Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
File: t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft (raw, json)
Hash identifier: 0rF42n47Kfd/GCDIzLJ1VKEsqCmB7BYKpFk7kHwBMEw=
Subject key identifier: E8:A7:37:F0:0B:F1:59:D8:5B:E8:2E:34:AD:FC:D0:01:01:BD:95:06
Authority key identifier: B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC
Certificate issuer: /CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec
Certificate serial: 019D3866165D2E0D4C33A9487C9B7A7A79FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
Manifest number: 0C34
Signing time: Sun 29 Mar 2026 07:01:47 +0000
Manifest this update: Sun 29 Mar 2026 07:01:47 +0000
Manifest next update: Mon 30 Mar 2026 07:01:47 +0000
Files and hashes: 1: t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl (hash: XwHlVKZOtmpwH1Zlujl0y7J/m0a1uJfP3E8yP/wJbzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:16:5d:2e:0d:4c:33:a9:48:7c:9b:7a:7a:79:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec
Validity
Not Before: Mar 29 07:01:47 2026 GMT
Not After : Mar 30 07:01:47 2026 GMT
Subject: CN=e8a737f00bf159d85be82e34adfcd00101bd9506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:eb:b4:db:18:e2:d1:9f:96:fd:10:bd:3e:
60:40:17:29:78:d3:5d:10:dd:17:dd:d6:39:12:b1:
79:f5:d4:9c:ca:c3:0d:a8:51:3a:6b:b2:c0:83:98:
3d:6f:3e:80:09:3d:a6:2a:38:a7:46:58:06:b8:41:
36:eb:e8:64:0b:a3:67:b0:88:96:f9:2f:b6:a4:64:
ea:e4:20:f6:4e:be:81:fa:30:b9:ec:ab:e2:fe:8d:
b1:52:49:83:81:ea:2e:80:97:98:d9:0f:e0:f3:ec:
cc:cf:d8:ab:6e:87:8b:05:a5:17:a8:8e:4b:79:c0:
59:e8:cc:ba:99:df:70:29:6a:e0:8e:80:01:08:fc:
18:70:63:c4:89:dd:f3:94:8b:65:51:8b:d8:16:54:
cd:dd:4e:8b:86:7f:36:b7:7b:5b:ed:79:7e:67:57:
69:69:c0:67:bb:b2:50:9e:62:f5:6b:15:08:03:00:
ba:c7:2c:b6:0b:ab:e7:ee:e3:22:a9:b7:13:01:8b:
e5:a3:4d:aa:29:9b:01:ec:c4:3e:09:74:5f:58:1e:
7f:25:bf:c2:07:9c:32:5d:5a:e6:c6:ed:83:6f:7c:
45:70:88:f7:7a:f8:10:36:f4:5b:16:1a:1c:5f:2f:
69:98:d5:54:29:55:a3:1d:1d:c4:2a:d6:f3:57:7a:
fa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A7:37:F0:0B:F1:59:D8:5B:E8:2E:34:AD:FC:D0:01:01:BD:95:06
X509v3 Authority Key Identifier:
keyid:B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ac:6c:6b:9a:f3:63:6f:00:a6:af:a6:a3:e3:5e:b4:5e:92:
61:09:ac:16:31:71:f5:52:a6:54:a5:a3:a1:1a:1d:bf:a9:7c:
b2:de:d9:01:2f:1b:ee:cf:94:b4:97:1c:35:e0:dd:6a:4c:15:
dd:76:94:fe:b3:2e:28:44:b5:6e:b7:e6:34:94:cc:29:46:a9:
1f:fc:df:7e:72:ad:32:65:d2:3c:61:5a:f2:1b:60:94:18:28:
a2:4d:63:dd:58:f6:d0:5d:b6:f3:8f:fa:63:27:7d:e4:e4:59:
9c:a1:08:a6:eb:6c:75:1c:60:c7:af:72:7b:ca:1d:21:44:44:
9a:a1:b1:17:cf:24:b5:55:ce:c1:e3:15:d7:94:bb:07:98:09:
42:40:32:e7:56:8c:52:04:15:b2:05:f6:46:94:2b:88:c7:c8:
63:5f:1a:43:fe:ed:dc:c7:6b:3b:29:e7:8e:e1:7e:95:52:66:
18:38:bd:44:da:a9:ac:5b:a4:4c:d0:12:4b:ac:27:bd:17:71:
fd:4d:11:41:97:59:ea:e8:b4:d3:f7:19:30:eb:b2:d1:6d:8f:
a3:53:c9:c2:2a:13:b7:33:9e:2e:96:7a:42:5f:16:bd:ad:89:
fa:49:e8:ca:82:7f:c4:06:47:9d:39:ed:b0:71:a2:0d:4a:65:
6b:0e:1c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:14 2026 by rpki-client