Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
File: TmIrxVBoe20O9geIzq2w_IIKOB8.mft (raw, json)
Hash identifier: /hASj3jleaX+YneZcXf7va1tnhkqqe/sEtEF6Wpf1oI=
Subject key identifier: 8B:8D:46:0E:AF:53:3D:2C:1A:D3:CD:26:C1:F4:E7:ED:E1:EE:0C:75
Authority key identifier: 4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F
Certificate issuer: /CN=4e622bc550687b6d0ef60788ceadb0fc820a381f
Certificate serial: 019D3789A16522EDF13236A1DACF8CD2FB47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
Manifest number: 0BD5
Signing time: Sun 29 Mar 2026 03:00:59 +0000
Manifest this update: Sun 29 Mar 2026 03:00:59 +0000
Manifest next update: Mon 30 Mar 2026 03:00:59 +0000
Files and hashes: 1: Oj4ufYEDH_buXhb2Mkfbbooqsvs.roa (hash: 9JNuQjJcdTyhj25S/g29VKqkgUtwlLq3bIBUYpj+fVA=)
2: TmIrxVBoe20O9geIzq2w_IIKOB8.crl (hash: 77gfhHbWzBVJ8Ze1b2isAkB6p774tAjYdrXFYTnbQcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:a1:65:22:ed:f1:32:36:a1:da:cf:8c:d2:fb:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e622bc550687b6d0ef60788ceadb0fc820a381f
Validity
Not Before: Mar 29 03:00:59 2026 GMT
Not After : Mar 30 03:00:59 2026 GMT
Subject: CN=8b8d460eaf533d2c1ad3cd26c1f4e7ede1ee0c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:6f:57:cd:ad:73:9c:ca:40:23:39:e6:ba:
08:27:fd:f0:2f:72:d9:66:45:d8:80:45:30:b2:d5:
d0:69:98:81:af:b5:9b:d9:23:00:5d:88:39:d9:bc:
74:56:ba:0b:77:9a:29:34:b3:36:f4:af:d2:84:6a:
73:3d:91:8c:91:2a:80:6e:68:76:e6:27:c0:3d:cd:
b5:92:f0:a1:17:6e:b0:d3:36:b2:7c:b2:c6:ea:36:
19:26:bd:71:11:a3:c5:31:92:f4:82:d6:1d:24:04:
b5:56:e4:ab:ba:8a:5f:61:f8:8a:30:60:0f:1b:0e:
47:25:54:f7:64:79:03:f8:29:6a:09:aa:9f:dc:62:
fe:ca:4a:04:a2:63:98:6d:80:7b:b4:5f:37:47:bd:
39:42:e9:5c:82:13:ae:38:42:cb:f1:63:30:65:bd:
55:91:74:87:5c:07:63:80:4b:6b:e8:90:19:ec:aa:
94:2a:71:e8:7b:b9:86:22:96:bc:eb:89:d0:e5:1a:
34:85:b8:1e:93:de:6f:af:35:7e:d1:6b:3e:82:b1:
27:af:f3:c7:d9:57:d6:25:7a:8c:df:be:d2:e0:c7:
86:52:a8:c0:6c:b3:74:b2:96:6a:d6:16:e8:d4:eb:
ac:cf:95:fc:20:62:44:da:ad:bb:61:8a:f7:06:e4:
5d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8D:46:0E:AF:53:3D:2C:1A:D3:CD:26:C1:F4:E7:ED:E1:EE:0C:75
X509v3 Authority Key Identifier:
keyid:4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:74:79:2c:ae:86:c3:97:ba:f7:fd:b7:f2:24:cb:f7:75:a4:
d8:4a:f8:cd:28:98:34:41:72:62:ad:18:be:ac:09:47:8f:d8:
58:19:b9:5c:00:8c:c1:32:71:2d:2b:11:51:dc:cf:cb:98:09:
ec:4d:4f:b3:58:5d:de:9a:2f:61:17:ac:4f:91:72:b4:43:54:
5c:c7:6c:33:60:e9:1c:13:04:8e:d8:89:45:c7:8a:7e:09:2e:
d9:1f:46:d4:1d:24:9d:3b:d8:4d:f9:38:a0:65:0c:2f:6d:f7:
26:17:a3:b1:b6:96:99:3c:ec:f9:50:60:e9:d6:b4:dd:36:ab:
c9:a2:b2:82:3d:a7:71:39:58:a6:c2:2f:ed:16:a8:18:ff:1e:
b5:34:e1:e1:20:24:74:15:82:e3:7b:6f:db:67:2c:c9:6e:c8:
80:b9:54:4e:27:a6:2d:84:d0:d9:e5:7a:e1:77:14:f8:ef:54:
08:92:70:fa:f2:24:76:b3:06:43:dd:df:97:c6:6b:be:8f:24:
b3:d7:d8:b4:cd:a3:28:cf:22:bf:f2:3d:81:4f:00:cc:b0:c4:
08:a1:91:79:cc:34:7c:dd:dd:ae:d8:83:1f:e6:d8:b5:af:b2:
2c:bd:b0:18:ac:5e:ad:1f:22:cb:1a:3d:3b:d6:07:49:c6:8b:
34:92:9b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:45 2026 by rpki-client