Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft
File: tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft (raw, json)
Hash identifier: zHS9ODVAIpgDXZoCqkDQwWe4sJvMCTIJsRjko++UhbY=
Subject key identifier: 16:55:94:A9:FB:C9:63:61:50:C1:DE:EB:A5:FC:92:BB:26:AF:DB:C2
Authority key identifier: B6:91:9F:E8:CB:EF:9A:B3:20:AC:7E:0E:34:68:79:D4:9D:18:57:D6
Certificate issuer: /CN=b6919fe8cbef9ab320ac7e0e346879d49d1857d6
Certificate serial: 019D382E85E6E43468BED8E8983C579DCFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpGf6MvvmrMgrH4ONGh51J0YV9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft
Manifest number: 0946
Signing time: Sun 29 Mar 2026 06:01:06 +0000
Manifest this update: Sun 29 Mar 2026 06:01:06 +0000
Manifest next update: Mon 30 Mar 2026 06:01:06 +0000
Files and hashes: 1: tpGf6MvvmrMgrH4ONGh51J0YV9Y.crl (hash: JdZ85GPuaZQSpDZQWGq+b1v3xssSGkrqroV/30oUlrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpGf6MvvmrMgrH4ONGh51J0YV9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:85:e6:e4:34:68:be:d8:e8:98:3c:57:9d:cf:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6919fe8cbef9ab320ac7e0e346879d49d1857d6
Validity
Not Before: Mar 29 06:01:06 2026 GMT
Not After : Mar 30 06:01:06 2026 GMT
Subject: CN=165594a9fbc9636150c1deeba5fc92bb26afdbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0b:a0:e6:42:37:ef:9d:b2:f6:77:a7:a6:4e:
77:98:74:b9:e1:c0:e0:f0:e0:ef:ed:27:7a:1a:1a:
ba:00:35:e6:6a:b5:8b:77:26:2f:37:7a:d3:b4:00:
72:a0:92:68:87:6a:f4:97:0b:37:cd:0f:a1:32:ec:
bd:7a:a0:e1:b6:ad:bd:ee:71:18:d5:89:43:36:f6:
a2:3c:ad:83:99:2b:e9:05:17:87:d9:3e:75:e9:57:
c8:38:7a:c6:d6:f9:e6:cf:d3:35:d2:33:80:52:83:
f8:f6:12:ee:d0:c0:cc:0d:c5:17:49:6e:0e:79:de:
d6:d7:dd:d8:ed:23:df:c2:81:4e:87:05:f5:61:81:
c1:bc:36:dc:bf:65:40:c3:94:66:51:ab:fa:b6:4b:
69:7e:d7:f4:2a:17:7a:43:c9:3b:99:a8:9e:f8:2e:
1d:07:e8:e1:53:b6:34:b1:b3:83:69:ad:47:57:77:
29:87:d2:44:16:1f:1c:f7:a6:9a:b3:e2:0c:17:96:
16:f9:f5:89:c7:c9:ce:15:37:a6:c9:bf:e1:94:a2:
b2:62:03:05:b6:36:90:7e:7c:0f:33:9a:fb:2f:58:
db:c1:d7:01:90:57:60:00:4f:2b:d5:19:fc:85:d8:
12:18:5c:ae:26:ac:e6:5e:bb:1c:3a:a0:23:67:27:
b0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:55:94:A9:FB:C9:63:61:50:C1:DE:EB:A5:FC:92:BB:26:AF:DB:C2
X509v3 Authority Key Identifier:
keyid:B6:91:9F:E8:CB:EF:9A:B3:20:AC:7E:0E:34:68:79:D4:9D:18:57:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpGf6MvvmrMgrH4ONGh51J0YV9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:65:96:34:7d:55:1b:54:07:aa:eb:b6:05:93:53:dc:e1:35:
6c:08:1b:51:5c:7a:1a:2f:ed:4e:bf:70:69:63:86:fa:75:f6:
69:eb:a1:73:4a:9f:28:e4:29:7d:69:d2:df:71:54:6f:83:84:
89:24:ca:b1:56:51:05:1c:7e:0f:84:e3:b2:4a:91:ae:53:38:
6d:41:c8:ae:8c:0a:1a:cc:cf:96:4a:41:5b:20:12:43:8e:b8:
e9:01:21:f6:e7:59:c8:7e:7a:7c:98:9e:54:c6:8d:9c:87:f0:
7f:a5:c4:22:07:e3:d5:2d:b7:e9:68:fb:76:89:ec:c2:85:fb:
7d:9f:09:5d:e5:9f:ab:52:ae:34:f7:a7:65:85:6f:47:47:c0:
ca:1d:26:3e:03:3b:3e:b7:cc:fc:dd:b2:33:f3:02:d0:49:ce:
54:92:e2:af:99:b6:58:5b:67:88:d7:7e:fa:08:67:65:e4:e0:
fc:7b:5d:b3:fd:14:a3:23:f7:e9:ce:cc:6b:d5:4c:53:43:28:
b4:8a:3d:74:e4:02:fd:1e:d5:9b:d5:5f:9e:67:59:07:ad:33:
8b:b0:d9:51:8b:ef:ea:2b:8d:c4:63:5a:aa:de:82:22:52:06:
dc:39:25:ec:01:28:82:ee:02:bd:a4:84:48:1e:1b:d5:f4:af:
54:0c:ff:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:42 2026 by rpki-client