Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
File: tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft (raw, json)
Hash identifier: 0B23wAzcZndympMz7UDrLY5LmZ4zZ453V8O4gUK/HKM=
Subject key identifier: 69:4B:47:A3:47:B5:74:48:1E:D5:66:41:0D:C0:59:2F:B5:BF:AD:19
Authority key identifier: B7:3D:88:D7:46:8A:F6:01:AF:14:C5:E1:ED:90:3C:4F:36:CA:F5:FA
Certificate issuer: /CN=b73d88d7468af601af14c5e1ed903c4f36caf5fa
Certificate serial: 019D3865B260DB79D477FCB1277F469E9EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:01:21 +0000
Manifest this update: Sun 29 Mar 2026 07:01:21 +0000
Manifest next update: Mon 30 Mar 2026 07:01:21 +0000
Files and hashes: 1: tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl (hash: 8oP1b8kiCtgAJOIzAEsydEY84fijXSR1fOAR8YyX9Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b2:60:db:79:d4:77:fc:b1:27:7f:46:9e:9e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b73d88d7468af601af14c5e1ed903c4f36caf5fa
Validity
Not Before: Mar 29 07:01:21 2026 GMT
Not After : Mar 30 07:01:21 2026 GMT
Subject: CN=694b47a347b574481ed566410dc0592fb5bfad19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:2c:ae:5b:a4:30:ca:21:23:5b:aa:38:21:
49:72:a6:49:52:e6:8f:6e:28:6b:92:64:6e:c1:19:
34:18:c6:dc:f9:14:c6:7a:cc:e8:fa:7f:cf:d6:8d:
5e:14:a1:cb:65:e9:a5:f7:de:fe:99:be:b6:ee:22:
90:b5:b9:76:4d:82:7b:56:b5:20:ff:d3:4c:5e:b2:
2d:ce:73:8f:a3:20:39:09:01:5f:27:41:f0:7a:6e:
ed:70:41:02:97:d7:3d:6c:98:5e:e7:8f:7d:a0:91:
e3:80:19:67:80:cf:1e:58:e3:60:b4:ee:d4:29:11:
e2:15:31:f6:ee:81:ec:dd:1b:b1:08:42:87:be:d0:
5c:de:e7:7b:74:ef:c3:8c:63:87:b4:b6:eb:6e:6e:
aa:05:7c:91:90:08:19:72:2c:d4:d7:98:b3:47:5e:
fe:cf:01:42:15:f8:57:e8:77:ad:57:01:e9:01:33:
eb:1c:3f:43:31:9a:78:ff:ac:57:72:fc:4e:37:07:
18:d8:e0:59:db:c7:12:5b:0e:6c:08:81:51:80:1c:
dd:47:0d:3f:89:d9:b5:5d:c0:c0:31:21:d7:c7:68:
02:97:e8:a5:2a:0d:e4:6a:4e:29:19:f6:d2:60:b0:
5b:5b:7b:fc:ad:52:31:78:e2:b1:91:87:03:3a:62:
e8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4B:47:A3:47:B5:74:48:1E:D5:66:41:0D:C0:59:2F:B5:BF:AD:19
X509v3 Authority Key Identifier:
keyid:B7:3D:88:D7:46:8A:F6:01:AF:14:C5:E1:ED:90:3C:4F:36:CA:F5:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f4:98:2a:6b:ca:58:3e:17:ba:54:b5:19:e9:b2:eb:67:04:
7c:c0:8a:9d:ba:b0:0a:27:f3:d4:61:4e:ee:5b:8f:1a:5a:fc:
54:ad:9d:e8:56:af:2a:ec:e2:8f:30:72:14:ef:77:a5:ea:ae:
bf:47:cc:69:c2:7b:35:8f:39:db:b1:21:10:01:08:d1:54:b8:
4b:31:44:fc:75:bc:69:de:a0:96:6a:0c:ae:84:83:1f:36:e1:
97:3b:c0:5e:6a:4a:a6:f3:55:06:ee:fd:3a:fb:6d:6f:ba:ac:
97:aa:7f:9c:5c:a5:00:52:e5:33:fa:74:71:67:54:d0:7a:a1:
ec:7b:3d:ef:26:60:7c:61:eb:cc:b8:be:9e:53:6d:8c:da:8e:
80:c8:6c:80:97:c3:60:0f:62:83:40:2e:92:b5:ed:97:6a:f4:
75:f6:9d:2e:27:59:49:92:a7:20:03:44:b3:5e:b1:5a:8e:a0:
a2:cc:bc:7a:b4:95:79:69:00:fc:b1:30:e6:5c:65:a1:c0:e9:
c0:66:76:3b:df:2b:2e:05:45:60:f3:f8:4c:9f:93:34:e0:9b:
28:3d:ae:2c:6b:f1:cc:6f:ac:ec:0d:a7:96:22:40:fd:ad:35:
71:9b:54:d4:61:8e:e6:ea:55:ea:56:57:31:9b:12:9e:1e:d6:
86:36:6a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:53 2026 by rpki-client