Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
File: Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft (raw, json)
Hash identifier: ZRx5JxiXreCSihM5qJWklKMT8BdYnn7UDTXK8YQsifs=
Subject key identifier: 5C:1C:A2:20:CF:81:31:C9:43:D8:DC:5B:43:0F:37:3A:3A:52:09:BD
Authority key identifier: 4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8
Certificate issuer: /CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8
Certificate serial: 019D37F73FFE3F30910A4D7C8F0C77F8AB65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
Manifest number: 0658
Signing time: Sun 29 Mar 2026 05:00:43 +0000
Manifest this update: Sun 29 Mar 2026 05:00:43 +0000
Manifest next update: Mon 30 Mar 2026 05:00:43 +0000
Files and hashes: 1: HW5RUStuLbxYQOe8Gu-H_E5aWV0.roa (hash: x07LEmxGJBV5xPNSCMiyKaX4u86SUnl4qoOBSfBpXEw=)
2: Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl (hash: Q9jXrLDUktnchs4/4gVfOkK22lkoX5jJdJdmESTrcqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:3f:fe:3f:30:91:0a:4d:7c:8f:0c:77:f8:ab:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8
Validity
Not Before: Mar 29 05:00:43 2026 GMT
Not After : Mar 30 05:00:43 2026 GMT
Subject: CN=5c1ca220cf8131c943d8dc5b430f373a3a5209bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:10:cc:cc:24:7b:72:fc:d8:1e:ae:39:dc:3e:
7f:f1:5d:f1:82:91:85:5d:c1:27:65:3a:8e:f2:cf:
49:a3:c3:aa:1a:8a:a8:73:28:a5:aa:9b:06:a6:a6:
b1:05:91:16:19:68:90:79:f0:c3:0a:58:15:62:5d:
05:5e:ae:55:c6:59:ab:21:7a:30:d0:52:5f:0c:13:
03:f2:46:88:f1:97:8e:f8:20:b2:4d:24:3f:e9:cf:
31:d0:f3:15:60:5d:70:de:5f:2b:cd:08:93:46:d8:
ec:c7:76:29:33:ba:f5:28:ee:49:0a:ea:26:a0:78:
f9:a1:3e:54:5b:1c:01:56:4d:bf:dd:a2:80:bf:5c:
39:32:e1:87:bd:bf:83:80:76:66:a0:05:b4:ae:df:
d1:46:8b:50:83:e6:9b:73:b3:f3:71:5f:79:7b:bb:
f8:4f:da:bd:4f:00:b9:39:d7:40:f8:dc:46:07:bf:
34:3d:4f:cf:67:a9:71:84:d6:63:d9:27:95:bc:39:
c1:f6:c9:0d:15:54:a0:3b:17:8d:77:d7:f1:ae:45:
20:cb:a5:f6:6a:a7:ab:57:f5:d2:e1:6d:61:54:48:
e5:32:16:18:07:b1:61:27:40:2a:57:2e:48:ea:7b:
ab:56:b7:52:5b:96:dc:95:85:51:3d:88:02:c5:3c:
1f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1C:A2:20:CF:81:31:C9:43:D8:DC:5B:43:0F:37:3A:3A:52:09:BD
X509v3 Authority Key Identifier:
keyid:4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:63:27:ed:3e:a0:ac:3c:d4:f2:59:b5:8c:26:1d:45:23:a4:
38:21:f5:21:74:a9:27:85:4a:b0:fc:36:c8:14:ff:23:0e:13:
c9:20:a9:03:70:0f:de:2c:6e:e0:bb:2d:b6:50:54:27:66:0c:
1d:0c:4e:54:72:a8:f0:23:5f:f2:4a:c4:e6:c0:89:00:96:4d:
e6:a3:90:d4:63:18:12:8e:45:8d:05:f0:15:8d:e7:68:a7:01:
03:a8:0e:36:80:29:e1:84:92:0a:c2:fc:40:06:9c:ad:20:fc:
1a:ff:c3:76:46:1a:e3:c4:b1:70:92:58:4f:ee:6d:26:01:da:
c1:ae:c9:72:91:67:69:be:5d:ed:58:eb:1c:65:b9:cc:81:bb:
3d:db:e2:f7:3e:25:ce:a4:a6:7a:c4:8c:d1:76:72:9c:d4:8f:
47:62:db:dd:59:95:6e:04:cf:6a:5a:ee:e3:1b:bc:41:b4:3d:
5e:e6:29:e1:c2:9e:22:89:14:9c:1a:f5:1f:6b:36:83:12:6c:
a2:c1:61:fc:60:bb:de:73:ba:f7:c1:25:d6:cb:25:f3:2c:2f:
c0:cf:0d:6f:82:a9:5f:6a:42:5c:f4:2e:9e:f9:82:77:31:f6:
02:d0:94:e2:6a:37:aa:db:52:c6:35:8f:7d:9a:cb:7e:04:41:
34:d9:e5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:02 2026 by rpki-client