Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
File: TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft (raw, json)
Hash identifier: D0GnVKtDQI4unQ8pBp2ATN6U9E2FB+EbZvggNjy4OoM=
Subject key identifier: 43:C1:6E:5D:8E:92:AB:23:A2:12:7F:84:B4:D3:E4:8F:0D:FD:2D:2F
Authority key identifier: 4C:D3:F4:E5:67:FD:54:1E:5A:F0:C9:E8:8D:11:A9:0D:3E:21:D4:67
Certificate issuer: /CN=4cd3f4e567fd541e5af0c9e88d11a90d3e21d467
Certificate serial: 019D38D2A8E955E6DD88CCC38FFE3462FE39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNP05Wf9VB5a8MnojRGpDT4h1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
Manifest number: 7C
Signing time: Sun 29 Mar 2026 09:00:23 +0000
Manifest this update: Sun 29 Mar 2026 09:00:23 +0000
Manifest next update: Mon 30 Mar 2026 09:00:23 +0000
Files and hashes: 1: TNP05Wf9VB5a8MnojRGpDT4h1Gc.crl (hash: hsnkUROKkhBS9+9jBxJaqqkWtGm6KRpPlFaVPuWPkGA=)
2: nTO_7v382DQXa1KT96uc5_krM68.roa (hash: lvxYvuFUrUzZ06gSOq8z2zV5Teg8Jnnl+h1rg47zK30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNP05Wf9VB5a8MnojRGpDT4h1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a8:e9:55:e6:dd:88:cc:c3:8f:fe:34:62:fe:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd3f4e567fd541e5af0c9e88d11a90d3e21d467
Validity
Not Before: Mar 29 09:00:23 2026 GMT
Not After : Mar 30 09:00:23 2026 GMT
Subject: CN=43c16e5d8e92ab23a2127f84b4d3e48f0dfd2d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:83:18:fb:4e:a8:96:b4:69:b6:d8:99:db:
ce:df:26:ee:09:d0:25:4a:25:76:57:fd:b3:02:c3:
f6:2e:a9:26:b4:db:36:de:a4:84:97:05:52:1a:8d:
c7:f6:9f:72:96:8b:d0:36:fd:70:8f:01:ee:f2:67:
ff:b2:69:21:32:81:de:4b:12:63:40:70:13:83:5c:
84:95:37:85:2e:3b:39:d0:52:f8:4f:83:55:3c:e9:
b9:5d:15:45:4b:3e:c8:5a:86:7c:2b:24:80:3d:4b:
2d:22:6b:0d:2d:62:5f:ac:65:77:a5:a6:da:00:61:
df:93:a9:0e:9d:97:ae:e3:92:f0:32:c1:6f:6e:23:
1d:b3:15:07:f3:cc:34:fe:52:14:8c:f3:e5:f2:2a:
77:91:c1:09:9c:85:1a:3c:ee:ad:92:7e:72:10:9a:
47:b4:86:35:0d:00:f4:9d:3e:64:d3:96:f8:2d:59:
b3:3c:6e:ce:9a:82:4e:90:2e:76:f2:90:64:92:7b:
74:0e:90:84:fe:ea:4b:4e:a3:eb:31:e4:d8:ef:d0:
60:40:7e:2b:6d:9d:94:5d:8c:c4:e5:be:70:eb:a4:
ef:d5:41:43:22:e0:0c:f4:4b:4b:7e:92:47:08:dc:
90:41:0c:d6:46:40:76:ac:e3:a0:3f:e5:3c:8e:83:
8c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C1:6E:5D:8E:92:AB:23:A2:12:7F:84:B4:D3:E4:8F:0D:FD:2D:2F
X509v3 Authority Key Identifier:
keyid:4C:D3:F4:E5:67:FD:54:1E:5A:F0:C9:E8:8D:11:A9:0D:3E:21:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNP05Wf9VB5a8MnojRGpDT4h1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:7f:ea:d1:9d:35:d7:9e:b8:be:a1:d7:02:6a:83:b6:27:c2:
cd:e5:31:99:c6:43:0e:0a:a3:06:79:6e:b5:56:3f:19:60:7b:
b8:16:5a:96:f8:c1:60:53:82:20:77:7e:f1:41:49:49:dd:e3:
51:4b:54:52:5e:fd:73:ea:61:3b:52:0b:44:a3:2f:f2:4f:38:
b3:4d:80:55:c4:33:32:5b:9a:d9:6f:d9:a5:a0:63:b6:9b:d4:
5d:b1:f7:d5:a5:97:07:53:3a:60:7b:55:0d:54:09:de:d7:1b:
c8:65:57:e1:5f:45:c3:27:0f:07:4d:24:c3:fe:a3:90:73:d9:
f2:6a:35:cf:26:76:88:cc:56:bb:30:05:dd:d7:ce:f8:21:31:
76:8c:d6:13:c3:ca:26:5a:10:81:17:cd:8a:53:56:ab:87:f9:
09:75:06:d7:bb:95:2c:a7:a1:65:5d:80:2b:c4:0f:9c:1f:1b:
97:51:4d:59:eb:dd:ac:1b:1e:74:09:45:ae:d9:fb:96:19:e6:
5d:bd:05:c3:18:a0:2e:fe:f2:28:6b:fe:ff:a8:91:73:c1:51:
6e:cd:02:88:d2:23:0e:04:60:e9:26:1f:a3:b3:26:d3:f7:16:
f0:2b:98:c5:19:9d:8c:bd:9d:1f:a7:0e:c7:8c:07:70:ba:89:
96:51:f9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:42 2026 by rpki-client