Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
File: TphKWkt4CLtOoy0xC90H7MlXURM.mft (raw, json)
Hash identifier: 8xvQegWTQ0Il3ZWNkCatTHtc4MspHdjs8wZrHUhRlzk=
Subject key identifier: 7A:92:E2:77:3F:84:27:4E:23:DC:98:FC:73:3B:9C:4C:01:33:CA:52
Authority key identifier: 4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
Certificate issuer: /CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Certificate serial: 019D382E39FA6B357DD63BED3F985AD481A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 06:00:46 +0000
Manifest this update: Sun 29 Mar 2026 06:00:46 +0000
Manifest next update: Mon 30 Mar 2026 06:00:46 +0000
Files and hashes: 1: JZQkADNXuVdgoYFqB8dJihxFMqw.roa (hash: v2lJ8edD4J6npHAAgT5bKgjMcgZZ0T4RA8FIeChON/I=)
2: TphKWkt4CLtOoy0xC90H7MlXURM.crl (hash: OcYUJvgTVwodAKQy9mGpVrPpa53K/VXhmyv2m1SKLWc=)
3: Y4syH6UzjjHJV7JuJcxsHndTEBM.roa (hash: JfIRoO3yinIldqjXRJFR4+uBQRShxpVbREXLMon+oyc=)
4: _hFABtqDrMHoR6yceaa4n6HnFLY.roa (hash: RUYxYGOzRDiabfY65jWe0OVYiku/zny/wdDlEwYqRXU=)
5: nAZ9GYyRtDryRUMqgM2oxm7bnsw.roa (hash: Curfm/lqD1xZHwiMDPx7ObFQjKY3PZ5mZYaISZH60CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:39:fa:6b:35:7d:d6:3b:ed:3f:98:5a:d4:81:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Validity
Not Before: Mar 29 06:00:46 2026 GMT
Not After : Mar 30 06:00:46 2026 GMT
Subject: CN=7a92e2773f84274e23dc98fc733b9c4c0133ca52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:c1:73:41:ea:a3:c6:9a:6f:64:f0:73:78:
8a:4d:27:a9:97:11:5a:46:6d:74:44:ef:4e:f2:fb:
a5:96:a0:24:e2:9f:e2:f0:ac:92:84:5b:ff:86:f4:
a6:c5:37:c9:c6:28:bc:88:b6:cb:d4:6e:b5:ec:ec:
6e:dc:aa:80:47:eb:4f:58:3f:ef:aa:10:ae:2e:8e:
f9:55:a5:b3:e5:7b:03:4d:71:a9:fc:f9:d3:e4:30:
8c:d1:61:3a:e4:2d:09:4b:59:17:5c:33:cc:30:b1:
16:aa:c8:b7:ea:10:55:68:73:3e:d1:b1:84:8d:6a:
ad:5c:33:7c:bf:41:62:bd:89:cd:c7:c3:fc:ad:17:
49:72:4e:c3:8e:58:f6:72:c4:fd:41:b3:07:a3:84:
eb:d2:1e:d5:ed:06:e6:bd:ae:fc:86:79:f9:db:36:
5b:1c:89:05:89:e6:44:5d:f9:72:b3:e8:1e:20:53:
22:83:d0:36:c7:ad:d3:4e:56:f8:24:05:a9:96:77:
72:39:94:18:a6:04:55:49:15:c1:8d:7e:96:a9:44:
74:33:94:2a:ee:84:ec:2d:a2:f3:df:a9:eb:2b:7d:
b6:ac:03:de:f3:0f:b8:eb:bb:83:27:10:40:8b:87:
5e:0d:57:06:ad:d9:ad:59:9a:a1:c4:1c:f2:7f:7c:
bf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:92:E2:77:3F:84:27:4E:23:DC:98:FC:73:3B:9C:4C:01:33:CA:52
X509v3 Authority Key Identifier:
keyid:4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b9:ab:95:51:3c:d0:0c:5f:f5:f4:80:16:90:f3:6c:36:d6:
25:85:b5:3c:1c:35:0e:c8:31:34:2c:1c:c0:fb:47:42:09:04:
56:91:dc:b9:4f:b0:37:67:be:a2:1a:62:0b:92:ff:ce:14:e4:
5b:03:38:0c:4d:f7:77:96:01:b5:5e:06:16:2d:83:6c:97:5c:
8d:ee:d8:22:f6:f8:4a:0a:2e:57:c6:c8:e5:4f:3e:0c:b0:ec:
17:2b:4b:0e:71:66:87:97:56:57:ca:57:58:c0:4b:a3:91:57:
7a:12:19:02:47:a9:f1:76:30:28:27:1b:23:e2:be:7c:12:27:
c3:28:b1:3c:ba:b1:70:f4:65:24:8d:9d:05:61:9d:b8:8f:d6:
3c:73:77:23:43:89:be:91:51:35:cd:1c:fb:5e:f5:5e:56:4c:
76:36:67:dd:23:a0:13:8e:f3:e5:d2:a7:e6:12:dd:66:26:ec:
c9:de:04:58:2e:01:d3:c5:14:66:ca:b1:bf:b9:22:9d:d9:0c:
7b:56:a1:a7:6e:9b:24:e1:ef:68:34:74:79:7d:6f:a3:5e:97:
8c:cc:71:24:f0:74:4b:3e:8e:47:c8:7f:b0:7c:5f:c7:9a:bf:
97:b6:67:94:8b:95:6b:98:3d:3e:58:8c:a5:f3:85:6d:ef:c3:
df:d2:69:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:39 2026 by rpki-client