Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
File: TVSL_7MhSZGpynyfD1tIVFiLl14.mft (raw, json)
Hash identifier: 2mzKoUvMZW0tebtE4kUa5j6GuTbpJfjIfZ34Ru9kWR4=
Subject key identifier: F5:5A:CE:07:ED:84:E4:3D:FD:90:E1:16:A2:91:34:67:F2:9D:59:22
Authority key identifier: 4D:54:8B:FF:B3:21:49:91:A9:CA:7C:9F:0F:5B:48:54:58:8B:97:5E
Certificate issuer: /CN=4d548bffb3214991a9ca7c9f0f5b4854588b975e
Certificate serial: 019D386646200CD2DD8F99F56D6C4CDEFFDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
Manifest number: 0971
Signing time: Sun 29 Mar 2026 07:01:59 +0000
Manifest this update: Sun 29 Mar 2026 07:01:59 +0000
Manifest next update: Mon 30 Mar 2026 07:01:59 +0000
Files and hashes: 1: TVSL_7MhSZGpynyfD1tIVFiLl14.crl (hash: efcJeZmBMYvCQha888b2CovcYZ+dTDRwSXDP9rX5pm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:46:20:0c:d2:dd:8f:99:f5:6d:6c:4c:de:ff:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d548bffb3214991a9ca7c9f0f5b4854588b975e
Validity
Not Before: Mar 29 07:01:59 2026 GMT
Not After : Mar 30 07:01:59 2026 GMT
Subject: CN=f55ace07ed84e43dfd90e116a2913467f29d5922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f0:5b:6d:ba:e2:e6:49:ca:50:fa:03:49:00:
39:8d:d7:50:29:8a:eb:b5:6f:2c:76:00:79:1f:80:
0e:1c:05:ea:c6:47:e4:8b:6a:d8:b0:ae:f6:52:08:
64:bf:42:57:cf:ab:ce:86:8e:fe:da:68:48:6b:64:
7c:73:43:27:c8:d7:c7:f2:5a:48:f1:19:62:41:db:
49:72:f9:b3:62:ba:2d:1e:f0:69:e8:ce:9e:94:40:
46:01:fb:02:8b:4e:00:86:10:c1:7f:55:5b:b3:34:
2f:c4:97:46:76:a5:6f:3a:db:66:41:26:72:ad:46:
a9:03:b2:b9:4c:ab:df:39:86:6c:44:a3:10:6f:53:
f1:80:c3:bf:89:3e:26:15:04:5b:08:53:0a:05:37:
ff:17:92:51:49:e4:f3:df:76:4c:05:de:55:8a:c9:
09:04:8a:03:1f:3e:60:f9:33:f8:3d:8c:11:ab:e0:
4e:e8:9d:bd:dc:f3:2c:84:0e:fe:d2:75:fd:b1:07:
52:cc:86:2d:3e:ee:e8:15:82:bd:f9:ea:19:9b:e5:
2c:42:3d:4e:de:3c:7e:33:42:d8:8e:da:0b:0f:a8:
f2:02:1e:75:db:1d:f8:aa:f6:dd:f8:5a:9f:69:19:
4d:44:f6:0c:fb:63:cc:0f:18:5a:49:0e:b5:15:8f:
85:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5A:CE:07:ED:84:E4:3D:FD:90:E1:16:A2:91:34:67:F2:9D:59:22
X509v3 Authority Key Identifier:
keyid:4D:54:8B:FF:B3:21:49:91:A9:CA:7C:9F:0F:5B:48:54:58:8B:97:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:de:be:4c:64:b0:64:25:55:b0:70:7a:dc:f4:d9:23:49:8c:
23:7f:24:a5:00:1a:0a:fa:43:4c:59:d0:30:d8:6c:1d:86:87:
f4:9b:66:56:0f:5c:bb:f4:a0:35:11:e7:54:93:97:cf:70:aa:
b4:0a:7c:ce:e7:fc:c4:91:c8:6c:60:42:0e:f0:77:9c:3f:ef:
ff:ff:c4:93:c6:75:00:15:8a:37:62:00:98:ee:9b:f3:d0:cc:
24:c3:bc:03:14:83:c4:9d:ee:cc:ee:96:bc:10:cd:dc:89:59:
ec:47:d6:92:51:0c:58:91:a1:9e:3b:54:50:80:bb:9d:4e:3e:
9d:96:0b:0e:4a:e4:dc:06:e6:5a:13:7c:2d:61:66:78:e4:0d:
62:10:6d:a9:12:55:b5:98:02:ad:f8:76:82:f5:a3:d0:4f:6d:
79:98:b8:92:14:04:cd:1f:38:9b:45:42:95:9a:d2:56:20:c4:
07:68:d6:3c:6a:ff:2c:e2:e8:81:28:df:34:1a:cc:9e:9d:e0:
51:de:79:20:ba:23:c3:b0:c8:40:d3:95:38:5c:4a:fe:37:01:
c3:8a:5f:74:84:ac:10:cd:0a:87:bb:13:b5:56:5a:91:7c:24:
71:85:ab:9b:05:c6:99:ca:24:21:d9:8f:af:0e:5a:5c:08:9f:
ef:7e:b0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:18 2026 by rpki-client