Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
File: TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft (raw, json)
Hash identifier: hdU7dmWMrYn9JZ6ywMwg8Ql0a0CglVKqsHJQ+FbyTO0=
Subject key identifier: D0:65:63:54:7C:16:E2:49:6B:02:52:2A:3A:40:00:82:E1:B2:7A:0E
Authority key identifier: 4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
Certificate issuer: /CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Certificate serial: 019D382DF134D68F9647958A37B89FEDEA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
Manifest number: 0293
Signing time: Sun 29 Mar 2026 06:00:27 +0000
Manifest this update: Sun 29 Mar 2026 06:00:27 +0000
Manifest next update: Mon 30 Mar 2026 06:00:27 +0000
Files and hashes: 1: LnjNGcMyH3MeERFj_pC3gRzTFnU.asa (hash: qASxAPP9ucQL4oyglFA6dDLN1CVjgDXdRMKgSKCNRhg=)
2: TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl (hash: wtmGCdwEKAyhhfcAJ1oI5guYq1w+GngUPQ0IJ+U3dJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f1:34:d6:8f:96:47:95:8a:37:b8:9f:ed:ea:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Validity
Not Before: Mar 29 06:00:27 2026 GMT
Not After : Mar 30 06:00:27 2026 GMT
Subject: CN=d06563547c16e2496b02522a3a400082e1b27a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3b:4a:79:9f:63:b4:8f:33:f0:eb:20:2a:6e:
cf:3f:57:4c:f2:dc:4b:f4:6d:e6:42:0c:bc:8c:e6:
0b:de:dd:0d:a7:64:13:26:d8:39:0f:12:e4:6d:0f:
d1:6c:49:e8:1c:c1:e6:ca:58:d6:8f:e0:3e:9c:96:
33:19:24:ef:cd:67:b3:60:79:17:69:5e:d9:f3:a7:
c2:52:ed:86:45:d1:a3:d4:0b:08:eb:88:bf:c4:46:
27:7a:1c:fd:e1:f2:2a:30:da:e8:47:e9:84:1c:2e:
a4:8b:64:14:4b:34:61:a4:ba:64:b8:e9:4b:cc:1a:
d9:0d:4f:53:bf:df:af:15:61:54:1c:d3:68:b4:bc:
2f:f1:8f:1c:00:48:4e:f1:75:2c:da:ff:21:77:48:
5d:aa:15:dc:6d:3a:18:60:c1:78:8a:84:9e:5c:a8:
fc:78:d5:f4:70:7e:3d:f9:ce:20:f8:f4:57:6d:aa:
a3:76:e8:d5:aa:35:83:a7:dc:96:93:29:3b:6d:26:
68:ce:32:f0:a6:e9:5e:72:95:91:13:de:a4:91:66:
b1:a4:71:b1:08:03:8f:cb:5b:8f:51:ca:90:e3:71:
f8:94:cc:2f:6e:35:53:b6:45:b9:1f:39:63:8f:ca:
2c:f3:a6:0f:e4:71:ef:e4:a6:1a:a2:63:bf:77:18:
ff:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:65:63:54:7C:16:E2:49:6B:02:52:2A:3A:40:00:82:E1:B2:7A:0E
X509v3 Authority Key Identifier:
keyid:4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:61:40:8f:1b:53:5a:56:50:b3:ba:53:34:37:95:8a:58:eb:
b3:a5:7e:33:d4:59:71:e6:b7:84:5e:f9:31:c1:96:62:bf:fe:
1c:4b:7b:db:bf:91:5e:5f:cc:0e:9d:09:ad:1c:aa:14:7e:25:
88:c5:63:6b:ba:a3:7f:7b:b4:5f:11:15:aa:64:bd:c3:12:3b:
c3:94:11:ea:32:d6:0b:fc:eb:a2:18:2e:66:5e:29:dc:2f:7f:
2f:f7:a3:0d:ef:a3:f2:97:a8:88:67:f9:df:b9:eb:84:b6:19:
e4:65:2f:e0:e2:68:f5:3c:9f:8f:d1:9b:b2:9a:04:3a:04:7d:
1f:1f:33:14:d0:a3:86:7e:6f:80:36:5a:35:3b:3d:ba:62:2c:
10:d9:4c:6c:f5:06:5a:d3:8b:50:4f:c5:66:86:ac:35:53:29:
0e:02:33:44:c7:37:0d:60:e5:4e:6e:ad:97:34:3f:a2:0b:c1:
00:c9:19:e6:a9:79:e4:7a:52:c2:a8:61:b8:d2:18:8e:57:03:
5f:ff:38:fc:18:9f:fe:2b:de:e8:0f:36:c8:e0:49:52:ab:16:
f6:4b:85:40:cd:74:8d:0e:9a:01:76:17:78:c6:7a:3c:dc:91:
83:b0:43:36:08:34:c4:7f:e4:34:78:fa:73:a8:59:44:10:de:
7a:90:9d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:06 2026 by rpki-client