Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
File: Tm_7mQbuvrofWxpVju1jcvZTzoY.mft (raw, json)
Hash identifier: L1Q4GIeHCf9k8VJh9wWZg5Y57fROEARTEP6U6gh7abA=
Subject key identifier: D8:46:CD:3A:BF:F5:23:5D:B1:FB:D9:E3:14:EC:4C:44:C4:37:B8:BA
Authority key identifier: 4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86
Certificate issuer: /CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86
Certificate serial: 019D38D2E84AE6634F419299EB94C579B512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:00:39 +0000
Manifest this update: Sun 29 Mar 2026 09:00:39 +0000
Manifest next update: Mon 30 Mar 2026 09:00:39 +0000
Files and hashes: 1: Tm_7mQbuvrofWxpVju1jcvZTzoY.crl (hash: ykAI1NOU7mEMbzZsBUsHd3ilNMzsI42O0QJeV0GvmKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e8:4a:e6:63:4f:41:92:99:eb:94:c5:79:b5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86
Validity
Not Before: Mar 29 09:00:39 2026 GMT
Not After : Mar 30 09:00:39 2026 GMT
Subject: CN=d846cd3abff5235db1fbd9e314ec4c44c437b8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3f:8f:a4:84:01:c3:33:1f:b8:03:d7:22:31:
76:56:70:8d:4f:8a:a1:4a:a2:9e:af:36:04:99:07:
fb:fc:3b:38:d4:de:8b:ae:fe:43:d0:ef:8d:c9:8d:
f6:37:5d:ff:ad:7f:75:c0:4b:ec:f1:9b:c3:22:a8:
8d:23:03:a0:a3:80:34:32:21:18:fd:96:c5:c4:2b:
e5:21:56:32:51:30:ae:33:97:f1:eb:8d:b7:52:a0:
39:f3:bd:cc:db:28:1d:3f:83:21:c2:ef:d7:0f:99:
97:8e:19:b0:93:48:d7:b6:c4:4f:84:f6:47:ec:6e:
8e:1d:3e:ab:b7:bb:3e:86:ce:d8:0b:d3:ad:e7:b7:
89:98:fb:2d:9d:0b:88:25:a3:79:77:58:1d:f4:4d:
e0:f4:b4:49:83:8b:2b:88:a5:26:b1:0b:2c:c7:fe:
96:8a:a7:c5:31:2e:8f:a2:69:01:38:ff:aa:b6:b3:
f1:ea:7d:34:e5:a9:93:34:c9:a9:dd:5e:13:10:c6:
7a:8e:6f:19:00:60:07:83:87:ac:4f:14:f2:f8:fc:
72:90:40:eb:9f:10:0d:93:4a:11:39:fc:05:de:b4:
b1:04:08:d3:bc:62:bd:25:da:65:11:cd:fe:e9:2c:
e3:45:03:71:d4:01:a2:97:ab:f3:4c:e6:7d:3e:89:
94:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:46:CD:3A:BF:F5:23:5D:B1:FB:D9:E3:14:EC:4C:44:C4:37:B8:BA
X509v3 Authority Key Identifier:
keyid:4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:47:9a:45:6e:ca:f2:b4:f8:1b:c6:04:d1:96:8b:39:7e:5a:
24:7f:5b:f5:59:5b:ae:64:54:c3:68:31:fc:18:09:1e:23:d5:
08:28:c2:6a:b5:19:b0:d4:03:24:fb:50:60:dc:9b:79:2f:2e:
8f:af:27:75:12:0b:88:c5:bc:a4:bc:17:94:ed:ad:26:aa:04:
d2:70:c6:e8:6b:ed:f6:14:c4:c0:01:32:bf:0d:c9:57:a1:90:
cb:ee:1a:18:4b:61:25:ea:31:4d:6c:5c:3d:c4:ed:0e:9b:f7:
ee:00:86:2d:67:35:53:02:b1:d4:c0:dd:b7:64:8f:0e:cf:ff:
ac:41:b8:59:8e:20:b0:84:6d:e7:bc:7a:72:c5:a9:1a:4d:2c:
f6:d3:16:a3:76:e4:a1:68:59:8b:61:c4:37:6f:e4:2a:f9:44:
6e:2c:b7:d0:06:e6:3c:92:7a:97:0f:99:84:db:1b:27:63:87:
42:18:0c:4c:e6:e7:6f:27:80:01:6a:a4:23:c1:da:a4:d2:50:
de:b1:58:e3:07:0f:e9:7d:f7:4d:57:28:40:4c:b8:a2:ba:c3:
89:0d:51:37:5e:4c:1d:09:88:b0:51:af:46:0a:42:f6:68:cb:
9e:7a:06:1c:8d:49:de:1b:cb:a4:cc:07:14:05:37:25:c4:5f:
57:e7:16:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:02 2026 by rpki-client