Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
File: TF_Sw94QWTTPD_SdJtnciFjOXdE.mft (raw, json)
Hash identifier: o1Sb+Lr/DZqdSZcGZoF9UHYYeqZo0/5BhtLWdaPHoQg=
Subject key identifier: D3:6A:1E:7E:16:54:E6:67:73:EF:E1:FC:E0:A5:02:C8:22:20:C7:84
Authority key identifier: 4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1
Certificate issuer: /CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1
Certificate serial: 019D3A53F34A154AB9D763EC099DF6DBC3ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
Manifest number: 124D
Signing time: Sun 29 Mar 2026 16:01:13 +0000
Manifest this update: Sun 29 Mar 2026 16:01:13 +0000
Manifest next update: Mon 30 Mar 2026 16:01:13 +0000
Files and hashes: 1: TF_Sw94QWTTPD_SdJtnciFjOXdE.crl (hash: qwabF1eiGnz6/gCJMLjEChizB2Ax9VnfssapSzlOsJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:f3:4a:15:4a:b9:d7:63:ec:09:9d:f6:db:c3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1
Validity
Not Before: Mar 29 16:01:13 2026 GMT
Not After : Mar 30 16:01:13 2026 GMT
Subject: CN=d36a1e7e1654e66773efe1fce0a502c82220c784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:de:78:32:21:a2:fa:30:e2:6b:87:ed:62:b5:
15:d0:c0:c1:cf:52:4c:10:f0:88:3f:16:b3:25:0d:
fe:90:42:07:7d:d3:64:cd:b9:a8:04:99:9b:74:29:
03:4b:42:9d:87:b4:97:8c:f9:04:b7:07:e6:1a:d9:
fb:a3:3d:7a:25:86:f6:9e:49:02:bd:14:42:b0:0c:
fa:f2:52:f9:9b:99:6c:fa:59:2c:15:89:6c:81:c2:
16:ff:7a:cf:a8:36:14:ab:d0:c7:6c:40:84:f6:e9:
39:f1:6e:d8:be:ee:f1:3e:ac:28:bc:77:bf:fc:ba:
64:bf:ad:0c:b7:94:2f:de:49:a9:f0:df:10:3e:da:
cb:7f:70:6d:b2:d8:8b:4c:83:38:15:bd:19:da:18:
5d:c0:07:00:62:f4:e9:06:a5:26:e7:cd:ba:74:50:
2d:7d:46:1b:f0:d2:a3:83:cb:69:28:61:e6:73:0f:
db:1f:7f:85:a6:95:61:17:2f:2e:6a:e4:d6:3b:19:
c0:64:e5:b5:bb:32:d0:8e:2e:ad:2d:20:c3:e6:36:
7e:f5:83:ba:95:d0:f2:1d:13:5f:76:59:66:27:a7:
03:98:12:64:d1:c4:a4:8f:64:bd:76:0b:a7:30:bc:
3f:93:c3:80:17:45:95:0e:9d:c6:c6:33:a8:8b:a1:
47:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6A:1E:7E:16:54:E6:67:73:EF:E1:FC:E0:A5:02:C8:22:20:C7:84
X509v3 Authority Key Identifier:
keyid:4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5c:56:7e:f9:d8:00:e4:0b:ea:e5:0a:68:b2:13:a4:4b:38:
6e:3c:b1:35:1b:dc:4d:f9:51:e7:cc:a7:19:5e:d2:77:79:41:
82:90:33:9e:8f:7b:c9:a3:a8:f0:72:29:1d:24:d2:fb:c8:2f:
b8:b2:ea:78:e2:e9:94:3b:9e:11:c8:95:99:72:38:6e:a1:cb:
d6:cd:06:ae:3b:b2:75:f2:31:13:16:90:27:57:fd:8b:63:56:
56:90:7d:63:f3:b8:b1:bf:58:de:9a:27:b7:03:aa:f4:2f:2d:
42:31:e3:6e:c9:63:44:97:69:64:d0:53:35:f3:bb:55:65:d3:
c4:08:d4:a5:75:ca:c8:e2:fa:3f:6a:fb:49:51:4c:74:72:9e:
d9:c2:09:5a:c6:a0:ac:53:99:fe:69:7e:66:6a:87:29:3b:a1:
c6:9c:ea:c5:53:c6:ae:27:25:36:a4:b7:7d:4b:36:bf:2d:a6:
2f:5a:83:d2:98:0d:f1:ad:ee:9b:53:3b:77:6e:20:e2:9a:b4:
43:63:1b:8c:6d:d7:97:c7:ee:47:ff:1b:2e:98:b4:da:2c:f9:
12:90:b1:5f:b9:21:ac:7e:43:9e:da:36:23:ca:7f:12:c4:89:
86:b4:c2:aa:29:51:c2:41:59:1d:f1:a2:16:7b:dd:ea:4d:a1:
fa:3a:e0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:41 2026 by rpki-client