Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft
File: TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft (raw, json)
Hash identifier: b82N6eKbZa/Szw6iwNDHwIZ3lCmFF2eH6F78IiR7/C0=
Subject key identifier: D5:D1:6E:ED:D8:EE:88:19:8B:51:B9:6C:C3:24:C2:10:31:FC:9F:45
Authority key identifier: 4D:2C:24:53:D0:07:91:CF:F1:33:2F:A7:1C:FB:5D:A3:6A:A0:0A:0A
Certificate issuer: /CN=4d2c2453d00791cff1332fa71cfb5da36aa00a0a
Certificate serial: 019D37F738DE754CBC4D0EE4FB17639ECC7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSwkU9AHkc_xMy-nHPtdo2qgCgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft
Manifest number: 0235
Signing time: Sun 29 Mar 2026 05:00:41 +0000
Manifest this update: Sun 29 Mar 2026 05:00:41 +0000
Manifest next update: Mon 30 Mar 2026 05:00:41 +0000
Files and hashes: 1: TSwkU9AHkc_xMy-nHPtdo2qgCgo.crl (hash: NETtdofWv4Bf88X71kudqUbnQchRLUVKbs12dkdoWEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSwkU9AHkc_xMy-nHPtdo2qgCgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:38:de:75:4c:bc:4d:0e:e4:fb:17:63:9e:cc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2c2453d00791cff1332fa71cfb5da36aa00a0a
Validity
Not Before: Mar 29 05:00:41 2026 GMT
Not After : Mar 30 05:00:41 2026 GMT
Subject: CN=d5d16eedd8ee88198b51b96cc324c21031fc9f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:80:74:f3:aa:90:1c:80:25:cd:84:12:7f:
09:0d:88:c1:f1:82:40:31:0e:ca:70:47:9c:9c:03:
4b:a5:4e:ce:5b:39:dd:c4:50:d4:16:ff:64:88:1f:
83:17:6e:f2:62:f6:33:23:87:7e:43:ee:20:93:93:
c8:e7:34:03:73:c9:3d:0c:6e:6c:f2:d3:33:db:79:
2b:f4:4f:30:16:dd:7f:76:53:ec:cb:41:04:52:a3:
8d:eb:f2:70:81:e8:74:c7:68:9e:ef:09:4b:8a:62:
be:70:03:bd:d7:80:30:5c:e5:8a:bb:50:58:f5:5a:
cc:6f:94:ca:a6:e9:8e:db:44:77:a8:03:16:4e:7a:
99:8c:97:8d:7a:d1:88:6e:40:67:da:c5:68:aa:4c:
4f:ac:e1:96:f9:96:79:4d:34:ae:77:fe:2b:e1:59:
f4:85:9d:c1:84:64:b8:17:f8:b4:44:49:85:d5:eb:
db:50:82:3f:85:68:84:4a:9f:d4:66:02:b2:1c:e7:
46:24:c7:53:4e:1a:63:58:44:1b:9f:a5:6f:94:4c:
d5:34:5e:5b:76:22:dd:ab:4d:f3:01:0f:93:31:5e:
45:07:2a:a9:21:aa:9b:be:12:78:27:26:8d:ea:67:
b9:79:b2:3e:06:cc:90:aa:e2:12:a4:b5:37:3c:70:
ad:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D1:6E:ED:D8:EE:88:19:8B:51:B9:6C:C3:24:C2:10:31:FC:9F:45
X509v3 Authority Key Identifier:
keyid:4D:2C:24:53:D0:07:91:CF:F1:33:2F:A7:1C:FB:5D:A3:6A:A0:0A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSwkU9AHkc_xMy-nHPtdo2qgCgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:24:40:d2:f2:12:32:d7:25:86:b4:5a:53:93:df:15:60:b8:
a5:8c:59:86:5a:d5:31:5f:48:5b:7c:f1:63:7a:60:ab:80:2a:
c0:b8:e0:7c:e1:1e:4d:34:f4:51:bb:3e:7d:82:31:12:c1:53:
0d:d5:3d:80:ce:dc:e5:01:b5:7c:60:6f:cb:f0:d2:14:00:92:
03:a5:66:73:f6:15:42:76:69:d7:0d:b7:ee:69:96:85:97:08:
80:7c:29:50:53:40:1f:1a:4c:e6:0d:5a:e0:d8:99:a2:63:1e:
7f:d9:99:90:b8:19:f5:ef:d4:9a:00:80:f1:d5:c6:43:3c:5c:
d0:3e:59:d0:ce:87:fb:08:af:3b:08:49:56:98:f8:56:3f:e9:
0a:df:52:9b:af:00:dc:a7:a6:bd:1c:18:91:08:ba:db:4e:9a:
fa:b5:2b:42:60:04:1c:26:d7:38:68:42:b5:df:ea:2f:47:4d:
ac:af:ba:7e:fb:5d:1b:0c:8d:5e:22:80:f9:87:96:8c:e5:a9:
94:7f:3a:7d:42:b0:8d:4e:b4:86:a1:aa:17:ad:3e:c2:c2:85:
05:a1:a6:80:4b:df:b4:95:45:14:33:13:96:ce:c2:d8:c5:44:
46:0b:1d:1f:f6:38:ce:f4:e2:cb:03:85:94:47:56:02:f9:25:
0d:c5:a3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:31:46 2026 by rpki-client