Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft
File: TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft (raw, json)
Hash identifier: w+90GdfxeKzWKfUtMGfo9AG+Rx/SBvkzSIAqG3ySKy0=
Subject key identifier: 9A:83:21:76:E3:53:6A:BE:3F:57:A7:51:BE:15:58:03:72:B7:F8:2B
Authority key identifier: 4E:78:56:D2:95:58:09:36:91:6A:55:3F:B9:BF:B5:9F:3A:17:68:04
Certificate issuer: /CN=4e7856d295580936916a553fb9bfb59f3a176804
Certificate serial: 019D3A1CE5853966B88CE03C6485D000AC87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft
Manifest number: 0337
Signing time: Sun 29 Mar 2026 15:01:05 +0000
Manifest this update: Sun 29 Mar 2026 15:01:05 +0000
Manifest next update: Mon 30 Mar 2026 15:01:05 +0000
Files and hashes: 1: Ns32wREZDoYfJNViYzKanjGGcVY.roa (hash: ocFxy8ShgvilXSa3rSwC0D5vcssnTH48yUdQOR/8oDQ=)
2: TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl (hash: AdTNsfjSGNWUbOeifPiPgwNAsD9Hpk1+Qmum/FfEwoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:e5:85:39:66:b8:8c:e0:3c:64:85:d0:00:ac:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7856d295580936916a553fb9bfb59f3a176804
Validity
Not Before: Mar 29 15:01:05 2026 GMT
Not After : Mar 30 15:01:05 2026 GMT
Subject: CN=9a832176e3536abe3f57a751be15580372b7f82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ac:bd:12:44:94:25:c1:d9:07:bd:5f:0e:70:
b8:2e:eb:c5:40:30:99:fd:d3:12:18:b7:cd:e4:cd:
92:f2:c0:b8:f2:83:58:64:f5:0b:e9:3d:a0:0a:b6:
0e:1b:5b:2d:91:df:48:72:77:7e:a4:17:d0:49:c0:
4c:22:f5:26:f1:77:fa:53:8f:39:2f:77:3e:f8:63:
84:3b:d1:90:f1:ca:61:e8:aa:fe:29:5f:3b:a9:c0:
5f:2a:7a:33:4d:ed:2f:3a:9d:69:39:67:49:b2:c6:
63:18:96:11:ea:ba:15:46:ec:16:20:78:68:8c:93:
2d:72:b9:39:18:fd:d5:a6:e4:0b:84:80:97:a2:04:
70:42:04:cd:0d:44:dc:9d:33:6a:61:ce:6b:78:a4:
8e:86:34:c8:4e:bf:0c:84:df:e1:ec:5a:ee:42:2c:
24:e0:52:93:f2:e6:b0:32:1c:1b:b5:bb:77:74:07:
ea:43:4b:d3:87:02:e2:84:f7:59:55:5a:a6:3c:dd:
6d:4e:79:f2:b0:67:a6:c0:81:4f:0a:44:de:c6:c1:
53:7b:d0:b8:28:62:7e:36:51:51:5e:0b:78:37:8f:
88:1c:c6:c7:f9:7b:0e:3c:3c:19:41:f8:d3:cf:4e:
bb:f7:a7:cd:00:aa:b6:fb:f0:f1:51:cd:42:65:c9:
e6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:83:21:76:E3:53:6A:BE:3F:57:A7:51:BE:15:58:03:72:B7:F8:2B
X509v3 Authority Key Identifier:
keyid:4E:78:56:D2:95:58:09:36:91:6A:55:3F:B9:BF:B5:9F:3A:17:68:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c1:a8:04:1b:02:4d:ce:20:5b:27:12:cb:99:73:87:4a:72:
d0:a5:06:b0:8b:01:31:d9:5b:3a:54:7b:0b:23:a5:e2:ea:62:
b1:1b:06:d2:e2:4e:c0:07:b3:76:b6:d3:a8:9b:6f:16:7e:09:
d1:dc:67:33:18:ea:5d:68:2c:84:06:c8:52:52:4f:ef:d9:9f:
21:46:68:09:21:b2:83:c8:29:1b:7e:f0:ea:01:c2:6c:e7:5a:
9d:66:25:da:f2:9b:27:fa:55:b5:9c:66:7e:f1:96:01:ae:31:
7d:49:fa:57:0d:76:bb:86:04:0a:dc:29:e1:6d:07:ba:9f:e1:
d0:82:51:f7:a3:14:f4:70:7f:50:88:a8:95:20:e9:9f:4c:32:
2f:bd:dd:f2:81:5f:3e:a3:1c:08:38:f1:b1:02:37:1e:ab:44:
30:82:0d:75:a1:e8:59:a0:66:1b:53:e8:66:03:52:58:af:84:
bc:94:fd:03:51:48:07:9a:b3:30:24:7a:21:b3:50:10:4e:46:
11:48:24:35:50:8f:40:35:fd:79:57:67:69:06:45:21:be:96:
20:db:06:1d:c7:60:4a:b6:9c:f3:2a:38:bd:0d:20:e2:63:53:
a7:53:11:cf:54:b1:6b:2c:e6:ee:02:bb:02:fa:a0:b6:10:83:
e0:90:ec:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:26 2026 by rpki-client