Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
File: tPo4W-BSv6QF36zSnyarbwAeYEc.mft (raw, json)
Hash identifier: z4JwcP48luF1LQJij8FWOfAO9oSYjOlgy50WX/OAnXE=
Subject key identifier: D0:D8:2E:A1:85:95:AB:2D:DC:3C:26:14:47:1C:91:01:1B:5E:AA:07
Authority key identifier: B4:FA:38:5B:E0:52:BF:A4:05:DF:AC:D2:9F:26:AB:6F:00:1E:60:47
Certificate issuer: /CN=b4fa385be052bfa405dfacd29f26ab6f001e6047
Certificate serial: 019CE66D8E1B4A081790FBE5923772D89F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
Manifest number: 06DE
Signing time: Fri 13 Mar 2026 09:01:05 +0000
Manifest this update: Fri 13 Mar 2026 09:01:05 +0000
Manifest next update: Sat 14 Mar 2026 09:01:05 +0000
Files and hashes: 1: tPo4W-BSv6QF36zSnyarbwAeYEc.crl (hash: xiVOp7sCufdaNOe5win9GZR6sTfiQzM8El0QvheCuIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:8e:1b:4a:08:17:90:fb:e5:92:37:72:d8:9f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fa385be052bfa405dfacd29f26ab6f001e6047
Validity
Not Before: Mar 13 09:01:05 2026 GMT
Not After : Mar 14 09:01:05 2026 GMT
Subject: CN=d0d82ea18595ab2ddc3c2614471c91011b5eaa07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:25:1a:93:06:64:3d:89:ae:e2:20:0c:a0:13:
76:8d:07:02:6e:05:80:65:1d:29:78:61:ea:43:50:
76:de:e5:bb:8a:d8:35:83:98:ed:95:d6:ca:9f:c7:
e7:be:fb:ed:42:5b:69:01:11:5d:02:f3:c0:17:0e:
4b:b0:20:54:70:1b:32:e3:b9:1f:74:f1:82:5b:41:
22:52:bb:1c:cb:92:bd:9e:04:5f:80:e6:8e:71:4c:
5e:5d:2c:bb:0e:8d:0b:92:fd:81:85:4c:b2:c3:d5:
f2:50:61:5d:1f:3c:72:98:3e:1f:2d:c8:9e:62:cb:
46:db:6c:b5:c2:91:83:0b:f4:af:0d:7f:75:49:cc:
df:ad:c1:d9:f0:98:1d:69:60:d9:5e:4f:4f:2f:69:
05:9a:6c:45:c7:eb:a4:dc:ee:d3:7f:e0:13:e1:00:
9f:53:ed:9e:d1:c9:2c:61:c1:14:ce:62:0d:f3:da:
0d:3b:7b:4d:b9:23:ef:df:3e:8d:3e:0f:55:96:26:
a3:5e:c2:cb:af:74:b3:0a:82:8d:28:df:d8:97:06:
39:b5:60:73:bc:13:97:f7:e4:c6:20:ce:4b:81:4c:
d5:50:86:5d:06:cc:4b:e0:a6:70:a2:15:71:a8:49:
40:ca:c9:de:70:9f:c0:3c:19:b9:35:00:cc:1e:8b:
4a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D8:2E:A1:85:95:AB:2D:DC:3C:26:14:47:1C:91:01:1B:5E:AA:07
X509v3 Authority Key Identifier:
keyid:B4:FA:38:5B:E0:52:BF:A4:05:DF:AC:D2:9F:26:AB:6F:00:1E:60:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:94:2f:4e:4f:95:8b:cd:90:e0:3b:bc:e9:e9:8e:ec:44:dc:
84:6b:bb:0f:06:27:da:a0:4e:04:6e:ea:e2:98:7c:00:b7:5c:
03:99:af:20:67:65:15:f4:2c:77:b0:63:26:6d:62:8d:d0:45:
a7:77:ce:52:f7:c0:f7:a9:15:90:ce:d9:cd:e6:2d:b0:17:25:
af:a5:3d:eb:b2:5e:ae:b5:aa:26:5d:d0:a5:44:a0:69:85:c0:
10:6c:e1:90:aa:9b:cc:01:9c:ea:ec:78:93:f9:d9:fa:2f:42:
66:56:2e:10:40:ad:5b:75:4f:a4:af:e5:b0:b8:55:8d:3d:45:
28:66:51:ad:86:39:c5:c3:cc:63:bc:b9:18:b2:ec:4a:06:b3:
7b:5b:72:8a:e4:ad:e9:5e:2e:1b:42:2c:0c:59:2c:5f:52:f3:
fb:07:a5:9c:22:6c:6b:68:5d:f4:cc:6f:cd:b5:a3:3e:9a:2c:
c8:93:ff:6f:df:c8:08:85:27:9a:65:a5:a7:59:a2:de:2d:cf:
a5:5c:b0:bf:91:b1:88:fa:1d:9b:97:52:6f:cf:91:8c:57:0c:
9a:6e:06:4e:2c:15:36:d4:0e:0c:18:5c:af:ab:f9:d6:00:a8:
84:b8:06:43:0c:5f:ee:da:cf:74:c1:87:82:ff:2e:74:53:de:
65:85:5f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:14:17 2026 by rpki-client