Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
File: tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft (raw, json)
Hash identifier: L0pYD+5zxbWpIYGHFU6BAEY4q2oEzUEhGXWJ8axQT10=
Subject key identifier: F0:43:D0:A8:13:F7:44:03:E2:48:86:8C:21:8A:86:B0:F4:0F:1C:C4
Authority key identifier: B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5
Certificate issuer: /CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5
Certificate serial: 019D386552E1B926DE72284BBA049AECF01C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
Manifest number: 0A1C
Signing time: Sun 29 Mar 2026 07:00:57 +0000
Manifest this update: Sun 29 Mar 2026 07:00:57 +0000
Manifest next update: Mon 30 Mar 2026 07:00:57 +0000
Files and hashes: 1: tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl (hash: rT0jQIaApT8BUVMpCY1xC+xNOU01JCl7M+9s5vgsoEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:52:e1:b9:26:de:72:28:4b:ba:04:9a:ec:f0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5
Validity
Not Before: Mar 29 07:00:57 2026 GMT
Not After : Mar 30 07:00:57 2026 GMT
Subject: CN=f043d0a813f74403e248868c218a86b0f40f1cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:03:ec:8c:c3:0e:68:ad:92:d2:05:5b:6d:24:
d1:7d:3e:46:f7:8f:cc:f7:69:67:58:14:1f:08:f1:
4d:1e:5f:f7:8b:c9:4e:00:9b:fc:e4:17:78:ad:c5:
c7:58:00:9b:57:dc:cb:df:66:45:28:6d:8e:96:3c:
6c:e4:0e:c5:36:3f:bd:ae:34:c7:95:29:77:3c:1a:
62:e1:6b:e1:82:82:00:bc:9b:10:e3:fa:dd:ed:eb:
f2:56:5d:de:f7:47:ee:89:7b:7e:30:0e:67:80:2d:
50:3e:73:ee:b4:f8:30:f8:f3:06:4e:f5:1b:f2:fd:
58:f8:3f:26:7b:47:65:7c:5d:21:e8:7c:0b:90:d2:
68:a5:f0:e0:4c:14:fd:1c:22:ce:fe:62:bc:83:05:
7d:72:80:cb:ed:8d:18:b4:f5:fe:b6:04:27:07:84:
db:46:8d:65:67:56:87:3e:d1:b2:da:e9:be:ff:56:
0a:7f:d4:f7:0b:79:68:30:c0:f9:21:65:ee:a2:b4:
3a:19:03:fc:04:d2:a7:9a:ba:3e:77:bd:b2:9a:83:
1e:cc:65:e9:ca:ee:ae:8b:68:a1:b3:98:a3:6d:39:
33:4f:f4:ea:65:ec:cd:30:a0:19:b2:0c:54:8d:ba:
13:0e:40:88:18:b8:13:d0:87:69:10:37:a6:04:16:
74:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:43:D0:A8:13:F7:44:03:E2:48:86:8C:21:8A:86:B0:F4:0F:1C:C4
X509v3 Authority Key Identifier:
keyid:B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e8:1c:fd:21:d1:d8:37:e9:3c:d5:af:00:a6:95:14:e8:46:
4a:66:ba:b4:72:b9:9f:d8:ba:75:da:59:97:52:e9:b8:20:88:
c8:9d:50:ed:21:c6:ea:34:21:c7:da:a8:f0:50:fb:c9:dd:ee:
6f:67:2f:a7:5f:ae:0f:12:03:75:f3:f6:25:75:6f:e2:7c:e4:
e8:25:6c:4f:05:a1:52:e4:11:30:41:d5:80:a6:88:54:d4:ed:
38:17:9e:e0:41:04:36:8a:23:6e:ce:2b:a9:92:ef:e2:ad:97:
38:d5:9b:92:e9:e2:af:08:a0:2f:00:41:0f:2c:96:29:92:c2:
33:04:54:24:bb:a7:0e:7f:f8:08:98:91:8c:14:1e:3b:f5:22:
7d:65:a5:cd:8a:23:62:61:4a:1b:f6:19:85:16:00:f8:80:ea:
70:6a:d5:78:b5:91:4b:f0:3c:a4:26:fc:d9:09:2c:6f:7b:1d:
b7:d6:e9:2a:e3:21:79:28:89:e5:a4:2a:22:7d:05:4f:9d:9e:
0a:48:6c:a4:1c:a1:65:f2:28:28:81:61:03:d5:5e:35:d1:c1:
2a:f0:f7:dd:0e:e6:56:d2:e6:52:ff:da:35:f6:57:b5:ca:da:
5c:4c:8d:87:dc:9d:76:54:81:fb:81:0b:93:91:64:dd:8f:09:
fc:8e:d8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:10 2026 by rpki-client