Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
File: tkslytxMSBZvqbvV3oZxwiBBW2c.mft (raw, json)
Hash identifier: RxEJl3rU6erle9p/pISzkXXxsVpyJJ70dai8jWhjizo=
Subject key identifier: 79:A3:08:C1:49:19:D8:8C:86:F9:2B:96:5D:6E:AB:2C:49:5D:93:7F
Authority key identifier: B6:4B:25:CA:DC:4C:48:16:6F:A9:BB:D5:DE:86:71:C2:20:41:5B:67
Certificate issuer: /CN=b64b25cadc4c48166fa9bbd5de8671c220415b67
Certificate serial: 019D389BE41B2EEB7DED85180124B9850F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:33 +0000
Manifest this update: Sun 29 Mar 2026 08:00:33 +0000
Manifest next update: Mon 30 Mar 2026 08:00:33 +0000
Files and hashes: 1: tkslytxMSBZvqbvV3oZxwiBBW2c.crl (hash: 7RGMdjwtlC+qvsDPEh74nH15ydsSaKOxgncr56AluUw=)
2: wjfeNIT2f9SQVrYh283P4LAEn3I.roa (hash: xyRve1H3yBDvVaJ3b/2Cr7b0uxIWJOpGM6Hi6WICalY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e4:1b:2e:eb:7d:ed:85:18:01:24:b9:85:0f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64b25cadc4c48166fa9bbd5de8671c220415b67
Validity
Not Before: Mar 29 08:00:33 2026 GMT
Not After : Mar 30 08:00:33 2026 GMT
Subject: CN=79a308c14919d88c86f92b965d6eab2c495d937f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8b:25:5d:84:85:51:2f:89:bb:bc:89:9a:01:
83:71:f8:80:93:23:49:d8:3a:a4:4d:9a:ef:25:67:
54:37:c1:f4:be:f1:fd:fe:07:13:16:ab:1c:22:83:
50:22:fc:96:9f:0c:16:f7:f8:cd:d2:97:66:81:db:
e6:32:50:66:a8:24:69:e3:2f:16:e8:ea:cd:9d:8d:
e4:1b:2a:a4:31:e8:47:6f:f3:28:2a:73:70:4d:26:
bd:3c:1f:dd:d9:73:52:0b:71:3c:8d:b3:66:22:6c:
1d:0c:de:e2:3d:c7:6b:fe:8d:e0:0b:c1:da:69:c5:
9b:72:7e:1d:be:cb:3f:78:b6:12:74:c8:ce:d2:f4:
d4:ec:26:7b:46:ad:99:70:21:38:52:e2:bb:4e:24:
22:bc:a5:b5:94:a5:18:4f:99:6d:44:19:28:e6:ae:
02:ee:03:0d:9b:ba:fd:dc:f2:bb:d9:94:9a:00:59:
9c:af:bc:be:6d:eb:29:fe:33:76:6a:6a:19:9e:4d:
25:71:71:a6:34:29:a9:86:75:e7:43:d3:0f:18:b6:
eb:15:56:50:b9:2d:8e:f8:15:35:0c:72:87:02:ad:
9d:5e:da:cf:37:15:d5:b0:a5:83:c9:81:91:5c:89:
cb:10:1a:2a:3a:77:a4:d3:f3:e9:1d:0b:bc:8e:f0:
56:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A3:08:C1:49:19:D8:8C:86:F9:2B:96:5D:6E:AB:2C:49:5D:93:7F
X509v3 Authority Key Identifier:
keyid:B6:4B:25:CA:DC:4C:48:16:6F:A9:BB:D5:DE:86:71:C2:20:41:5B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:af:b2:e8:0f:dc:89:06:6b:c0:77:ba:36:03:03:70:14:60:
5b:df:29:63:3d:1a:3e:e2:15:b6:61:58:07:4f:9f:47:5e:9f:
61:32:6c:b6:3c:0e:4a:da:84:34:4f:53:58:2f:5c:01:0e:74:
6f:33:fa:d0:18:81:8b:0b:73:59:ad:44:18:4c:c8:e3:de:25:
a9:38:2c:ed:e3:f7:9b:4f:f7:1a:32:24:b5:d4:90:cb:63:0a:
ea:eb:7a:62:17:5d:ae:9b:2c:a5:1a:42:f7:73:16:b7:94:e7:
6f:fc:98:02:4d:e5:8a:30:bd:c8:29:8b:a3:b4:22:e7:9e:6d:
3d:93:e4:3d:35:94:64:77:35:0b:e3:90:73:98:df:3a:4c:50:
f0:1c:dc:00:bf:bf:27:f5:a3:a4:c5:7c:54:6b:30:1a:98:d3:
28:f7:d5:ec:79:ee:25:a6:eb:14:a0:84:df:5b:97:53:6c:a6:
48:94:98:02:71:1e:d6:81:db:4d:56:8b:e6:b3:51:6e:15:45:
db:91:fd:2a:82:35:5c:3f:9a:12:d4:4d:99:45:66:b0:95:72:
37:25:1e:97:6b:aa:15:61:d3:56:0f:81:d7:b2:84:94:50:08:
45:76:20:35:01:b3:93:51:20:2c:c2:e4:6d:e9:55:1c:42:3f:
23:72:65:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:12 2026 by rpki-client