Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
File: Tddxzuh-yov3sS4KYwbxgdKlWm0.mft (raw, json)
Hash identifier: MBUVF9kQ4Mf3fNFcOlHpBoACo1QPFyENVTWS9m7ktk8=
Subject key identifier: B1:73:1D:58:61:58:16:FC:96:5D:C3:F6:64:8D:7B:36:E6:CB:8E:D8
Authority key identifier: 4D:D7:71:CE:E8:7E:CA:8B:F7:B1:2E:0A:63:06:F1:81:D2:A5:5A:6D
Certificate issuer: /CN=4dd771cee87eca8bf7b12e0a6306f181d2a55a6d
Certificate serial: 019D3789CE0801C2A1A9437E8BCF15A61A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
Manifest number: 0455
Signing time: Sun 29 Mar 2026 03:01:11 +0000
Manifest this update: Sun 29 Mar 2026 03:01:11 +0000
Manifest next update: Mon 30 Mar 2026 03:01:11 +0000
Files and hashes: 1: Tddxzuh-yov3sS4KYwbxgdKlWm0.crl (hash: BWyV1jY88OOK2U6q741eRY89yU21OIQnBGeN7TXKGTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:ce:08:01:c2:a1:a9:43:7e:8b:cf:15:a6:1a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd771cee87eca8bf7b12e0a6306f181d2a55a6d
Validity
Not Before: Mar 29 03:01:11 2026 GMT
Not After : Mar 30 03:01:11 2026 GMT
Subject: CN=b1731d58615816fc965dc3f6648d7b36e6cb8ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8a:f7:4d:d4:e2:16:96:51:18:d2:a1:2a:a3:
ab:98:4a:90:1b:a8:08:98:1e:04:e9:0b:5c:27:d1:
5e:91:ff:e0:a1:9b:79:7f:51:96:fc:be:84:bc:12:
b1:a2:b3:16:6f:aa:e6:f9:a5:75:ea:7b:d8:ea:5c:
11:91:d1:5b:a7:95:ce:65:26:7b:ec:b7:34:17:73:
4d:d5:f0:8a:06:3f:40:b7:56:80:79:79:e7:ce:1e:
62:8f:da:f1:4b:05:43:d1:98:5a:bb:46:17:77:83:
75:ee:b3:e3:4b:fd:57:10:36:b4:76:0c:d0:55:57:
67:0a:5f:6b:bb:7d:71:e3:11:b8:74:7d:c6:e2:d7:
df:8b:95:38:4b:e2:64:70:63:3c:dc:96:ce:c2:a9:
78:2d:20:16:e6:25:17:c5:67:f4:5f:df:8f:2b:68:
87:54:d9:b2:8b:16:a5:f4:64:1e:6f:f3:82:e4:16:
ed:0c:11:1c:52:4f:83:6f:d0:0a:08:f1:6f:6f:7b:
ab:be:7a:c8:63:d3:8d:15:63:6e:8f:b5:8d:1a:ca:
18:e2:a7:61:ba:aa:de:d7:52:5b:b6:db:62:13:93:
69:ea:23:10:85:0d:15:93:17:85:3c:0a:1a:29:76:
20:58:8f:b7:de:fa:27:f2:6c:4b:6e:e5:de:59:cb:
5b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:73:1D:58:61:58:16:FC:96:5D:C3:F6:64:8D:7B:36:E6:CB:8E:D8
X509v3 Authority Key Identifier:
keyid:4D:D7:71:CE:E8:7E:CA:8B:F7:B1:2E:0A:63:06:F1:81:D2:A5:5A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:57:1d:e6:73:a2:6c:a4:3b:79:d7:62:8b:17:ad:c1:b6:07:
ab:23:28:71:60:63:fe:6c:64:2a:f3:27:0e:27:a7:11:18:3a:
e7:cd:29:9b:44:71:ca:c2:cd:5a:bc:da:5c:d8:4d:ac:90:b5:
3d:4f:ee:91:81:0c:93:f1:7f:c6:b0:42:f1:d1:c7:b4:78:08:
cb:ce:e5:05:1d:1a:57:27:a0:30:6b:32:ca:e3:05:9d:77:f8:
40:66:d5:ed:5a:2d:d1:5a:eb:35:70:1b:46:f3:28:6b:07:71:
d3:06:49:f3:37:31:3e:a4:38:9e:fb:40:58:cb:36:ed:df:2a:
08:c3:55:45:0b:28:63:1f:f3:d7:eb:42:b1:f1:f6:6b:45:a7:
ec:23:a5:91:a0:64:41:e6:5f:f3:65:c5:71:45:51:ad:07:00:
fd:41:93:32:3f:7f:20:1d:fa:1b:f4:dc:c7:15:e6:eb:a6:f5:
d7:df:95:07:d1:3c:24:69:64:04:2f:be:67:26:e5:73:40:0b:
dc:36:1f:d6:b6:a7:4f:35:a7:f1:2a:40:1e:90:ad:57:1d:a3:
b2:da:98:74:43:b2:59:c6:ac:1b:75:ef:18:8b:98:ba:32:c5:
a2:6f:6f:d1:73:0f:34:6b:26:00:65:ff:c7:2e:5f:b9:77:9d:
68:13:5e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:12 2026 by rpki-client