Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
File: TM6YuMJCaF3bYPTiEJwr01GmQn8.mft (raw, json)
Hash identifier: QrUxlrOHpYwEb1eJpOJAeqA792iEmnfxmbv8GTPZKWg=
Subject key identifier: F5:99:B2:3D:C4:CE:8E:A2:2D:53:8D:AE:90:BB:82:DF:D0:49:4C:05
Authority key identifier: 4C:CE:98:B8:C2:42:68:5D:DB:60:F4:E2:10:9C:2B:D3:51:A6:42:7F
Certificate issuer: /CN=4cce98b8c242685ddb60f4e2109c2bd351a6427f
Certificate serial: 019D382DD2BEA1C11BD2CD4C22C70EC52CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 06:00:20 +0000
Manifest this update: Sun 29 Mar 2026 06:00:20 +0000
Manifest next update: Mon 30 Mar 2026 06:00:20 +0000
Files and hashes: 1: TM6YuMJCaF3bYPTiEJwr01GmQn8.crl (hash: sYlYpFqR/zEfcIDFl1udYITvEvNkra25YjVo2DLFlLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:d2:be:a1:c1:1b:d2:cd:4c:22:c7:0e:c5:2c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cce98b8c242685ddb60f4e2109c2bd351a6427f
Validity
Not Before: Mar 29 06:00:20 2026 GMT
Not After : Mar 30 06:00:20 2026 GMT
Subject: CN=f599b23dc4ce8ea22d538dae90bb82dfd0494c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2e:d4:f5:19:2a:4b:2c:0b:a3:88:46:75:01:
34:65:14:71:f0:bd:69:a8:84:2e:de:ab:91:23:6d:
e1:7b:0d:e4:0c:11:90:81:13:f0:16:37:e0:33:2f:
10:83:59:bf:cf:ab:65:1d:e1:97:4a:83:a2:2d:83:
a7:c1:df:6f:2a:82:38:eb:a1:53:30:ed:8c:21:db:
6b:d6:87:ee:f1:c4:88:dd:3c:8c:48:d2:b4:07:10:
b3:c8:01:60:75:93:97:bc:0f:a0:a1:a4:ee:d1:e4:
fa:9a:08:13:06:6e:e9:db:df:3c:65:d9:aa:4d:49:
e9:f0:5f:81:3f:68:ab:c0:55:95:b8:1e:39:3b:6e:
cc:b5:a8:88:d4:c8:be:f1:a4:21:db:04:50:d1:c1:
a7:44:01:6d:7e:2b:16:08:bd:83:df:1e:e8:ad:91:
27:77:60:f7:81:23:a5:7e:56:a7:dc:f6:b7:95:30:
53:85:5c:2b:0b:c4:92:ef:8c:6f:79:43:ca:f9:7b:
b2:4c:5a:41:9f:9e:81:bc:cc:f4:15:82:8c:95:30:
de:8e:10:21:11:67:ac:ee:5e:14:f8:68:7f:e2:90:
0d:d3:1a:e4:09:9a:32:ef:a4:12:bf:82:7e:58:85:
6e:a7:0e:15:c5:65:67:9e:64:06:7d:47:de:66:d6:
fe:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:99:B2:3D:C4:CE:8E:A2:2D:53:8D:AE:90:BB:82:DF:D0:49:4C:05
X509v3 Authority Key Identifier:
keyid:4C:CE:98:B8:C2:42:68:5D:DB:60:F4:E2:10:9C:2B:D3:51:A6:42:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:02:93:cc:da:e8:60:d1:83:e8:53:42:e8:28:58:e4:21:6c:
2f:50:c2:f2:c7:d8:e7:4e:af:db:7d:06:89:2e:5f:83:08:c3:
9f:90:da:e5:54:c4:66:fb:f8:1a:b6:43:7a:7e:d0:b7:0e:46:
40:e0:dc:44:46:7e:1e:ae:a3:2d:c8:70:6e:7a:ed:1e:15:af:
c4:e8:40:c9:ad:6d:d9:cc:28:e3:4f:e7:f3:6f:86:f5:8a:46:
c5:ae:7f:4f:f0:f1:6b:2b:9c:04:72:91:9c:44:57:21:f8:dc:
db:8e:a6:a5:5a:ff:e2:d3:23:25:b6:46:42:5d:f5:e5:7e:d8:
91:d4:10:52:8e:ab:7d:87:08:3a:d7:cc:c5:58:c5:83:67:3f:
8b:7e:c7:df:3d:45:43:22:73:08:f5:76:dc:f5:40:0b:f8:80:
ae:67:f6:2a:f0:00:7b:08:8e:14:20:9e:21:5f:68:13:e7:1f:
d1:d7:c1:a8:76:f1:2d:d1:5a:11:f8:d2:b4:50:6d:37:d8:31:
b4:53:5f:ea:6b:e4:b0:07:9a:0d:29:4e:67:5c:6c:94:3a:b0:
9e:10:de:11:f5:c3:95:17:75:5d:08:e2:2c:2f:11:cb:48:49:
2c:bc:da:ee:34:a3:c2:18:94:12:3e:38:76:d8:11:9b:cd:d5:
28:40:5c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:55 2026 by rpki-client