Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
File: tt41SvltyILzXBLU9fpnUHY6tyA.mft (raw, json)
Hash identifier: EzYpW7HLq4jB08X/Xqr5buUlxG/Vq4NkXhlMOfF3TqQ=
Subject key identifier: 5D:67:4B:79:58:71:76:0D:3C:B8:97:84:65:9D:40:E4:C3:F2:C9:88
Authority key identifier: B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
Certificate issuer: /CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Certificate serial: 019D38657250173F5E3BDDDD766E003C6CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
Manifest number: 0FB5
Signing time: Sun 29 Mar 2026 07:01:05 +0000
Manifest this update: Sun 29 Mar 2026 07:01:05 +0000
Manifest next update: Mon 30 Mar 2026 07:01:05 +0000
Files and hashes: 1: tt41SvltyILzXBLU9fpnUHY6tyA.crl (hash: LXsRXeveif4eHMfXzy2MoPQATCQJf4UGKN+d+S4D5CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:72:50:17:3f:5e:3b:dd:dd:76:6e:00:3c:6c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Validity
Not Before: Mar 29 07:01:05 2026 GMT
Not After : Mar 30 07:01:05 2026 GMT
Subject: CN=5d674b795871760d3cb89784659d40e4c3f2c988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a9:01:9e:80:ff:d4:39:c7:6c:4e:24:0c:bf:
cb:96:01:14:c2:c9:aa:d1:ff:54:65:ae:54:e0:e2:
ed:fd:75:09:fb:fa:46:42:27:da:dd:bd:c5:a0:a6:
7d:aa:99:14:a3:61:f4:de:b8:f7:c9:7b:21:0e:3c:
19:84:39:75:e7:fa:2e:e4:7d:e1:1a:d1:70:86:84:
1f:58:f7:05:c1:6b:be:a4:f2:4f:8b:b3:1d:a6:e9:
17:f4:7e:93:77:86:de:94:a0:26:1f:b0:7b:76:5a:
97:cc:30:f2:c0:c3:5c:99:05:c1:7a:af:fd:8b:52:
e2:83:5e:aa:78:59:f5:95:fb:42:f0:bc:10:19:00:
f8:4b:dd:9f:fd:d8:6b:ed:60:b4:8f:e7:51:36:d9:
db:75:d4:bb:73:0f:ea:80:f7:93:ca:bc:22:28:5d:
98:f0:ff:6d:e5:33:30:e7:f4:29:8e:f9:37:82:df:
14:b8:c3:c5:cf:2d:71:ba:10:bb:39:36:7b:ee:6c:
35:d9:56:3f:b8:c1:07:53:1e:d4:5a:4d:ec:e6:74:
7a:ab:71:7c:14:5d:6a:99:88:7a:be:fe:c4:1d:16:
4c:6b:63:4c:9d:4b:e6:72:20:d7:e6:52:79:6c:51:
27:b9:70:b5:e7:c9:14:dc:5f:b0:17:08:dd:d0:ad:
0d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:67:4B:79:58:71:76:0D:3C:B8:97:84:65:9D:40:E4:C3:F2:C9:88
X509v3 Authority Key Identifier:
keyid:B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:98:e9:81:7e:da:fc:bb:6d:95:33:ef:51:c4:53:3b:63:0b:
27:7e:ed:5f:48:8f:50:a7:ca:3b:dd:c9:bc:a6:63:6a:63:5a:
cb:a8:bf:66:08:29:44:dd:ab:2c:e5:47:06:13:36:8e:92:0b:
