Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
File: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft (raw, json)
Hash identifier: 7C/GS/B5D3ZvZJNvpORKPiOfh7mKVpGmowoQDeu+Uv0=
Subject key identifier: 18:11:0D:45:CA:28:92:B9:1D:C4:E5:30:E4:7D:5A:CD:A5:B6:D7:A2
Authority key identifier: B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
Certificate issuer: /CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Certificate serial: 019D3865C3DD4B4778D0C98BDEE3A4AF435C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
Manifest number: 120B
Signing time: Sun 29 Mar 2026 07:01:26 +0000
Manifest this update: Sun 29 Mar 2026 07:01:26 +0000
Manifest next update: Mon 30 Mar 2026 07:01:26 +0000
Files and hashes: 1: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl (hash: Y1w0u1lYdpHBoYwuij798IYA+LwuETSp4YENZm0nhqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c3:dd:4b:47:78:d0:c9:8b:de:e3:a4:af:43:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Validity
Not Before: Mar 29 07:01:26 2026 GMT
Not After : Mar 30 07:01:26 2026 GMT
Subject: CN=18110d45ca2892b91dc4e530e47d5acda5b6d7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:54:65:e1:93:8f:ff:b1:57:d4:19:a7:e8:bb:
e7:ba:56:53:9f:a8:d6:e5:80:76:51:8b:a0:68:5a:
81:8b:f5:71:32:2c:59:10:36:75:0a:19:e7:15:f8:
39:95:25:bc:53:66:b5:50:ee:09:3f:20:08:db:03:
f3:a8:86:82:a9:0e:10:7f:af:07:9e:40:5e:db:47:
a6:0c:f2:bd:9f:2f:1c:91:28:a8:df:0b:ca:09:73:
0e:4b:82:ae:de:e1:df:45:fe:b5:77:25:81:b4:ba:
eb:99:b4:ba:45:af:e4:76:33:93:f3:7b:33:64:bb:
6e:60:0c:56:b5:e6:1e:9c:7e:8c:40:bf:fa:2d:a3:
a6:a0:9d:78:ae:60:ae:51:df:f6:69:36:ad:8b:e4:
65:4c:a5:63:99:85:00:ec:f7:2f:ab:b4:d9:50:2b:
3c:3b:08:8b:f1:da:56:3f:05:cd:8a:aa:de:e0:5a:
8d:10:3d:1a:3b:bb:3c:9f:ca:fa:d5:5d:1e:8d:0c:
24:00:33:c8:1b:c4:cd:bf:e0:91:56:9d:f7:02:39:
81:fe:5d:5c:23:09:cc:ae:be:4e:a8:89:0b:7e:9f:
5f:b8:55:81:73:ff:cc:ce:9e:fe:fb:d4:2b:c1:94:
ea:84:ef:0d:6f:39:19:f2:ec:8d:09:99:d1:0d:1e:
f3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:11:0D:45:CA:28:92:B9:1D:C4:E5:30:E4:7D:5A:CD:A5:B6:D7:A2
X509v3 Authority Key Identifier:
keyid:B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:25:8f:7d:a3:d0:1a:7e:c0:d4:47:3a:9c:19:9c:4e:29:eb:
cc:e3:3b:83:d0:6c:22:26:24:b2:3a:e7:d5:4a:07:6b:6b:54:
1f:f8:ef:83:aa:f9:cc:11:47:d4:3f:bc:7e:64:7c:3e:af:33:
0e:18:28:fb:f5:47:d3:43:db:31:09:49:bf:e9:8f:bc:be:80:
a6:43:ca:b7:e7:10:4e:06:98:a6:c7:e9:2a:0c:c9:6a:09:75:
78:a6:64:5d:38:9a:23:ed:8f:5a:28:36:7b:50:1b:ed:76:2d:
79:51:fe:d0:3d:6c:a0:14:a8:1d:a1:0a:11:76:28:7a:75:ef:
98:f5:94:00:89:f4:e8:52:b8:73:cb:3b:b6:26:da:bb:07:07:
8a:3c:55:3a:8f:aa:36:cf:05:b1:74:a0:94:32:f6:48:48:60:
52:2e:e9:66:39:89:20:04:ad:2d:1a:d8:87:69:14:4f:68:62:
bc:ba:87:28:50:e4:5f:59:c7:de:62:c3:2e:75:68:3d:4c:6f:
75:19:76:13:15:8e:bb:24:99:44:51:39:06:55:8a:11:10:9e:
6c:d2:cc:ab:36:a7:3d:94:5b:0a:6e:bb:d4:f5:20:99:7b:c8:
82:2a:95:96:bc:0a:89:9c:0d:f1:97:1b:14:f3:48:2b:0e:4c:
49:60:56:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:38 2026 by rpki-client