Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.mft
File: TYJcWjaxil5MorUyJtWgW1kN3J4.mft (raw, json)
Hash identifier: UvQM5Q1YC9tWETWYBxcSj06sOq4mM7sJJiYGSUvTNeM=
Subject key identifier: 74:85:9A:29:83:8E:27:90:15:67:A3:D7:0D:CB:6D:78:94:84:18:A2
Authority key identifier: 4D:82:5C:5A:36:B1:8A:5E:4C:A2:B5:32:26:D5:A0:5B:59:0D:DC:9E
Certificate issuer: /CN=4d825c5a36b18a5e4ca2b53226d5a05b590ddc9e
Certificate serial: 019D3A1CF329A6A4DDA92AAB87338A00F890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYJcWjaxil5MorUyJtWgW1kN3J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.mft
Manifest number: 0194
Signing time: Sun 29 Mar 2026 15:01:08 +0000
Manifest this update: Sun 29 Mar 2026 15:01:08 +0000
Manifest next update: Mon 30 Mar 2026 15:01:08 +0000
Files and hashes: 1: TYJcWjaxil5MorUyJtWgW1kN3J4.crl (hash: sBZ4TKRmVwILD4TfpSNJ6EQLkSkYHIYtkp61R9zpHQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYJcWjaxil5MorUyJtWgW1kN3J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:f3:29:a6:a4:dd:a9:2a:ab:87:33:8a:00:f8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d825c5a36b18a5e4ca2b53226d5a05b590ddc9e
Validity
Not Before: Mar 29 15:01:08 2026 GMT
Not After : Mar 30 15:01:08 2026 GMT
Subject: CN=74859a29838e27901567a3d70dcb6d78948418a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:94:18:73:51:2d:0f:e3:bc:d6:73:0e:77:25:
84:4a:75:77:f9:e6:c3:68:85:5c:02:8b:6c:de:b7:
7b:46:38:51:9e:84:7b:08:ee:6c:2a:ab:bc:db:fa:
6a:c7:87:92:76:b5:64:6c:a4:1a:74:a4:ce:e1:c8:
22:2f:3e:57:f5:87:42:f0:3b:bc:da:8d:b4:d5:34:
29:1a:bc:94:88:7f:7b:dd:a7:cb:af:1f:9b:8d:e2:
e7:9e:00:3b:1c:ca:00:fd:c9:d2:c3:e1:a7:aa:0d:
de:cc:ac:7f:2a:6c:bf:d4:b1:d9:d6:b8:1a:77:d1:
56:f7:2a:21:6e:f7:e5:b6:bf:52:e4:7b:f5:d5:24:
2c:03:4d:51:90:24:e0:32:94:4b:d1:1c:10:92:8e:
19:d6:87:63:52:f0:8f:6b:e4:6f:3f:b0:d4:93:25:
ea:07:ad:2b:04:9a:47:27:85:63:9b:ef:66:b2:f0:
9f:13:0c:08:22:a3:24:ae:30:7d:54:39:84:ad:a6:
e6:c8:ac:9b:ba:cf:db:0d:6e:b9:c8:a2:9f:28:04:
99:80:d3:80:5b:e4:ed:ad:40:a5:b4:1b:e3:c6:2f:
be:bc:af:c1:1d:ed:ed:45:24:cf:2a:01:32:49:61:
90:c8:aa:82:5b:89:9d:a4:d6:53:89:2c:51:85:a1:
f0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:85:9A:29:83:8E:27:90:15:67:A3:D7:0D:CB:6D:78:94:84:18:A2
X509v3 Authority Key Identifier:
keyid:4D:82:5C:5A:36:B1:8A:5E:4C:A2:B5:32:26:D5:A0:5B:59:0D:DC:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYJcWjaxil5MorUyJtWgW1kN3J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f9:8b:b6:41:fe:cb:f9:27:76:50:6f:af:0b:44:d7:e8:f1:
38:82:ec:19:7f:5e:c7:c9:06:b2:9f:35:ec:b5:63:c3:05:76:
29:1d:a2:0f:db:c5:7e:61:7b:72:8d:89:e9:46:65:2e:e3:99:
d5:02:93:0c:88:31:3e:da:70:87:e1:65:66:be:d9:a9:2c:50:
84:11:8e:65:24:6f:e3:37:df:85:00:c8:60:da:a1:1f:90:6d:
17:68:0b:e5:02:8e:37:ad:6f:35:53:20:90:f7:2c:69:db:09:
6f:c8:e4:43:8f:87:c4:f3:d1:5f:fe:52:34:56:79:91:fa:e7:
4e:6e:31:76:27:5a:47:ac:fb:d7:41:83:35:40:5d:32:96:ed:
ff:bc:03:c6:e1:56:c4:a5:1e:66:e1:ca:5b:c3:00:0c:a7:6e:
88:10:94:9f:e1:a4:bb:a5:1e:92:bc:cf:2f:91:55:a8:b5:f2:
83:b5:f7:3f:96:9e:04:fe:7c:22:9d:7e:e0:9f:c0:b1:bb:3c:
d9:e1:7b:aa:06:6a:0f:b7:13:67:9a:97:c8:75:cd:eb:51:3b:
d0:ba:19:62:36:21:38:29:d3:80:64:9d:36:cf:16:b4:75:4b:
df:f2:ba:32:19:1f:d7:37:fd:24:54:74:94:96:61:88:2b:a2:
34:a3:8b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:12 2026 by rpki-client