Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
File: TO1MeGdCnuAvXNwa--qlunEzYAg.mft (raw, json)
Hash identifier: TlagwfRh28O53UIf4auZdWxXsz5WSQjLM7ESh4wTens=
Subject key identifier: BF:8C:DC:B2:54:E8:13:9E:FB:94:CA:00:52:E4:86:83:DE:B3:55:6A
Authority key identifier: 4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
Certificate issuer: /CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Certificate serial: 019D3865E2BC342BB2014ECB67616B54ED83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:01:34 +0000
Manifest this update: Sun 29 Mar 2026 07:01:34 +0000
Manifest next update: Mon 30 Mar 2026 07:01:34 +0000
Files and hashes: 1: TO1MeGdCnuAvXNwa--qlunEzYAg.crl (hash: bvsaqTHPtyGNA0tUToRjOobk8EYDq9q+i3sGqVqirEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e2:bc:34:2b:b2:01:4e:cb:67:61:6b:54:ed:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Validity
Not Before: Mar 29 07:01:34 2026 GMT
Not After : Mar 30 07:01:34 2026 GMT
Subject: CN=bf8cdcb254e8139efb94ca0052e48683deb3556a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ff:c6:63:a5:ca:02:61:16:43:4c:4e:18:0d:
7c:f5:bf:99:1b:94:93:e8:fb:20:cd:a3:55:4c:e2:
19:3c:db:2a:7e:c5:38:7a:6f:c4:d7:55:27:1c:66:
b4:fb:d4:2b:d7:94:77:79:14:42:2a:f0:72:57:f6:
5b:90:27:27:ea:6f:2a:6b:ce:da:9f:5c:d9:4e:a3:
df:62:1b:9a:b9:63:6e:e4:15:d9:4f:60:87:88:a0:
7a:4b:76:6d:e4:d3:4d:07:c3:eb:bb:e8:d9:fb:0b:
20:75:9b:fc:a7:6e:9d:cf:73:6e:5b:7e:e3:fc:32:
8c:25:9c:e3:18:f4:c7:5a:b7:c6:97:43:83:1a:78:
e8:6a:83:df:a1:e4:de:42:a8:86:de:9f:a6:17:e8:
dd:b3:ef:a0:a0:e2:fc:7e:f0:3d:1e:08:f4:a6:5f:
64:9f:e3:4a:9d:af:82:9d:67:e9:88:42:32:00:52:
60:71:55:47:6c:d0:47:c1:08:a5:1f:e6:3d:51:8e:
53:1b:60:48:db:ed:a1:db:46:eb:79:fa:73:f6:c2:
e1:97:52:67:bf:57:3c:2b:a2:68:1d:be:79:08:b4:
24:ba:b9:2e:a6:b7:ea:c1:d4:6f:1d:13:4a:94:8f:
4e:14:06:1e:0b:08:74:2b:2b:fd:fe:13:ec:17:10:
a9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8C:DC:B2:54:E8:13:9E:FB:94:CA:00:52:E4:86:83:DE:B3:55:6A
X509v3 Authority Key Identifier:
keyid:4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f6:32:25:02:86:f5:4a:49:c7:fb:e0:9e:99:a0:7e:23:e1:
fd:97:82:f9:da:b3:9f:26:29:2d:ce:86:d2:3e:2b:b9:34:5d:
f9:aa:50:51:8b:d6:82:5b:43:27:be:37:1d:f7:fd:3d:1a:d1:
8b:b6:5a:b4:8c:f8:bf:09:fb:c8:cb:ae:1d:d8:4f:b3:9a:df:
7b:8d:ae:d3:fa:59:c1:17:ff:ec:b3:49:13:2e:65:98:d2:56:
25:bf:5e:a8:56:6c:ff:72:65:30:fb:c3:08:72:2e:89:e0:40:
53:67:76:4a:0a:f6:54:b8:cf:c2:1e:62:ae:93:a5:53:2d:a5:
9d:fa:ce:ea:01:b7:65:88:86:0f:55:5a:d3:bc:27:e6:b2:54:
ee:fa:fd:4b:dc:45:1a:1b:1e:e9:ad:fd:d3:8d:73:b1:ef:1e:
d7:03:fd:9e:fe:87:fd:8a:cc:90:2e:f7:6c:d0:af:f9:a9:d6:
ef:f0:7d:f1:e3:ce:e0:f0:3e:63:d0:5f:00:07:8b:c2:9a:fa:
df:e8:b4:e8:ad:5f:b0:ea:b2:3a:b7:86:78:15:fc:79:19:68:
af:b5:b7:07:33:67:33:05:99:c6:10:c6:b4:71:f4:b1:9d:b5:
00:f7:1e:8e:64:88:58:53:bb:24:9f:d3:c4:41:1c:42:8e:47:
b6:bd:27:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:07 2026 by rpki-client