Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
File: TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft (raw, json)
Hash identifier: 8OjvNAtMKDtOjwdLDRGiplYrcuzl1QFalCsEdKrDYWo=
Subject key identifier: 91:D9:6E:4E:05:2F:EA:72:9E:25:32:6C:E3:AC:E6:8C:99:68:85:5F
Authority key identifier: 4D:C0:23:0C:D4:15:D8:6E:86:FD:88:93:13:42:87:CE:54:A6:87:D7
Certificate issuer: /CN=4dc0230cd415d86e86fd8893134287ce54a687d7
Certificate serial: 019D303DC8DA7901C68D75D9DB9A21E1D1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
Manifest number: 0351
Signing time: Fri 27 Mar 2026 17:00:48 +0000
Manifest this update: Fri 27 Mar 2026 17:00:48 +0000
Manifest next update: Sat 28 Mar 2026 17:00:48 +0000
Files and hashes: 1: TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl (hash: kPXoSQFR5DS7GWdiFdb8IRwCIWjIk3wir201tDrE9h8=)
2: xxSghRy6AfEWa4Xp9hCtVJwXq8Q.asa (hash: tkVbLxXuAlB5/ytsjVKiIz1hk9lX1sqQHSPlQ6fiMgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:30:3d:c8:da:79:01:c6:8d:75:d9:db:9a:21:e1:d1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc0230cd415d86e86fd8893134287ce54a687d7
Validity
Not Before: Mar 27 17:00:48 2026 GMT
Not After : Mar 28 17:00:48 2026 GMT
Subject: CN=91d96e4e052fea729e25326ce3ace68c9968855f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2b:bb:19:d0:8c:bd:5e:9b:c0:e5:6f:14:c1:
76:05:bc:e5:50:76:ec:c2:19:2c:72:79:0c:b4:eb:
96:95:e2:42:fa:8c:db:8f:ce:25:6f:2e:af:cb:81:
a7:37:e3:87:af:c9:bb:08:28:9f:7b:38:88:db:36:
30:3e:a5:94:0a:e2:9a:53:11:3c:42:84:00:23:be:
2d:3b:cd:80:43:5f:aa:6c:26:67:98:76:75:83:fa:
3d:49:02:28:5f:1e:a8:ee:45:06:5e:3d:c8:1a:f6:
0c:7c:e4:f1:0e:a5:bb:a2:02:31:14:9d:20:9b:9e:
91:a9:fb:4c:a2:2f:d0:bc:0f:af:93:f0:77:8a:08:
32:2a:61:d5:7e:17:75:22:4c:84:e2:bd:85:c9:62:
75:7f:2c:64:68:f9:c9:16:fe:25:10:b1:f8:7f:13:
f2:28:e0:11:ba:46:9c:82:c3:38:f4:31:d2:12:5d:
ab:4e:97:49:01:c3:06:41:0c:11:e0:d4:6f:2d:08:
f1:2d:36:6f:e8:66:e4:97:54:a4:fc:85:f1:94:f0:
ad:a7:b2:f9:80:14:8d:7d:1e:8f:09:36:06:49:3e:
0c:a1:d2:0b:f8:49:f9:21:c5:53:9e:cb:98:17:98:
88:67:6e:0f:6f:92:ad:82:46:1b:d8:5d:be:3d:ee:
ab:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D9:6E:4E:05:2F:EA:72:9E:25:32:6C:E3:AC:E6:8C:99:68:85:5F
X509v3 Authority Key Identifier:
keyid:4D:C0:23:0C:D4:15:D8:6E:86:FD:88:93:13:42:87:CE:54:A6:87:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4d:f8:c0:e1:2d:e5:39:8b:a8:79:7d:29:62:93:a2:3c:64:
8b:7d:75:d3:a9:5b:cb:35:1b:40:9d:da:70:2c:db:09:b8:45:
17:e9:c0:cd:7a:d2:d9:69:61:b0:72:33:37:93:cc:5d:4c:c4:
f2:17:7a:e7:e2:3c:16:41:7a:3f:a8:ee:f3:1c:9f:ac:e8:30:
a5:13:f3:03:30:f3:3f:c1:06:fa:58:a3:a5:29:4a:e6:66:0d:
9e:de:d7:e0:54:2b:d4:5e:9a:8d:4a:40:1b:0d:25:2c:ac:0f:
fb:05:78:ad:5d:41:4c:c0:29:f2:0f:bc:81:2d:de:21:e1:2b:
b5:07:42:1a:17:c2:ef:d8:3f:e4:39:ed:05:12:ab:b4:75:3e:
f8:6f:74:5b:0b:9c:84:86:42:5d:45:be:83:50:56:6b:3f:b5:
bb:e7:e9:d1:70:8e:d8:89:62:09:81:ad:1c:af:ee:c9:8c:36:
2a:a6:ba:58:88:59:10:88:f0:ef:a5:61:b4:69:fa:cc:09:91:
f1:8a:f2:03:3a:9a:d4:50:80:6b:9c:39:fd:cf:9b:6a:30:c6:
70:29:ef:1c:b3:c2:c9:78:97:50:79:3a:0f:3d:7e:bc:31:6a:
9e:65:47:ff:60:a3:fa:33:fb:25:40:10:04:aa:da:74:69:46:
2a:b8:a6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 04:33:15 2026 by rpki-client