Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
File: TnKscetFB6wKZSpUWY2uRR_jP0c.mft (raw, json)
Hash identifier: tyqBbW4svph1CA6MTSBXhOAc47iOuIFCqbT8Id91/+k=
Subject key identifier: E5:3B:AB:20:A6:0B:23:E2:E1:28:05:62:24:50:65:34:0B:D3:2A:C7
Authority key identifier: 4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
Certificate issuer: /CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Certificate serial: 019D38D3CF940B3D8EE382F864215373B7F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
Manifest number: 15BB
Signing time: Sun 29 Mar 2026 09:01:38 +0000
Manifest this update: Sun 29 Mar 2026 09:01:38 +0000
Manifest next update: Mon 30 Mar 2026 09:01:38 +0000
Files and hashes: 1: QE8bcggi0VZyHRPBfYdhoFDqJM8.roa (hash: wboN+pw+KvvkFtiFgOQIE2+tkc1MrMcN64l5TflOk5g=)
2: TnKscetFB6wKZSpUWY2uRR_jP0c.crl (hash: l605BIjRPeJkhP4udPfo5UUDWpoUNi7G/MrxgvKSz5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:cf:94:0b:3d:8e:e3:82:f8:64:21:53:73:b7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Validity
Not Before: Mar 29 09:01:38 2026 GMT
Not After : Mar 30 09:01:38 2026 GMT
Subject: CN=e53bab20a60b23e2e1280562245065340bd32ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:73:5c:ba:a0:8b:c2:be:88:76:c7:ae:8b:
f9:04:5a:84:e8:39:40:6d:be:46:9d:3f:55:e8:6e:
8d:e6:67:89:cc:85:71:5c:e5:0d:2d:01:19:24:e7:
c4:35:be:de:1e:7a:b5:97:8f:c7:6f:32:ed:ea:68:
68:d7:25:83:0f:b7:84:63:67:c1:5c:43:15:36:38:
13:9a:3a:41:96:21:d0:a2:89:8a:ff:a5:52:3e:e2:
72:60:d2:61:09:e4:7e:8a:6d:e1:0c:22:77:91:2b:
cd:c6:64:f9:a1:f8:3b:ac:a9:ef:00:bc:10:9d:43:
1d:7b:b8:82:6b:99:12:18:5a:b1:b8:b5:80:22:a5:
28:d0:1f:92:02:ab:93:a8:47:56:30:3b:b9:c9:93:
e3:a1:1a:6f:67:72:5f:ec:4c:3b:20:97:fa:e7:69:
a8:98:c5:9b:c0:5e:7c:f0:b0:ed:7e:73:0d:06:9e:
fd:28:56:44:7b:42:62:ef:98:3a:00:28:dd:f0:34:
32:d0:e2:11:e5:ef:8a:d8:8d:b7:ad:1f:ba:f6:fa:
6a:e9:f2:19:41:f8:21:be:fa:7e:61:d3:fc:0b:4d:
b4:8a:5d:6f:4c:80:c0:ec:24:c5:ba:6e:6f:3a:9a:
8c:ab:cc:7f:b7:e2:0d:fd:79:aa:d0:7f:c5:b5:9c:
d6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3B:AB:20:A6:0B:23:E2:E1:28:05:62:24:50:65:34:0B:D3:2A:C7
X509v3 Authority Key Identifier:
keyid:4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:8d:19:35:ca:4d:e4:72:55:7e:a5:34:d5:98:3b:c9:a9:ab:
93:28:51:ec:1c:69:ee:15:e7:66:46:ce:18:b5:52:bc:2e:b6:
41:dc:63:67:a6:6f:a4:c7:f5:4e:78:28:d8:93:bc:7e:fe:2a:
99:60:f7:2b:0f:1e:81:1e:22:fd:7b:e0:d8:15:40:ca:9d:38:
9e:28:3b:5b:a9:1d:e9:7c:6e:74:f9:67:24:bb:ed:63:a2:57:
69:b8:07:5d:7c:a5:e2:2c:ce:2e:dd:07:5a:ab:a4:e2:91:f7:
a7:c4:be:92:4a:c5:6f:a7:68:ed:7b:07:b1:63:44:f1:42:82:
65:37:fa:87:b5:95:b3:f4:f8:95:d7:94:c2:1d:6d:2d:7f:bc:
0e:9b:9b:2e:d1:af:4e:27:00:73:9a:b2:2a:7b:91:c4:92:9c:
40:14:a5:2d:70:07:f9:eb:33:64:d0:4c:1b:26:9c:88:3c:17:
4a:ef:b1:15:16:b6:2e:c6:71:4f:2d:7d:a3:e5:af:59:86:3d:
93:d4:47:92:fa:30:96:2e:06:d8:ce:ec:17:e1:20:4f:98:db:
8a:f3:c3:39:8d:02:31:bb:ce:ec:c0:8d:2a:35:65:62:2f:e1:
dd:4c:c2:0f:83:8a:d4:20:1d:54:4a:6c:75:bc:30:41:6c:23:
b8:d4:5e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:52 2026 by rpki-client