Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
File: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft (raw, json)
Hash identifier: ursVZaIPcFcTxMvw0wua5reQdazNj/6wKbPAT8YHL6Y=
Subject key identifier: FF:7B:64:5C:00:EB:56:F6:FE:46:34:A6:6A:DF:90:64:9B:57:F5:3F
Authority key identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
Certificate issuer: /CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Certificate serial: 019D382E2BBC4FFC65EEAFBD3FD5B189F2D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
Manifest number: 1470
Signing time: Sun 29 Mar 2026 06:00:43 +0000
Manifest this update: Sun 29 Mar 2026 06:00:43 +0000
Manifest next update: Mon 30 Mar 2026 06:00:43 +0000
Files and hashes: 1: LwJo-ZOAga1XsMB6kJmoJhsDKi4.roa (hash: 4U3Q5m4w5gDb99Fndaz4s602DhJvC8d4654L2Zwbqhc=)
2: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl (hash: tX3Ne+aRqAAuLulTP5zzRZAa/Q9+B86Ndqh8wGqOKDM=)
3: mazgd2rK4HfvX3Omu_5x4KeE4q0.roa (hash: VMQzYJR5enDZAjPyu/iICQfNBSPELGmMcOQZHSHcGJw=)
4: vMIHGFPf0heT2WpdAxKEA8H1uqY.roa (hash: Y7aS0+OiMr6KF+wJQp4D98bim2LplH1VyBIQ6kJaS6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:2b:bc:4f:fc:65:ee:af:bd:3f:d5:b1:89:f2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Validity
Not Before: Mar 29 06:00:43 2026 GMT
Not After : Mar 30 06:00:43 2026 GMT
Subject: CN=ff7b645c00eb56f6fe4634a66adf90649b57f53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8e:e4:de:9c:dd:35:33:86:2e:35:60:48:20:
57:d6:f7:bb:26:f1:dc:e1:65:f0:63:3b:0b:e2:1d:
11:e2:ec:b7:e8:fa:65:f1:76:3c:21:42:86:d4:51:
0a:8d:6a:99:39:a1:da:20:11:f4:1b:2f:b1:88:00:
83:8e:02:28:05:26:52:9f:a6:4f:9c:0b:82:b5:f7:
76:87:3f:57:96:13:95:a1:30:92:d5:56:5a:a4:59:
63:8e:74:07:53:c6:f7:94:1c:fa:d1:bf:a8:8d:ed:
4d:d4:b3:08:dd:e7:8a:bc:32:ba:d2:4b:01:14:3b:
e4:0e:6b:bf:19:4d:78:7a:3a:5e:9b:72:31:5c:bb:
f8:13:56:91:ab:ff:8a:90:f1:9a:13:7e:1d:20:fe:
28:0d:11:cc:53:f6:79:ca:1f:ab:b9:c7:4e:fa:59:
a2:24:a8:5b:a5:22:4a:bd:02:e8:c5:3f:3b:52:ea:
de:ee:a2:65:78:2e:6a:32:ff:ac:cb:0e:60:ba:a0:
19:42:0d:ec:4d:ff:58:46:46:55:60:20:55:31:53:
10:2f:ac:b3:06:df:f4:00:c8:37:5c:16:46:ee:57:
38:09:66:e4:db:8e:0f:08:d3:0d:55:9a:12:27:c2:
ed:99:0c:30:89:2c:27:22:c1:10:24:f5:da:88:ec:
be:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7B:64:5C:00:EB:56:F6:FE:46:34:A6:6A:DF:90:64:9B:57:F5:3F
X509v3 Authority Key Identifier:
keyid:4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b5:07:52:b5:49:53:71:e9:ca:36:08:23:be:ec:8f:96:ec:
01:d4:61:33:07:46:9f:95:01:c5:a6:59:5a:18:a9:dd:02:8d:
00:76:c5:7a:ab:6c:94:cf:9d:06:df:59:24:54:27:53:15:1b:
10:8f:7d:d1:cf:59:b9:c2:16:58:64:d4:8c:cf:a0:09:f7:f6:
d4:21:c3:97:4c:bd:e5:ed:e5:1f:ed:95:c5:af:6f:ec:4d:d1:
ad:01:d3:fc:72:55:4e:09:a2:19:e6:75:95:c0:30:c0:4f:1b:
ca:6f:88:b9:ce:17:91:a6:92:3a:0e:16:32:0d:fd:e5:94:4a:
ee:8b:2c:ee:97:80:1e:b6:58:9a:60:95:8c:c5:80:3d:33:40:
ac:5a:d1:8b:e1:9e:42:c1:61:a8:fa:a9:26:36:5a:89:ff:68:
d4:a9:85:e2:5e:7e:bf:cc:e2:c7:2d:89:ed:f9:c5:40:b0:92:
6b:3e:17:a6:eb:b0:44:a5:96:4f:88:d1:64:a8:ce:d0:2f:83:
54:a5:f4:bb:7b:29:52:62:c6:97:f4:15:50:94:fb:2f:93:82:
f8:87:2b:a8:b2:95:e3:fc:9c:5f:eb:4f:98:39:a8:d2:8a:4b:
06:5b:8d:a0:03:55:fa:4a:09:3b:6b:58:f5:55:ad:77:c1:92:
e2:dd:2b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:14 2026 by rpki-client