Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
File: TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft (raw, json)
Hash identifier: Mm2Vvba9FmCaY6FTvZpENnKwR2zpTBHYcxrGTMKCJ/c=
Subject key identifier: 67:97:B2:D6:26:59:D7:C7:47:3A:78:B8:8D:CA:2B:A6:1E:03:2C:EE
Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
Certificate issuer: /CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Certificate serial: 019D38D39818D28CCE024EDEF02A16404037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
Manifest number: 18A1
Signing time: Sun 29 Mar 2026 09:01:24 +0000
Manifest this update: Sun 29 Mar 2026 09:01:24 +0000
Manifest next update: Mon 30 Mar 2026 09:01:24 +0000
Files and hashes: 1: 1SNNaJd-_nZGjSy8KhTgEu_TWEY.roa (hash: DTRv2jcApfzQZK3kJVDp954M/vKt+twRMmk7r67fyZA=)
2: 1bQOLq12VlIMZXXolofAPH9O5cY.roa (hash: nNr1MzlTDsd5ryhxxC8zve5I9A8m7Ud69POGWpKdnLw=)
3: 7Z4vT_pGnwjFtMmenLcRoqmUPrc.roa (hash: 0NI8q2txBSLwYGEyadLBX2+xdl05r7JbnQBUmGMxhLc=)
4: IM3Sgf6n85MJ0JQ5zz3x973QECY.roa (hash: RhRSY8YyTjB3zZVDnbDfxNa5aiv4sYD92KtaLzLLg4A=)
5: TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl (hash: oOm2y/R4uybwPj/nv/QxddFxZV9RiH75gJRY95ZeIFE=)
6: cefT8Znon0EMvLEa4jZbAItaX68.roa (hash: zuUKY/0e1yWLD2162lMycJrs/wJncsLp3x6qIl7VWD4=)
7: klIt1NStPul9M_ZMJsdKutacUMM.roa (hash: Bg/ud8VNM1Ut9qaDX4Qy7kRtx9Mw6PMvkK9VqDfBpa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:98:18:d2:8c:ce:02:4e:de:f0:2a:16:40:40:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Validity
Not Before: Mar 29 09:01:24 2026 GMT
Not After : Mar 30 09:01:24 2026 GMT
Subject: CN=6797b2d62659d7c7473a78b88dca2ba61e032cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:31:8d:33:68:d2:93:e2:82:c2:fa:7e:71:
2d:84:9b:fe:fe:bb:f0:5e:50:7a:7c:0d:1e:85:3f:
f6:cf:a4:a3:a9:77:eb:89:ec:a5:e6:f0:31:ec:45:
79:15:c0:a1:a7:63:76:f1:e5:d1:ea:94:16:02:15:
27:41:dc:b7:aa:b3:f5:fc:58:0a:ac:a4:a2:46:39:
b9:da:62:ee:bc:27:dd:43:13:45:03:0e:04:27:7f:
89:bc:07:17:4c:d0:74:11:92:dc:0a:52:98:a5:42:
66:68:84:ff:2c:f8:93:7c:9e:db:04:9a:7a:c2:0a:
27:ca:85:3a:3f:b8:1c:88:09:e0:c5:10:5f:5e:f9:
d6:17:20:f8:4d:31:f3:63:19:4b:8a:35:df:e2:31:
58:c2:34:f2:fd:c2:7b:35:5f:85:04:41:86:58:bc:
cc:52:e8:65:98:21:43:60:27:7d:f2:90:e0:02:c1:
68:1d:b7:c1:6e:5f:ef:d1:b2:d2:dc:14:17:e3:a7:
61:40:9f:c4:7e:d3:f6:48:52:9e:3b:3c:3f:e9:7e:
98:1c:81:b9:71:06:d3:b1:60:f2:59:40:68:63:ca:
13:dd:95:5b:c7:14:95:14:d0:d3:52:57:46:07:ee:
2c:e1:e3:96:2c:28:76:fe:3d:04:93:65:ae:69:e3:
4a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:97:B2:D6:26:59:D7:C7:47:3A:78:B8:8D:CA:2B:A6:1E:03:2C:EE
X509v3 Authority Key Identifier:
keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8f:a3:73:32:30:bd:70:8c:92:46:80:50:8d:bf:05:6a:ad:
fe:48:ae:48:ff:14:2e:2e:cf:a3:7d:9e:1d:4c:f3:f7:75:91:
5f:4e:20:6e:3e:5e:2f:0a:ac:77:4d:8e:04:39:6d:ba:6d:af:
96:37:45:3f:23:3c:fe:97:fd:94:e2:ce:23:f8:1a:59:4e:56:
1e:f8:43:5b:d9:b2:28:b5:e5:58:31:6c:a6:05:16:da:c8:4c:
f6:d1:3a:26:e8:55:45:e3:63:41:5f:cd:48:8f:1f:f6:ef:2b:
d0:1d:8a:a1:a6:00:44:f1:f9:83:37:0f:15:38:d4:a7:26:84:
c1:39:f5:30:8c:25:75:bd:7b:fb:30:47:59:6d:78:71:72:28:
91:b3:52:bb:d4:d1:26:b2:02:38:17:77:aa:df:ae:b2:8c:e7:
4e:f9:5a:c4:ca:57:89:28:3e:28:65:76:40:3c:0a:0b:d0:90:
33:da:9c:85:21:13:44:47:9a:b7:5c:69:5e:76:e7:64:fd:54:
9f:7e:b4:73:77:eb:c2:bf:b2:f2:b9:21:40:eb:49:5f:08:75:
3e:d4:36:82:b8:ba:dc:cf:c9:e0:7c:f7:a9:87:45:49:b6:e3:
e1:3f:be:80:7b:60:28:53:a5:d2:2b:f5:2d:38:78:5e:db:19:
99:42:37:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:53 2026 by rpki-client