:70:91:f1:eb:
32:2c:99:a7:ed:9d:e3:8d:60:18:24:18:83:44:18:b8:b6:f4:
61:52:ef:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:29:36 2026 by rpki-client