Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
File: TsVuJbACVuJM2jJN6yGqnRMBX2U.mft (raw, json)
Hash identifier: LMYzJEuC3BuoMwvHDFsJrt/7Ybw+hvP1JcabJZxKr7Q=
Subject key identifier: D0:BF:CD:DD:14:37:54:90:C0:6B:EA:A1:E7:5A:F8:83:13:1A:E2:5A
Authority key identifier: 4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65
Certificate issuer: /CN=4ec56e25b00256e24cda324deb21aa9d13015f65
Certificate serial: 019CE4EC4E1F2D8408327D2FD118C3224270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
Manifest number: 021F
Signing time: Fri 13 Mar 2026 02:00:17 +0000
Manifest this update: Fri 13 Mar 2026 02:00:17 +0000
Manifest next update: Sat 14 Mar 2026 02:00:17 +0000
Files and hashes: 1: TsVuJbACVuJM2jJN6yGqnRMBX2U.crl (hash: B4/lGSi5gwsR8qYjAwKTEZmMjNP5IdB6dP4paLSfOfw=)
2: wHDlfBopH7fz7jDzeFXZD4ZkpZo.roa (hash: cPAx2SbQ0v1kqx0TCQ2lzpiQRVAwNSEcLw8CDwp9CuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:4e:1f:2d:84:08:32:7d:2f:d1:18:c3:22:42:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec56e25b00256e24cda324deb21aa9d13015f65
Validity
Not Before: Mar 13 02:00:17 2026 GMT
Not After : Mar 14 02:00:17 2026 GMT
Subject: CN=d0bfcddd14375490c06beaa1e75af883131ae25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f7:e6:2b:fe:f5:9b:07:c5:dc:f1:83:a1:a6:
57:d3:1c:1a:fd:68:63:a2:35:e1:c2:af:cf:f1:af:
90:71:30:db:61:6d:3b:32:b2:fb:06:92:bd:ec:78:
cf:68:79:59:ae:dc:5c:45:33:06:5c:6d:f7:a8:27:
4e:f7:ce:28:b9:b2:4d:0d:1f:20:c6:64:16:df:41:
81:45:73:20:cc:ce:eb:b9:da:70:6e:d6:e9:38:0a:
b2:b6:ae:7c:1d:e8:09:11:cc:68:4b:26:7e:d4:d1:
1f:1e:d1:f4:2f:30:e1:88:a9:5f:1b:e0:cc:42:ea:
a1:94:a5:b7:ae:16:2e:c6:fe:22:bb:97:b5:00:5c:
f2:0c:bc:f8:8b:21:2c:ac:76:95:93:f6:ad:e8:a9:
d3:94:e2:df:95:d8:37:6a:dd:79:54:d4:db:6d:a4:
6e:6b:7a:b9:0c:0d:e3:49:56:39:66:9c:54:56:e3:
6f:09:07:42:1c:7c:21:5b:9e:19:a1:ec:31:a1:82:
ac:e1:a7:e0:c8:69:85:8d:2d:ab:87:a1:b6:6a:2d:
06:9b:61:2a:82:66:d6:27:db:59:53:31:81:1a:0a:
e5:7f:ce:1f:68:ee:51:67:7d:20:b6:d7:f6:2b:89:
21:0d:01:1a:d1:91:15:04:5e:9a:31:a8:22:1b:3a:
a5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BF:CD:DD:14:37:54:90:C0:6B:EA:A1:E7:5A:F8:83:13:1A:E2:5A
X509v3 Authority Key Identifier:
keyid:4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:79:30:a5:f6:8b:f0:74:50:0b:bf:5d:28:79:d5:eb:d8:d4:
c2:0a:41:d1:64:00:00:41:0e:cf:7e:3d:21:53:08:88:4c:6d:
97:d8:ae:7d:06:3e:61:d2:2e:b8:21:b8:9a:c2:26:cb:a6:6c:
1a:a8:90:15:97:0d:64:74:c0:ff:52:1d:55:f7:7c:53:d1:0d:
4a:2f:7d:ad:e7:01:af:b6:7b:d7:6c:8e:1c:a7:90:98:f9:7a:
1a:a1:15:0c:1e:af:7a:4a:3d:9c:61:f5:4e:69:25:e9:38:15:
bb:a7:22:63:c1:4b:a9:ad:35:ee:77:17:cd:8e:87:70:de:27:
be:8e:e6:56:9a:5b:5a:fc:1a:3c:a0:db:c3:2d:a1:cb:db:e5:
c9:29:43:71:ec:3f:82:31:80:6f:73:fc:8b:b9:02:3e:89:83:
b5:93:75:65:b8:d9:59:f4:c5:2e:2b:cf:5f:94:33:3f:25:2a:
dd:f1:40:4a:f9:91:ef:86:b8:13:f2:cc:e1:0b:f5:91:15:e1:
1e:80:57:98:94:fb:c8:dd:6e:b9:38:f8:dd:ca:61:30:7a:e1:
58:d1:18:93:99:fc:34:58:6e:ff:be:cf:ed:ac:d4:4a:6b:16:
6e:bd:3e:ab:7d:73:ef:8c:db:dc:91:43:8c:4a:d8:6a:cd:8b:
5f:53:dc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:12:43 2026 by rpki-client