Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
File: TOmGBryaXUQHT_jL7cvbz8NfBWI.mft (raw, json)
Hash identifier: E/8IAZ7ScFs8y60QDe7pnp9L4FYdsFLjhGbmrrrc8yA=
Subject key identifier: 44:51:22:4E:6F:A0:86:A7:BF:1B:9D:6C:92:29:3F:80:AC:BB:12:E9
Authority key identifier: 4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
Certificate issuer: /CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Certificate serial: 019D37F77A2E6347AAC5895C8E6ED433CDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 05:00:58 +0000
Manifest this update: Sun 29 Mar 2026 05:00:58 +0000
Manifest next update: Mon 30 Mar 2026 05:00:58 +0000
Files and hashes: 1: C5Z-09c-UNKANhS9Y8455wChPaI.roa (hash: kwkm/1oRmvGWA+6dVE+pHfwpAhyhTdzdAoLVyPCKLrg=)
2: TOmGBryaXUQHT_jL7cvbz8NfBWI.crl (hash: pmZJj4S927fHBR/EeGhUD8M+cf7g6JnQy87cBuVBYPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:7a:2e:63:47:aa:c5:89:5c:8e:6e:d4:33:cd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Validity
Not Before: Mar 29 05:00:58 2026 GMT
Not After : Mar 30 05:00:58 2026 GMT
Subject: CN=4451224e6fa086a7bf1b9d6c92293f80acbb12e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:ac:1e:d7:bc:8c:dd:02:81:82:e5:48:fe:
1c:19:0a:0a:7e:af:80:42:b9:e6:e5:e2:71:5c:b9:
0e:20:3c:88:4f:33:70:aa:90:49:3c:ba:8b:5d:ca:
eb:86:7c:fc:c8:fc:f3:bd:5b:80:5e:e9:72:70:1c:
e1:cb:64:25:02:f9:60:fa:d6:ab:07:76:f2:69:36:
23:45:31:04:db:26:ed:b7:5f:de:b6:d0:09:4a:4f:
5d:1a:34:05:c9:6b:83:11:79:8f:e4:96:34:73:3c:
d9:ce:82:02:d0:3a:9d:4d:14:45:a1:7a:10:23:fa:
98:dd:0c:a1:50:c4:61:1a:17:c5:fb:f3:69:05:f2:
d7:4d:6b:44:6b:3e:ae:df:e3:3c:ef:b0:00:ff:bd:
58:08:13:51:00:a8:fe:6c:97:fc:90:75:8a:0e:b7:
24:ca:f6:64:0d:fb:62:92:b4:eb:a1:67:31:10:2b:
cc:71:ce:06:1d:4b:d9:e5:b1:fb:53:6a:17:fc:a3:
85:87:c4:63:73:75:f2:5e:51:38:4b:8b:e0:36:ab:
fa:6f:f9:24:9f:b8:fa:a5:cc:df:c0:f4:2a:3c:de:
7a:fe:c4:08:96:6f:ee:19:19:86:8f:58:51:3f:1b:
d5:a0:66:44:84:5a:60:b6:c7:a7:00:16:b4:56:b0:
f6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:51:22:4E:6F:A0:86:A7:BF:1B:9D:6C:92:29:3F:80:AC:BB:12:E9
X509v3 Authority Key Identifier:
keyid:4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b1:ab:7e:88:58:1b:ee:3e:cd:d7:8c:12:ce:35:cc:1e:9b:
aa:97:e6:6b:79:6d:64:5e:58:3c:f4:dc:99:ec:ea:55:76:d5:
d5:3b:ab:b1:69:ae:48:da:a1:64:d1:78:48:13:bf:fb:15:ec:
c3:63:12:d4:2d:14:de:07:c1:73:e1:e2:64:e3:d4:04:67:5e:
b5:d5:56:2f:06:b0:1b:9e:9a:f1:a7:6b:76:8f:3a:d2:1c:0b:
10:a9:32:cf:2e:1a:41:69:e5:bf:9d:f4:d7:0c:48:43:9f:64:
f6:0d:90:ac:04:cf:89:b5:89:44:fa:c5:33:56:01:11:1a:2e:
03:37:8c:ee:a2:81:11:06:57:b5:a6:16:e2:2b:70:45:7e:ed:
ec:cc:16:32:42:b1:a6:3f:f4:97:d0:43:71:22:87:66:6c:40:
b1:12:d6:98:ba:77:c7:c7:28:a9:f8:8d:40:76:cc:b8:11:53:
e2:1d:8f:9c:7b:d5:a4:54:94:0a:4c:66:12:b8:4b:97:d1:7a:
f2:9e:5c:3c:0e:19:b1:dc:4a:7d:70:b0:26:83:3b:e4:d1:bc:
dc:12:fa:49:90:73:b5:93:47:da:87:d0:b8:c0:fe:ce:59:ab:
15:a1:21:e3:5b:a6:24:75:d2:f6:0c:56:99:fe:05:f3:33:bd:
63:58:f7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:48 2026 by rpki-client