Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
File: tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft (raw, json)
Hash identifier: 0F3X2vURAKOS1qjD25j47W78TZOWEU1oW+RFeclTa8o=
Subject key identifier: BE:0D:35:64:58:92:0A:31:0C:9E:3A:BF:37:59:7A:D1:85:BF:06:9C
Authority key identifier: B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E
Certificate issuer: /CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e
Certificate serial: 019D38663E81293B822215128E0132905FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
Manifest number: 0EF9
Signing time: Sun 29 Mar 2026 07:01:57 +0000
Manifest this update: Sun 29 Mar 2026 07:01:57 +0000
Manifest next update: Mon 30 Mar 2026 07:01:57 +0000
Files and hashes: 1: tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl (hash: ehZk4L7eEycFUgI7sa9LqTv87ILO34k8PpOx/fqQo40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3e:81:29:3b:82:22:15:12:8e:01:32:90:5f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e
Validity
Not Before: Mar 29 07:01:57 2026 GMT
Not After : Mar 30 07:01:57 2026 GMT
Subject: CN=be0d356458920a310c9e3abf37597ad185bf069c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:94:d4:8a:30:93:20:b3:db:18:28:b0:63:30:
63:7e:9f:1c:51:70:81:0f:2a:d8:d3:8c:e6:9d:ad:
79:ce:5e:16:a8:3f:41:37:48:3e:67:14:bd:03:df:
59:32:5c:75:e3:f2:e9:ab:ac:71:5b:93:38:3c:92:
85:b1:1a:d2:1a:c2:14:44:04:4b:5d:67:1b:e5:d7:
d6:62:8a:68:f2:f4:95:de:ee:42:b4:58:23:94:7f:
e4:6b:ef:ba:fb:18:23:2a:5a:8f:5e:ce:b8:3b:83:
d6:3d:2c:a3:70:7c:0c:71:cc:94:51:e5:0f:a2:17:
fe:38:b5:d3:a8:b1:6d:6d:8f:1d:dc:21:de:c9:ee:
5a:36:51:53:f3:f4:ba:47:a9:51:8d:36:64:e6:22:
71:f2:48:4d:a5:c8:33:06:1c:22:21:d5:4f:c2:53:
2c:fe:ec:c4:73:05:c9:71:57:81:f0:78:9c:fd:7f:
71:e0:51:0d:6b:d5:ef:d3:a8:56:4b:35:fb:0f:ec:
e8:2b:cd:98:f2:20:9e:a5:20:2c:a4:6c:ea:e2:1c:
8d:96:1f:c3:c6:17:2a:c2:69:f3:48:8a:32:31:4f:
2e:cf:70:bf:f9:a3:4c:f1:e3:e2:6d:14:72:82:c5:
c8:7e:55:8b:e2:19:0b:8c:d0:9c:6e:0d:91:ae:77:
78:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0D:35:64:58:92:0A:31:0C:9E:3A:BF:37:59:7A:D1:85:BF:06:9C
X509v3 Authority Key Identifier:
keyid:B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:9c:9e:11:51:eb:5a:86:dd:e3:82:59:19:34:e3:e9:f7:c6:
af:bf:a6:d6:1f:94:61:04:44:ea:4e:2c:c6:c9:c8:44:83:7a:
23:25:39:0b:b6:15:75:4d:83:90:49:40:72:4f:40:3f:69:28:
3a:1c:0a:48:6c:7e:10:64:96:18:5e:76:84:36:0e:2b:f1:06:
76:a6:1b:35:af:fd:9d:c5:6a:98:d5:c9:4f:32:78:fe:55:b0:
20:8b:48:6a:9b:ca:4c:87:41:9f:e2:b6:ca:ea:97:b2:e2:66:
86:4e:ee:f5:97:26:f9:52:29:21:da:c0:2e:e2:3b:a2:04:df:
8e:1f:d9:a2:54:a4:bb:35:16:fe:c5:d3:45:82:49:b1:b1:f1:
68:df:70:22:ff:93:a1:08:d9:f2:c9:25:6a:1c:21:f4:84:e2:
53:db:77:53:f8:3d:9d:f8:c5:f6:88:91:79:2b:a7:ad:ad:68:
be:89:cc:19:f1:d9:b4:ed:ec:f2:b4:38:dd:d2:46:d2:0b:9f:
8d:d9:ab:c4:e6:2e:fe:b7:74:e9:30:1e:57:8e:8b:2a:13:b0:
a1:9e:ea:66:01:c3:ec:0e:78:70:e2:2e:e0:a5:b8:7c:1a:f0:
d2:89:10:c4:1d:1d:e3:02:ce:8f:14:7c:3a:30:00:ba:5d:a3:
30:e9:6e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:17 2026 by rpki-client