Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
File: TsVuJbACVuJM2jJN6yGqnRMBX2U.mft (raw, json)
Hash identifier: DYJL8qqsaugVBG+U0IO8A5aCGD7MnAv0HS8xFmR5jTY=
Subject key identifier: 63:B5:9E:10:81:B9:F3:8F:DC:2A:FA:02:F7:0D:DD:7D:D8:D0:46:CB
Authority key identifier: 4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65
Certificate issuer: /CN=4ec56e25b00256e24cda324deb21aa9d13015f65
Certificate serial: 019DCE9920FB0F7D5F0AAF874C55C1AA398C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
Manifest number: 0298
Signing time: Mon 27 Apr 2026 11:00:35 +0000
Manifest this update: Mon 27 Apr 2026 11:00:35 +0000
Manifest next update: Tue 28 Apr 2026 11:00:35 +0000
Files and hashes: 1: TsVuJbACVuJM2jJN6yGqnRMBX2U.crl (hash: ByBao1+Av/6UQY6gQyGjIx0w78B+EjOOVu8qSe0RC6U=)
2: wHDlfBopH7fz7jDzeFXZD4ZkpZo.roa (hash: cPAx2SbQ0v1kqx0TCQ2lzpiQRVAwNSEcLw8CDwp9CuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:20:fb:0f:7d:5f:0a:af:87:4c:55:c1:aa:39:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec56e25b00256e24cda324deb21aa9d13015f65
Validity
Not Before: Apr 27 11:00:35 2026 GMT
Not After : Apr 28 11:00:35 2026 GMT
Subject: CN=63b59e1081b9f38fdc2afa02f70ddd7dd8d046cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:97:76:1b:e0:f1:62:f1:e8:ae:e9:a0:68:
6f:35:e8:3d:64:46:8e:22:cd:cb:f6:69:86:c0:ce:
d6:78:a9:80:56:ec:b2:a4:01:8f:f4:40:ce:a8:e0:
18:a7:2d:29:1c:55:95:36:dd:ef:5a:15:70:47:dd:
1f:98:19:4b:43:50:e5:cd:a4:f7:ca:b2:ab:b6:2b:
43:69:ee:c8:11:40:04:f5:78:96:53:59:bc:f8:72:
29:05:39:1c:6f:27:ef:e1:71:b8:0a:4f:95:ca:b8:
9f:cb:a2:19:ed:98:ed:b3:23:7c:bb:ae:c5:e1:5b:
60:12:7b:84:5b:d6:a8:bb:11:35:a0:b6:a0:5e:23:
c5:38:1f:a6:00:83:a7:c0:fc:8e:79:5b:1d:b8:74:
d2:ff:92:a0:2c:2c:76:a1:b6:68:01:8a:b7:c7:69:
3e:1c:69:62:da:e0:20:7a:e3:be:74:58:db:c2:a0:
74:79:94:6f:9d:03:19:54:15:eb:e2:cb:33:d6:de:
91:36:c8:b2:de:f7:21:fa:22:07:f5:f0:18:ce:3f:
b9:d0:fb:9f:a2:dc:93:04:10:2d:77:4a:e1:6d:2e:
b6:21:b9:76:5b:d1:12:91:ed:a3:76:ed:eb:df:cd:
92:82:fc:de:c6:c0:ac:90:c6:e0:48:43:49:0a:48:
d6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B5:9E:10:81:B9:F3:8F:DC:2A:FA:02:F7:0D:DD:7D:D8:D0:46:CB
X509v3 Authority Key Identifier:
keyid:4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:32:15:ea:b0:ab:85:a5:e6:1a:e7:5b:dd:52:90:fe:0b:a3:
10:34:9e:a2:5b:ab:aa:72:fd:d0:23:6f:fb:5c:41:24:19:a0:
3d:d7:24:5c:3d:d0:88:c8:d1:a5:2a:8f:c9:57:58:03:1d:77:
cf:14:0b:dd:cf:ea:0f:c9:3a:14:30:00:05:1c:ad:5d:50:c5:
47:55:82:0d:c9:6f:1a:e0:1f:45:b5:97:5f:9e:cc:ab:3b:4a:
cb:8e:4a:b8:ba:b2:c3:3d:8f:ad:75:36:f8:a3:4e:59:d2:5d:
a1:7c:52:dc:56:d9:ad:d7:6f:fb:c3:ec:9b:89:89:e4:63:e3:
52:79:77:52:3e:f9:6b:cd:bf:25:5e:0f:91:03:bc:7d:c7:2c:
72:6a:0f:a6:60:fb:ee:ab:16:73:ea:e6:29:a9:5b:5f:c7:b8:
28:63:93:48:0c:2d:5a:64:02:f2:67:e4:fc:57:13:ac:33:7c:
22:94:52:6d:ec:40:30:a7:4e:18:e3:6a:7e:2e:71:1e:60:06:
c7:f7:79:36:6a:c9:b8:db:8b:fb:dd:76:6a:38:ad:11:ec:97:
7e:00:1a:11:79:5b:c4:8a:58:96:d5:db:15:ca:0b:76:8f:13:
5c:41:b5:f8:50:66:13:05:65:fd:f3:13:7e:6a:14:09:45:b8:
dd:82:51:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:31:36 2026 by rpki-client