Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
File: TnCtvlP18oWwVz3yRuJdUWUdeEk.mft (raw, json)
Hash identifier: V/q0Id7u6lEyKgJdg2UdOew+wTwuMBuk/+UyMlpZT7M=
Subject key identifier: 54:2C:2C:B7:BD:77:11:49:E6:10:65:08:C8:11:EA:9F:D7:E2:00:78
Authority key identifier: 4E:70:AD:BE:53:F5:F2:85:B0:57:3D:F2:46:E2:5D:51:65:1D:78:49
Certificate issuer: /CN=4e70adbe53f5f285b0573df246e25d51651d7849
Certificate serial: 019D3A5448FD8342D16EDDE20DD093F53549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnCtvlP18oWwVz3yRuJdUWUdeEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
Manifest number: 0344
Signing time: Sun 29 Mar 2026 16:01:35 +0000
Manifest this update: Sun 29 Mar 2026 16:01:35 +0000
Manifest next update: Mon 30 Mar 2026 16:01:35 +0000
Files and hashes: 1: TnCtvlP18oWwVz3yRuJdUWUdeEk.crl (hash: LElytAmuFOTXqW4LVd5fFwXTb5oXuz1dt3tR60vSU/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnCtvlP18oWwVz3yRuJdUWUdeEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:48:fd:83:42:d1:6e:dd:e2:0d:d0:93:f5:35:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e70adbe53f5f285b0573df246e25d51651d7849
Validity
Not Before: Mar 29 16:01:35 2026 GMT
Not After : Mar 30 16:01:35 2026 GMT
Subject: CN=542c2cb7bd771149e6106508c811ea9fd7e20078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:05:0a:8c:29:40:10:7c:4b:00:08:6b:01:
05:9c:dc:54:77:7d:c2:ce:df:c6:26:28:7f:c5:53:
7f:65:68:aa:7a:7c:6a:00:90:36:b8:1a:82:e7:0d:
fe:e3:77:ed:82:d3:20:c5:49:0b:ca:04:cf:fc:42:
05:9c:b7:52:8d:12:54:a2:aa:62:5d:e9:7e:bb:0f:
ae:cf:ad:3c:95:75:2c:1f:aa:bd:73:5a:7f:72:15:
0b:b4:31:ea:7e:e1:29:52:91:17:b5:f7:4e:72:17:
89:01:5f:16:1e:d7:fb:5d:52:74:fe:3b:0b:ba:b4:
e9:a1:e3:19:b1:97:32:dc:d4:1d:d3:ee:55:3b:8f:
e3:e7:61:ab:dc:3a:1a:0f:b3:c6:e8:a7:96:61:fc:
5f:b1:db:27:3a:88:81:bf:e5:75:69:d3:d4:ee:00:
55:9a:96:ba:0e:cd:0a:e9:41:b1:aa:14:bf:e0:e0:
75:99:88:bc:b6:60:ab:17:d6:73:fb:59:9e:90:8d:
f6:11:74:e6:f1:32:2d:dc:72:6d:43:cc:ce:fb:34:
de:e1:9d:1a:de:40:f7:2f:2f:12:a8:b3:3e:14:a0:
6c:33:30:cf:21:de:18:90:2d:7b:b2:da:08:94:78:
b0:64:8b:6b:9e:58:b6:26:9a:fe:7a:67:03:29:cd:
77:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2C:2C:B7:BD:77:11:49:E6:10:65:08:C8:11:EA:9F:D7:E2:00:78
X509v3 Authority Key Identifier:
keyid:4E:70:AD:BE:53:F5:F2:85:B0:57:3D:F2:46:E2:5D:51:65:1D:78:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnCtvlP18oWwVz3yRuJdUWUdeEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:16:fd:7c:b3:2b:10:30:5a:89:b4:45:63:9d:21:85:65:64:
60:79:8e:fb:f6:d3:36:83:4e:9b:f1:56:e3:2c:76:36:d3:d0:
d8:6e:7d:e7:85:73:23:ea:d8:a0:d7:fa:8a:d3:2b:0d:0c:89:
d6:90:af:d9:3a:67:db:2d:f8:9a:d1:38:63:b2:ab:50:03:1d:
6e:c9:13:62:5e:a3:4e:92:b9:69:9c:34:31:b8:c6:10:a5:44:
58:b8:2b:d6:f6:50:0e:01:3f:93:5a:2b:9a:db:af:f9:7e:e4:
c0:90:03:cf:a0:97:b2:48:6a:a3:d6:eb:57:88:75:a5:e3:e6:
22:66:22:c7:d3:5a:3e:1e:c7:df:dc:5f:89:23:e4:64:7f:46:
4b:5a:23:9c:66:1f:c7:ff:54:60:c5:43:bb:71:52:df:ef:c6:
82:0c:aa:68:be:cd:de:da:15:88:fd:fb:dd:40:bd:57:da:48:
d7:90:a5:49:e5:c1:5a:6c:37:9b:71:91:44:e7:3f:d7:76:8e:
64:0b:24:e2:f7:c0:38:72:39:5a:46:e4:39:c6:0c:08:55:8d:
44:73:5e:99:f9:dc:80:56:92:21:54:52:de:a0:d9:6d:05:47:
88:90:8f:ca:8e:8e:dc:8a:d3:77:7a:1b:00:82:e5:d9:16:54:
f4:5a:a9:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VEj9g0LRbt3iDdCT9TVJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNzBhZGJlNTNmNWYyODViMDU3M2RmMjQ2ZTI1ZDUxNjUx
ZDc4NDkwHhcNMjYwMzI5MTYwMTM1WhcNMjYwMzMwMTYwMTM1WjAzMTEwLwYDVQQD
Eyg1NDJjMmNiN2JkNzcxMTQ5ZTYxMDY1MDhjODExZWE5ZmQ3ZTIwMDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudQFCowpQBB8SwAIawEFnNxUd33C
zt/GJih/xVN/ZWiqenxqAJA2uBqC5w3+43ftgtMgxUkLygTP/EIFnLdSjRJUoqpi
Xel+uw+uz608lXUsH6q9c1p/chULtDHqfuEpUpEXtfdOcheJAV8WHtf7XVJ0/jsL
urTpoeMZsZcy3NQd0+5VO4/j52Gr3DoaD7PG6KeWYfxfsdsnOoiBv+V1adPU7gBV
mpa6Ds0K6UGxqhS/4OB1mYi8tmCrF9Zz+1mekI32EXTm8TIt3HJtQ8zO+zTe4Z0a
3kD3Ly8SqLM+FKBsMzDPId4YkC17stoIlHiwZItrnli2Jpr+emcDKc13fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQsLLe9dxFJ5hBlCMgR6p/X4gB4MB8GA1UdIwQY
MBaAFE5wrb5T9fKFsFc98kbiXVFlHXhJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG5DdHZsUDE4b1d3VnozeVJ1SmRVV1VkZUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83NGY0M2UtYmJmZS00OTYwLThmMzMt
YzFlNmMxYjMxOTFkLzEvVG5DdHZsUDE4b1d3VnozeVJ1SmRVV1VkZUVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC83NGY0M2UtYmJmZS00OTYwLThmMzMtYzFlNmMxYjMxOTFk
LzEvVG5DdHZsUDE4b1d3VnozeVJ1SmRVV1VkZUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArRb9fLMr
EDBaibRFY50hhWVkYHmO+/bTNoNOm/FW4yx2NtPQ2G5954VzI+rYoNf6itMrDQyJ
1pCv2Tpn2y34mtE4Y7KrUAMdbskTYl6jTpK5aZw0MbjGEKVEWLgr1vZQDgE/k1or
mtuv+X7kwJADz6CXskhqo9brV4h1pePmImYix9NaPh7H39xfiSPkZH9GS1ojnGYf
x/9UYMVDu3FS3+/GggyqaL7N3toViP373UC9V9pI15ClSeXBWmw3m3GRROc/13aO
ZAsk4vfAOHI5WkbkOcYMCFWNRHNemfncgFaSIVRS3qDZbQVHiJCPyo6O3IrTd3ob
AILl2RZU9FqpSw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:20:51 2026 by rpki-client