Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
File: TjS6bj4mlMezjkZRr-4GGwsh3q4.mft (raw, json)
Hash identifier: jIQHPuYL6z1lle6Sib6wqfoCUMI7oGvTqne/Avg3U/U=
Subject key identifier: 0B:55:71:FA:F3:70:2C:1D:22:3C:0F:C2:94:66:7C:E7:7D:D1:BA:97
Authority key identifier: 4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE
Certificate issuer: /CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae
Certificate serial: 019D3A5381B519A8D0CEB39AFB8CD23509C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
Manifest number: 03B1
Signing time: Sun 29 Mar 2026 16:00:44 +0000
Manifest this update: Sun 29 Mar 2026 16:00:44 +0000
Manifest next update: Mon 30 Mar 2026 16:00:44 +0000
Files and hashes: 1: TjS6bj4mlMezjkZRr-4GGwsh3q4.crl (hash: oK7GQdkWcBawHIIRD/zNsN/rEC27guaF1Zx5WyeDrTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:81:b5:19:a8:d0:ce:b3:9a:fb:8c:d2:35:09:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae
Validity
Not Before: Mar 29 16:00:44 2026 GMT
Not After : Mar 30 16:00:44 2026 GMT
Subject: CN=0b5571faf3702c1d223c0fc294667ce77dd1ba97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f1:c2:d8:f3:1a:ce:cf:86:d1:6d:12:fb:bc:
57:b7:c3:a9:3d:a7:27:3c:8d:93:9a:2a:1c:c8:bb:
36:5c:16:30:ef:30:8b:77:c2:44:65:44:e9:ae:d5:
e4:cf:eb:d5:97:d4:3c:19:21:4b:83:53:be:d5:9f:
ce:60:47:1e:6b:9c:ba:e7:ab:38:03:24:1d:63:b5:
a5:b0:03:27:98:e3:f9:7f:ea:a2:d0:cc:71:8c:ea:
12:ee:20:39:8a:62:eb:4c:80:d2:dd:b4:93:46:34:
35:bf:62:ac:de:00:84:16:00:0a:7f:b0:48:4d:14:
3d:71:48:2e:64:b9:46:e0:96:cb:df:f6:6f:2b:59:
ff:3a:18:0d:b8:89:6c:b9:a2:5d:28:4e:cc:d6:db:
a5:d6:cf:da:c6:3c:4e:8f:9c:94:f7:d9:68:fc:49:
88:aa:58:6a:c5:e8:9c:9b:b3:b8:f8:a6:89:48:08:
a5:47:06:f5:8a:4a:3e:bc:66:b9:c7:2f:88:88:a0:
51:2a:7e:22:4b:e5:70:88:b1:76:2b:02:a1:9b:be:
09:8c:4c:ab:1d:b7:ed:a5:f6:a7:41:37:20:a2:10:
9b:4f:45:88:83:ce:04:5d:d5:f1:43:ae:42:7a:ed:
dc:7e:3c:fd:55:c6:34:2a:a6:54:71:f1:c2:29:54:
a4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:55:71:FA:F3:70:2C:1D:22:3C:0F:C2:94:66:7C:E7:7D:D1:BA:97
X509v3 Authority Key Identifier:
keyid:4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:67:51:9c:f4:2e:b6:c4:62:65:d5:01:5a:2a:da:c9:39:dd:
9c:a1:e1:a7:75:c9:a2:3f:58:8c:3c:f6:45:7d:86:6b:1a:0b:
81:47:73:12:1a:fb:c7:b3:ce:01:b3:41:4c:c5:b6:00:0d:bc:
fd:aa:48:98:5b:90:23:a1:7f:2b:48:b0:7d:45:d3:38:75:31:
71:7a:d9:f9:5b:bb:8a:da:27:be:0c:33:58:3e:ce:84:19:fe:
c6:1e:57:e3:ad:31:26:26:c2:d3:8c:bc:d5:62:b9:f7:3d:d3:
fe:ca:e1:a7:61:c3:bf:d1:ee:1e:41:48:16:5e:74:1e:b0:1a:
d1:61:4d:d6:e9:24:8c:9d:01:72:4e:b4:21:3b:c5:4e:3a:d6:
73:d4:5e:d8:11:29:7f:53:12:d0:cd:5e:df:fc:61:23:56:23:
ef:ed:2c:7c:47:6d:a3:23:03:f9:f9:12:f6:34:11:3c:6a:b0:
a1:89:d0:5e:39:0b:46:6d:0b:bb:e9:e6:58:17:02:9c:2d:ff:
53:d1:06:cf:60:de:0e:5c:d4:c4:05:2e:74:6c:88:f1:35:1c:
41:19:ad:44:10:bb:67:56:8e:33:ac:98:fd:35:09:72:22:7f:
e2:e7:6f:85:74:5f:99:26:38:4a:f8:fe:c2:15:c1:0b:ca:23:
92:a4:56:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:04 2026 by rpki-client