ac:e2:22:85:6f:8b:e2:7a:95:94:7e:6a:f2:5b:a0:8a:f1:e9:
ea:e1:77:32:ed:88:d9:50:c1:9e:5c:e3:38:2e:12:97:0c:ce:
1f:2b:42:8c:58:36:16:3e:b9:a6:8b:f9:00:9a:1e:40:6c:de:
81:c1:d6:2c:e9:ec:7c:1f:15:47:37:8d:b4:d5:7b:13:ce:b2:
1a:b7:76:c7:e0:ba:1c:67:d3:d6:04:00:c6:c6:8f:59:b0:da:
6f:8b:98:bb:95:c1:05:f8:69:25:9d:71:35:1b:c2:c2:e7:8c:
d8:c7:20:d8:de:73:9d:25:ad:94:04:19:98:20:06:90:99:5d:
18:f9:90:de:d9:62:c5:ff:00:95:6a:9c:5c:2a:7f:12:8e:9e:
f4:3b:b6:98:c2:90:e3:34:99:14:dd:62:c9:90:42:95:a8:06:
5d:9a:87:e5:b3:b6:15:ea:b8:cd:c0:9b:0b:30:57:a3:d1:39:
20:38:75:95:b8:ac:d6:e9:f7:85:ee:64:56:0d:66:cd:7a:4c:
3a:ea:2c:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZXJQFz9eO93ddm4APGzlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZGUzNTRhZjk2ZGM4ODJmMzVjMTJkNGY1ZmE2NzUwNzYz
YWI3MjAwHhcNMjYwMzI5MDcwMTA1WhcNMjYwMzMwMDcwMTA1WjAzMTEwLwYDVQQD
Eyg1ZDY3NGI3OTU4NzE3NjBkM2NiODk3ODQ2NTlkNDBlNGMzZjJjOTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKkBnoD/1DnHbE4kDL/LlgEUwsmq
0f9UZa5U4OLt/XUJ+/pGQifa3b3FoKZ9qpkUo2H03rj3yXshDjwZhDl15/ou5H3h
GtFwhoQfWPcFwWu+pPJPi7MdpukX9H6Td4belKAmH7B7dlqXzDDywMNcmQXBeq/9
i1Lig16qeFn1lftC8LwQGQD4S92f/dhr7WC0j+dRNtnbddS7cw/qgPeTyrwiKF2Y
8P9t5TMw5/Qpjvk3gt8UuMPFzy1xuhC7OTZ77mw12VY/uMEHUx7UWk3s5nR6q3F8
FF1qmYh6vv7EHRZMa2NMnUvmciDX5lJ5bFEnuXC158kU3F+wFwjd0K0NZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1nS3lYcXYNPLiXhGWdQOTD8smIMB8GA1UdIwQY
MBaAFLbeNUr5bciC81wS1PX6Z1B2OrcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHQ0MVN2bHR5SUx6WEJMVTlmcG5VSFk2dHlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82ZTAwMGUtZTc1NS00N2U2LTk5YTgt
MzU0ODcxYTg1YzdhLzEvdHQ0MVN2bHR5SUx6WEJMVTlmcG5VSFk2dHlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82ZTAwMGUtZTc1NS00N2U2LTk5YTgtMzU0ODcxYTg1Yzdh
LzEvdHQ0MVN2bHR5SUx6WEJMVTlmcG5VSFk2dHlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5jpgX7a
/LttlTPvUcRTO2MLJ37tX0iPUKfKO93JvKZjamNay6i/ZggpRN2rLOVHBhM2jpIL
rOIihW+L4nqVlH5q8lugivHp6uF3Mu2I2VDBnlzjOC4SlwzOHytCjFg2Fj65pov5
AJoeQGzegcHWLOnsfB8VRzeNtNV7E86yGrd2x+C6HGfT1gQAxsaPWbDab4uYu5XB
BfhpJZ1xNRvCwueM2Mcg2N5znSWtlAQZmCAGkJldGPmQ3tlixf8AlWqcXCp/Eo6e
9Du2mMKQ4zSZFN1iyZBClagGXZqH5bO2Feq4zcCbCzBXo9E5IDh1lbis1un3he5k
Vg1mzXpMOuosOg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:24 2026 by rpki-client