Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
File: TTpxp39MqbpTb5hhKpxW1AwMO50.mft (raw, json)
Hash identifier: fhbqgpiWqM1qmtjmTugNW0gWWLM7ZbFTLgJ0wRQE29k=
Subject key identifier: 96:A5:D5:4E:63:F0:BF:2B:62:41:6A:C6:61:BE:81:C2:12:4A:22:C1
Authority key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
Certificate issuer: /CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Certificate serial: 019D3A537160930F09332CD34041F6E27AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 16:00:40 +0000
Manifest this update: Sun 29 Mar 2026 16:00:40 +0000
Manifest next update: Mon 30 Mar 2026 16:00:40 +0000
Files and hashes: 1: TTpxp39MqbpTb5hhKpxW1AwMO50.crl (hash: f5DJn6e4vaD5AiMh8P3t/Dmizfvk4XsdreOFnPwG6ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:71:60:93:0f:09:33:2c:d3:40:41:f6:e2:7a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Validity
Not Before: Mar 29 16:00:40 2026 GMT
Not After : Mar 30 16:00:40 2026 GMT
Subject: CN=96a5d54e63f0bf2b62416ac661be81c2124a22c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:1a:c6:ab:10:8d:29:f7:89:0e:d0:c6:cc:
d9:d4:fa:2f:d4:47:4d:6c:1e:ef:09:f4:6e:35:a0:
b0:b3:56:e7:2b:e1:03:c5:fb:61:aa:35:0b:4b:05:
2e:54:70:d7:ee:8a:33:7a:58:a5:93:75:7e:a8:f6:
00:37:74:92:2d:98:57:c2:43:c3:08:a5:00:c7:4a:
b3:aa:d9:87:00:16:62:e2:3e:93:d5:29:8a:75:40:
11:47:ea:c9:8d:4a:7d:cf:00:65:fa:61:7e:e8:3c:
9f:4d:45:02:a0:68:bf:15:92:5e:18:9d:d5:5d:60:
8b:fb:28:5e:59:7c:d1:9d:98:47:c6:52:8e:9c:bd:
59:37:62:d0:57:da:b3:49:c6:35:d5:c0:0b:f1:f6:
72:36:c3:f8:b2:4a:2a:ba:e8:b2:fd:2a:b3:82:96:
aa:2a:46:97:b0:7e:8d:46:a5:bf:13:9a:d5:39:48:
47:7e:b5:fb:af:c2:49:78:e6:e7:96:2b:d2:ce:34:
56:fa:69:44:a2:67:6f:83:cc:53:a4:58:89:bf:9f:
a0:6b:e2:4b:55:7d:6f:37:2d:14:98:88:6b:2a:bb:
75:9d:f5:fc:ed:82:3a:55:75:e3:16:45:8f:f0:ef:
6c:24:c3:bd:bf:ed:3f:3e:f5:2e:8f:c7:f6:8a:35:
7f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A5:D5:4E:63:F0:BF:2B:62:41:6A:C6:61:BE:81:C2:12:4A:22:C1
X509v3 Authority Key Identifier:
keyid:4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:20:1c:76:04:92:db:4b:fa:a8:a0:62:1a:7a:5e:f4:dd:ab:
75:c4:37:61:85:53:29:0e:59:b6:7c:c9:ba:8e:5c:66:d2:8b:
18:de:4e:00:aa:20:ca:88:ee:43:a2:9a:50:c8:4f:71:6f:a2:
4f:cc:03:25:e4:57:aa:df:f4:69:4e:db:92:7c:95:21:cb:ad:
99:1b:5d:96:30:5b:bf:79:80:47:ba:54:b0:df:eb:67:2c:41:
7e:2a:4c:a7:8d:55:96:f7:80:66:2b:41:9a:a5:f8:60:7e:fd:
0f:82:06:fe:b7:d5:c9:fb:94:50:55:b8:84:3e:2d:dd:ec:93:
a9:00:08:cc:08:aa:ab:32:e6:e0:1c:b4:51:a3:06:8c:84:e6:
b9:a4:d5:b5:db:62:56:5a:88:dd:da:a5:fe:76:05:2c:47:19:
bd:d0:f1:c8:ae:fe:bb:8c:3b:8e:5d:95:65:dd:e0:67:3e:15:
9d:2b:19:a3:a3:f0:0d:25:67:f4:19:46:1c:a9:1b:4a:89:7f:
48:f7:91:4c:fc:27:58:64:fc:38:0d:9e:ab:b3:87:b0:a8:8a:
02:22:72:db:91:e5:88:94:48:1a:6a:e9:ec:71:ee:1c:50:a0:
b0:c0:43:aa:9f:d9:eb:92:28:46:c1:b0:e7:f0:e5:93:81:b6:
a9:37:ae:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:28 2026 by rpki-client