Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
File: TVP4paBndE6P43yXwcxLiH7axyA.mft (raw, json)
Hash identifier: T5GQwSF/9y//7P/RhQF7vlEzpZdtkfhOFIoTlmN4sLs=
Subject key identifier: B1:61:CF:C4:0D:53:B0:44:78:94:8F:E8:0E:4A:B4:3B:0F:37:8B:28
Authority key identifier: 4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
Certificate issuer: /CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Certificate serial: 019D38D366ECBB79E623A036460A4B3CD2DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
Manifest number: 17CF
Signing time: Sun 29 Mar 2026 09:01:11 +0000
Manifest this update: Sun 29 Mar 2026 09:01:11 +0000
Manifest next update: Mon 30 Mar 2026 09:01:11 +0000
Files and hashes: 1: TVP4paBndE6P43yXwcxLiH7axyA.crl (hash: uFvxwdB+1ST0+7zxwGbLDAwSfH2Q0S1znR/i5K5L5mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:66:ec:bb:79:e6:23:a0:36:46:0a:4b:3c:d2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Validity
Not Before: Mar 29 09:01:11 2026 GMT
Not After : Mar 30 09:01:11 2026 GMT
Subject: CN=b161cfc40d53b04478948fe80e4ab43b0f378b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a0:30:e6:5e:fc:bb:b2:37:d1:07:75:74:cd:
c8:ac:ab:c6:f9:92:17:6d:44:94:59:ff:a7:87:bf:
80:7a:b5:10:83:d9:50:81:a1:08:dd:50:da:d8:63:
22:69:ea:49:bd:6a:b6:c6:25:d7:b5:db:62:b8:19:
9f:68:7f:b3:ac:01:e3:95:77:c1:7d:e7:1e:ba:ac:
91:1a:46:f6:bd:a1:48:34:fe:1c:90:18:48:75:74:
34:2c:49:80:d5:58:04:bd:93:ba:5a:41:36:2c:09:
fd:52:85:b2:83:7a:eb:62:38:07:a3:6f:b5:9d:48:
fa:23:73:a2:42:82:11:69:a5:dd:05:a9:91:19:e7:
b5:fc:40:79:c4:ab:a8:e1:b8:62:78:d7:8b:e0:5b:
79:99:89:ca:56:44:ad:b4:10:60:6c:28:64:06:54:
6f:2f:e0:c9:49:4a:60:b8:de:9f:71:fd:d2:6a:cf:
69:c6:46:93:2d:11:0e:dc:77:a6:97:14:b5:b6:07:
fe:c6:fc:a5:3d:42:a7:4f:c8:36:d9:29:d5:d4:d9:
0b:21:eb:a5:85:71:fe:d5:94:11:00:81:48:36:a8:
6a:d7:8a:32:68:95:d2:b3:4f:e8:a1:a0:16:46:c1:
80:a0:0b:ba:91:1b:91:0a:3e:30:85:aa:07:ed:4a:
37:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:61:CF:C4:0D:53:B0:44:78:94:8F:E8:0E:4A:B4:3B:0F:37:8B:28
X509v3 Authority Key Identifier:
keyid:4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a2:b1:9b:10:ba:92:b7:67:9b:7c:ba:cc:5b:47:da:d5:cc:
68:4a:5d:35:6b:bb:89:61:b2:ee:5f:dd:d6:64:29:39:55:69:
dc:b1:5e:e7:cf:e5:4c:6f:6e:28:03:f5:30:89:c6:82:48:e1:
75:2e:93:14:a4:1c:e0:f8:a0:04:2a:b9:4d:6c:b5:bf:a1:f3:
bf:f4:ec:1c:b4:58:b4:6e:f6:91:c4:1b:42:f6:f8:97:03:68:
09:d2:78:58:a5:e4:5b:3a:db:64:a1:78:0f:9e:71:aa:f1:71:
c0:bf:e9:df:ef:4a:bc:c5:79:3d:18:1b:11:7d:db:1a:6d:64:
45:24:58:7b:e6:ee:a8:ae:4c:45:55:29:85:30:75:a7:66:ca:
28:67:bb:6e:43:7f:8a:33:f8:f7:c2:16:6f:95:30:f4:8c:50:
9c:be:bb:1b:03:e3:1a:10:3f:33:d8:a3:bf:0f:92:2f:cc:87:
17:b8:1d:5d:f2:53:dc:d4:f1:04:94:e7:47:eb:8f:fc:12:ba:
50:98:41:0d:db:db:53:ba:9a:9b:0b:bc:89:c2:e2:d7:fb:37:
58:2d:6e:2e:99:3f:fd:9e:81:fa:a0:7c:66:07:2c:78:ec:ea:
77:47:7b:c5:0d:15:2d:38:82:b6:d8:73:15:d7:76:43:bd:51:
45:f9:bc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:33 2026 by rpki-client