Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
File: TblS7RzXo4A89Nv9NA6nSWMmi6A.mft (raw, json)
Hash identifier: bTbp1Uclzir9s2LJLiNDYPUsjH+COGHHAqsXPSdQ3S8=
Subject key identifier: 21:07:E3:C9:33:3F:F0:9F:AE:81:38:28:30:40:BC:D7:C5:97:64:B6
Authority key identifier: 4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
Certificate issuer: /CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
Certificate serial: 019D39AE75DA91BE0C030BAAF8F5C69DA45D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
Manifest number: 15DB
Signing time: Sun 29 Mar 2026 13:00:27 +0000
Manifest this update: Sun 29 Mar 2026 13:00:27 +0000
Manifest next update: Mon 30 Mar 2026 13:00:27 +0000
Files and hashes: 1: TblS7RzXo4A89Nv9NA6nSWMmi6A.crl (hash: koeEiRdXQ33chKkcsObiB7ZQsC6gkXwqBf4JR0RCU3g=)
2: VrOdFAUKX1ouwmCsQ9_XlNyNq1s.roa (hash: n2RF1UdtGKXTdxJvkP7iUrdA4Ve98kwr+cqIiG+JbSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:75:da:91:be:0c:03:0b:aa:f8:f5:c6:9d:a4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
Validity
Not Before: Mar 29 13:00:27 2026 GMT
Not After : Mar 30 13:00:27 2026 GMT
Subject: CN=2107e3c9333ff09fae8138283040bcd7c59764b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:32:cf:92:9d:30:ef:d5:64:83:b8:b7:1e:
68:7e:17:1b:f3:f0:ff:be:a9:6c:a6:e5:22:3f:aa:
90:a2:67:cb:67:0f:c9:b2:f5:16:6c:64:22:c6:36:
53:7e:21:44:a5:07:f8:14:8c:44:e8:ef:73:cc:5e:
4c:3a:57:52:3f:28:f0:6a:96:03:78:86:cf:93:5d:
4e:e6:4e:fd:47:b2:87:54:de:9b:82:30:8f:03:4c:
10:bb:93:7c:57:d2:c5:52:dd:9b:33:65:4c:34:c5:
14:ff:81:e5:b4:0e:01:06:59:4a:f8:d1:f7:df:c8:
15:b5:d4:6a:58:cc:51:86:77:f1:16:5e:5f:44:9d:
02:a7:7f:90:16:e4:05:ee:db:cc:7b:0d:b9:62:ea:
82:a2:9f:3f:98:36:f2:a6:a9:be:94:81:ad:c9:b1:
a2:82:66:55:92:44:5f:cf:e5:58:15:aa:16:70:0a:
90:89:ad:94:53:d7:08:02:24:07:8e:de:6a:c3:9d:
be:1c:6e:c8:20:ea:71:d0:f3:56:3d:23:c8:cc:36:
1e:7d:6a:f0:d3:20:f2:e0:fd:dc:a1:09:b9:c1:48:
48:e8:f3:64:8d:c4:1c:a0:10:7a:75:ec:27:76:99:
84:72:14:32:82:42:1a:ce:93:fc:65:b6:51:be:46:
29:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:07:E3:C9:33:3F:F0:9F:AE:81:38:28:30:40:BC:D7:C5:97:64:B6
X509v3 Authority Key Identifier:
keyid:4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4a:8c:5d:d3:0c:50:df:f9:d4:e8:a0:5f:e3:f1:4a:38:2d:
b8:c3:bb:1b:94:68:31:3a:db:39:8b:25:5d:32:5a:16:ca:b5:
2f:66:36:61:35:c5:fc:8a:01:59:07:f7:f3:2d:d8:a8:4a:9b:
89:68:f6:7a:f8:45:36:51:f3:48:49:de:b0:f8:0e:73:d2:d0:
50:3f:9c:41:cb:c9:34:0a:72:73:d1:3f:9d:99:2b:68:c1:e1:
3b:1d:34:96:e7:87:92:7d:d9:93:52:0c:d7:8b:e3:e9:88:71:
c6:6c:23:ab:ce:31:09:29:d8:7e:31:82:e5:04:7f:e8:77:b0:
a4:af:e9:06:3d:f0:2c:be:26:c8:b1:a7:c8:49:82:fb:94:8f:
69:02:a1:ec:eb:d0:b9:04:aa:84:9b:ea:6a:57:b2:8f:88:cf:
6d:d9:2c:8d:35:5e:f3:de:92:bc:a2:5e:b3:a5:50:96:81:7a:
64:00:55:0c:0f:3b:45:ed:d1:84:73:1d:4e:87:64:8a:15:9c:
3a:c6:3e:ed:e8:14:1e:1b:8d:f4:a7:15:58:c8:9e:c0:33:fe:
cd:c6:fc:1f:2f:5d:8c:f0:a2:05:f4:97:cc:53:5b:d7:b3:6b:
8d:85:e6:93:c0:ce:d4:69:29:ff:d7:16:1a:05:82:a9:7f:64:
b7:f5:51:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:55 2026 by rpki-client