Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/209544-7bf2-4e13-87e6-be026bf67163/1/ty37EnJ-RgDKLwGRt9GgI1MucsA.mft
File: ty37EnJ-RgDKLwGRt9GgI1MucsA.mft (raw, json)
Hash identifier: fxmqQnoS4jy7Uo3cNBm+7R4/HdehE1XFb+kLs0ITNOo=
Subject key identifier: 96:66:8C:D1:E7:B7:92:9F:93:23:43:15:E8:36:9C:3F:6F:7B:A5:48
Authority key identifier: B7:2D:FB:12:72:7E:46:00:CA:2F:01:91:B7:D1:A0:23:53:2E:72:C0
Certificate issuer: /CN=b72dfb12727e4600ca2f0191b7d1a023532e72c0
Certificate serial: 019D38D2B32404679FB20637645E8D60FB6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ty37EnJ-RgDKLwGRt9GgI1MucsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/209544-7bf2-4e13-87e6-be026bf67163/1/ty37EnJ-RgDKLwGRt9GgI1MucsA.mft
Manifest number: 2D
Signing time: Sun 29 Mar 2026 09:00:25 +0000
Manifest this update: Sun 29 Mar 2026 09:00:25 +0000
Manifest next update: Mon 30 Mar 2026 09:00:25 +0000
Files and hashes: 1: ty37EnJ-RgDKLwGRt9GgI1MucsA.crl (hash: aK0tb1LFOk1CIbqpxb0JKLB4iHiIVXXXOogL0+Ofrys=)
2: vzqHQtSs2Ll17kIhzu7i4Fx0bM4.roa (hash: 4hxhXTGo/RdAHHLFg4G4QRq2OAlSa5hX9QYk/Am2sj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/209544-7bf2-4e13-87e6-be026bf67163/1/ty37EnJ-RgDKLwGRt9GgI1MucsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/209544-7bf2-4e13-87e6-be026bf67163/1/ty37EnJ-RgDKLwGRt9GgI1MucsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ty37EnJ-RgDKLwGRt9GgI1MucsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b3:24:04:67:9f:b2:06:37:64:5e:8d:60:fb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72dfb12727e4600ca2f0191b7d1a023532e72c0
Validity
Not Before: Mar 29 09:00:25 2026 GMT
Not After : Mar 30 09:00:25 2026 GMT
Subject: CN=96668cd1e7b7929f93234315e8369c3f6f7ba548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:33:a0:f1:91:40:f8:38:73:66:1d:59:6a:0c:
a8:d7:67:22:f7:48:18:82:c4:db:61:08:07:6f:bb:
56:54:73:85:d5:0e:3d:ad:05:fe:73:27:69:5d:31:
38:a5:2d:fb:49:67:99:55:c6:92:71:ad:b6:39:f0:
0e:2e:8e:4d:6e:04:f3:fe:0f:39:88:d8:ca:cd:1e:
c5:2f:35:5d:85:16:c2:89:c8:79:d4:92:2f:24:fc:
cb:34:3f:60:8d:df:d7:2d:d7:51:85:e8:9e:da:0f:
fb:b9:25:de:9a:d2:ba:11:f2:4d:4d:2f:ec:84:0a:
f2:1a:41:d9:77:29:1b:53:3e:89:4a:96:d8:4f:db:
0d:44:f7:90:0b:f2:0e:2e:94:25:09:1f:96:35:38:
1c:ff:69:b6:70:91:f4:bc:bf:5c:b5:78:29:7c:98:
2d:cf:72:72:07:da:04:3d:af:bb:e0:7b:f1:3d:5f:
48:ea:ef:51:de:7d:6b:f7:c7:38:22:5c:86:a5:b1:
de:e5:fc:a5:54:38:0e:18:91:59:40:fa:76:9b:f5:
f4:d3:7d:14:ba:fd:52:69:26:f6:bb:f7:09:38:47:
3e:bc:a9:74:e7:ca:9e:43:1f:2c:c7:8b:9f:98:e1:
c2:b4:e4:a7:ef:32:91:2b:48:57:c8:bb:f1:8b:c2:
87:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:66:8C:D1:E7:B7:92:9F:93:23:43:15:E8:36:9C:3F:6F:7B:A5:48
X509v3 Authority Key Identifier:
keyid:B7:2D:FB:12:72:7E:46:00:CA:2F:01:91:B7:D1:A0:23:53:2E:72:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ty37EnJ-RgDKLwGRt9GgI1MucsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/209544-7bf2-4e13-87e6-be026bf67163/1/ty37EnJ-RgDKLwGRt9GgI1MucsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/209544-7bf2-4e13-87e6-be026bf67163/1/ty37EnJ-RgDKLwGRt9GgI1MucsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1f:81:b3:5e:4e:2c:03:d9:72:b4:57:f8:be:b2:e9:d9:dc:
57:3e:72:16:42:70:af:ac:b2:cc:6b:51:ac:9f:f3:9f:82:90:
d4:7f:7b:a6:a5:9c:40:9a:ca:55:5b:3e:2a:2a:93:8d:fc:c3:
cf:4d:78:3b:8e:63:e3:1d:c3:26:09:ea:2b:72:22:6f:fb:e3:
3c:43:fa:89:6c:41:79:1b:a9:78:2e:f1:26:b7:f6:dc:99:0c:
5e:66:82:c7:da:69:ed:0e:b6:53:2c:79:f9:e7:05:7a:b6:23:
65:cb:7d:99:1d:eb:39:47:d0:9a:10:00:bc:22:89:32:ce:ee:
52:03:f7:6e:91:70:e8:9e:37:2b:09:d1:e4:6a:06:ee:95:0c:
8e:15:ed:03:48:cb:c4:55:3c:4d:15:78:e9:e3:5d:fd:82:c0:
bf:df:e6:8d:d7:ba:26:fc:c0:f0:5d:f3:4c:a5:f2:01:54:48:
de:f7:c8:73:1e:a0:e2:ad:58:5f:b4:66:3a:39:c4:b9:3e:06:
14:99:72:4b:7e:86:e6:da:d0:5e:2d:f7:42:e5:31:56:fb:8d:
b2:36:6a:cc:8c:11:d3:02:ba:c4:67:a9:32:ad:2f:b1:2d:49:
70:4d:0c:b9:9a:ae:68:bd:72:e5:84:74:62:c6:b5:03:73:bc:
c9:ee:f6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:44 2026 by rpki-client