Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
File: TsRiBLT4hZI6pKl4btWsr7HACd4.mft (raw, json)
Hash identifier: xDUVRWuHUkf5Nvi5k59tf4gSo1UH0dGMEr1Rf+5Y94g=
Subject key identifier: CD:13:3B:59:31:76:50:13:61:7D:A5:A3:BF:B1:09:C2:76:46:57:90
Authority key identifier: 4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
Certificate issuer: /CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Certificate serial: 019D37C0713F36BE11BD51DE1049CEC075DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
Manifest number: 0D5E
Signing time: Sun 29 Mar 2026 04:00:51 +0000
Manifest this update: Sun 29 Mar 2026 04:00:51 +0000
Manifest next update: Mon 30 Mar 2026 04:00:51 +0000
Files and hashes: 1: TsRiBLT4hZI6pKl4btWsr7HACd4.crl (hash: pb4mYVijJ16osBPTtdJYaklvNKdUbNcg1+AvrHNmlDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:71:3f:36:be:11:bd:51:de:10:49:ce:c0:75:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Validity
Not Before: Mar 29 04:00:51 2026 GMT
Not After : Mar 30 04:00:51 2026 GMT
Subject: CN=cd133b5931765013617da5a3bfb109c276465790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:99:e4:a1:ed:a0:53:74:b9:8f:7d:1e:11:
00:91:de:64:7b:24:84:42:7d:60:f3:b9:77:55:bc:
30:39:a5:41:32:d3:d7:e4:e6:cc:66:d8:e7:ad:2e:
a0:0b:9a:1b:67:90:db:b7:66:f3:0c:e6:83:a7:4d:
ad:dd:ee:4a:38:1e:b1:ec:54:6a:64:2e:4e:da:10:
70:fd:84:b4:6b:53:69:f1:1b:b2:4c:88:57:58:4b:
38:b9:b3:b0:c3:f0:16:ad:3c:98:aa:99:50:e6:9f:
50:62:5e:b6:8d:c7:dc:80:5b:eb:25:48:e8:da:0b:
af:89:12:d6:19:9c:78:58:a1:c9:56:51:4b:14:d6:
08:cc:c0:4c:27:3b:9d:a2:88:02:6e:50:07:6c:1c:
3d:fe:e9:10:1b:07:06:55:5d:f9:77:ff:9b:65:69:
71:cf:f1:bd:0a:70:59:ac:15:6b:c4:13:9a:cc:5d:
cb:a5:ab:13:ec:56:c6:4e:65:9f:ee:c7:37:b9:26:
83:54:ed:81:70:f2:4d:17:13:ee:97:49:70:0b:11:
35:49:0c:5b:81:d2:db:b9:18:13:12:97:0f:71:98:
53:80:c3:64:2e:3b:da:26:9e:51:c5:50:c9:d6:ba:
3a:7a:56:aa:2d:70:05:1c:b8:47:50:8c:2b:4b:08:
44:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:13:3B:59:31:76:50:13:61:7D:A5:A3:BF:B1:09:C2:76:46:57:90
X509v3 Authority Key Identifier:
keyid:4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9a:3e:ac:d8:54:b1:63:bc:43:ad:e9:bd:9d:31:56:be:bb:
8f:0d:8c:70:6e:b6:69:e3:5c:15:b4:8b:0e:49:e5:00:53:a6:
3b:85:74:d0:27:d2:65:c2:d9:b6:97:77:8d:a6:16:0c:e9:ba:
75:f5:aa:74:89:cd:ac:d9:49:a7:b9:fd:1f:4c:9b:9d:8d:d1:
65:0f:d9:c5:03:69:eb:82:a9:6c:34:44:f6:64:ff:b1:7a:a0:
d2:bf:e8:6a:ad:35:e5:66:48:da:bb:81:38:7f:74:97:ea:45:
ca:12:79:d0:dd:60:2f:da:e7:5c:f8:19:6c:de:59:96:1d:b5:
47:57:99:69:e2:8e:a7:05:47:f2:1c:9b:17:2b:3d:ed:af:26:
24:c3:6c:f8:7f:b0:c4:67:25:76:09:5e:4a:d9:22:d2:50:d4:
d0:c5:77:8d:b5:c5:c1:6c:99:ee:ae:5f:a4:e9:24:89:6d:3b:
b2:ad:33:a0:34:43:7b:8a:f7:86:1e:39:bf:b6:e1:7a:11:3f:
29:87:f5:2d:8b:b3:1e:4d:ae:26:44:1b:d9:f8:8d:1b:fc:20:
cf:70:ea:85:58:0f:4c:8c:e3:f9:09:70:9b:cf:84:d8:07:fc:
40:ea:ac:c7:e1:58:40:5f:75:87:6e:a3:fa:44:25:c4:9d:33:
08:f2:f9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:19 2026 by rpki-client