Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
File: TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft (raw, json)
Hash identifier: k7Ewp8/Ghz19nGk0wvGgbFt1VKCooB3XvQm+1780+Q4=
Subject key identifier: 9A:C0:99:72:EA:F7:58:F4:0F:4F:B2:EB:37:74:9A:ED:0B:28:5A:B7
Authority key identifier: 4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
Certificate issuer: /CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Certificate serial: 019D3909826F12F83B0F54DBE7CCADFDB6E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
Manifest number: 1543
Signing time: Sun 29 Mar 2026 10:00:17 +0000
Manifest this update: Sun 29 Mar 2026 10:00:17 +0000
Manifest next update: Mon 30 Mar 2026 10:00:17 +0000
Files and hashes: 1: TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl (hash: 9XesQrU4dt6ZLwYylTf7oNmIi9B/BCcr5+kKThuyqI0=)
2: uLeN3kY2ZRDo-2-B-T0hlmjh-nU.roa (hash: eLP3MmcrJSGHUuA9jj4PGJnAA+F8952d8mOEbR6//AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:82:6f:12:f8:3b:0f:54:db:e7:cc:ad:fd:b6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Validity
Not Before: Mar 29 10:00:17 2026 GMT
Not After : Mar 30 10:00:17 2026 GMT
Subject: CN=9ac09972eaf758f40f4fb2eb37749aed0b285ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:d2:16:0a:db:c4:61:27:c5:2d:cb:5c:ce:
95:3f:d1:cf:26:dc:1a:15:c3:f3:d2:31:81:57:e9:
1a:d2:7e:f4:75:9b:39:21:87:8a:38:b3:89:16:6d:
f6:92:42:8d:16:07:90:64:b7:5f:d8:b4:ec:7f:84:
dd:8f:1b:e1:a3:cd:8a:78:7c:da:a4:2a:0c:76:8d:
b2:e1:ca:00:d4:de:85:27:d9:e7:dd:ff:0c:0e:38:
06:5d:f2:b2:95:c9:09:bb:9a:56:d0:45:4e:11:65:
e3:9e:cc:24:5e:bb:b8:35:3c:d5:18:c4:24:1c:40:
08:fb:77:44:a8:d3:63:63:08:d3:06:6b:69:19:05:
20:94:77:a0:c7:6e:d0:d1:83:a7:23:8c:4b:25:4e:
e8:17:d6:b6:87:67:e1:de:4f:77:5e:0f:f9:11:45:
8d:ac:1a:80:4f:e2:a3:d9:3c:88:cc:c3:4d:0d:e7:
f9:d1:dc:a7:87:98:df:3b:96:2c:a6:e4:26:e2:6b:
df:f8:d1:bb:d5:d8:4d:b7:e3:48:87:9b:19:5d:99:
6d:1b:3c:96:65:7d:56:e4:47:4e:7b:6f:83:7a:05:
14:96:f6:92:22:21:57:dc:cf:9d:77:f5:28:f3:56:
ca:4c:ab:f6:1f:be:9c:87:26:5a:04:01:19:a9:76:
28:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C0:99:72:EA:F7:58:F4:0F:4F:B2:EB:37:74:9A:ED:0B:28:5A:B7
X509v3 Authority Key Identifier:
keyid:4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e1:f3:66:cf:5a:3a:61:66:7b:de:08:52:00:e0:57:5c:6f:
aa:b6:56:d5:57:56:dd:b7:5c:9e:ab:79:e9:00:52:ce:4e:8f:
bc:ee:37:fb:e0:60:02:7e:c1:36:80:2a:60:34:87:72:c1:4a:
45:1c:fc:d3:28:27:d5:ff:74:f1:1f:55:81:3c:83:e6:22:4f:
ff:8f:78:4e:83:98:9a:01:00:cc:6f:6b:82:33:b0:57:a8:5b:
57:d8:5d:67:10:bd:d6:fa:42:69:74:41:fb:5c:47:8f:ef:8f:
9a:e0:0a:f9:7c:33:a6:67:27:0d:dc:18:35:83:e0:7f:bf:53:
b1:cf:38:f2:06:42:30:a1:f3:28:dc:b6:06:a5:fb:64:6a:e3:
72:20:b4:3e:95:9f:11:46:32:73:9a:9e:7f:43:b5:9a:46:a4:
84:c4:9c:8c:86:cc:ec:9a:f4:3b:97:90:7a:4b:33:91:13:3e:
db:f0:64:36:75:81:b3:c2:89:08:31:d5:0a:45:5a:31:ae:ee:
97:08:02:a1:68:87:39:c1:42:61:94:e6:f3:49:1f:c8:3e:30:
71:62:26:1f:05:73:d8:1c:9a:89:7a:22:79:f7:29:38:35:33:
51:f1:1d:59:ce:0a:dd:2d:45:18:86:40:ec:10:5e:7c:d7:00:
d4:e7:53:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:57 2026 by rpki-client