Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier: X1tOTkNySt0EY29UlwN8f3CMF51pb0Hiffsvoo4IHFQ=
Subject key identifier: 8C:1D:46:6C:91:D8:DA:2D:C9:BE:CC:E0:48:99:84:FA:AD:A1:6F:5D
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial: 019D37899324083E978918A7ED6F8790D70E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number: 189E
Signing time: Sun 29 Mar 2026 03:00:56 +0000
Manifest this update: Sun 29 Mar 2026 03:00:56 +0000
Manifest next update: Mon 30 Mar 2026 03:00:56 +0000
Files and hashes: 1: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: zmztuYxK0rVRIwQzyVIzvELRn6YOzoD/nuzn0B7j/X4=)
2: rFBai3dtN7fZfaYWmO7HTtf0n_k.roa (hash: VWZKUi8qjHJhvT6NFBJ/pi6UQ/Bzuh/5fCRivrLEGWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:93:24:08:3e:97:89:18:a7:ed:6f:87:90:d7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Validity
Not Before: Mar 29 03:00:56 2026 GMT
Not After : Mar 30 03:00:56 2026 GMT
Subject: CN=8c1d466c91d8da2dc9becce0489984faada16f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:90:2b:4e:b6:8f:22:56:f9:8a:40:e9:5a:
fe:77:00:75:f3:92:6f:21:b3:7b:80:90:0e:b0:ac:
66:dd:94:63:be:ea:c1:8a:06:6c:c3:18:8a:c6:3b:
82:a3:9c:81:f8:4e:87:5f:92:07:d5:ba:00:57:c1:
bc:51:2e:e4:bb:1a:37:da:aa:6f:73:90:2d:dd:86:
03:8a:e0:15:66:38:f1:45:e4:a8:5c:47:d1:f5:25:
0f:a9:f0:45:5c:ae:eb:3f:9b:8f:9e:82:07:98:b8:
b5:b1:57:f0:b8:41:f0:45:8d:a6:dd:d3:46:b6:b8:
10:a1:3c:d0:dd:8e:ac:8d:b8:e6:44:74:82:b6:d1:
6d:c4:d8:6f:34:e0:50:bd:23:5f:3a:04:78:6a:07:
85:95:80:72:9c:1e:98:43:2c:99:e2:d6:bb:25:43:
19:d9:22:42:06:52:e3:5b:91:73:e1:50:d3:22:4e:
34:ac:51:d3:be:84:70:b6:ce:16:6b:fd:8b:f7:aa:
ce:21:e4:8f:55:47:e8:41:28:d6:63:01:42:5b:f0:
f9:3b:b8:3f:fb:b6:19:33:4e:8c:7d:18:54:a7:b3:
0d:dc:42:c2:6c:32:de:ec:a9:00:3b:d0:7e:ff:53:
a9:87:b4:96:83:12:b7:11:44:4b:d3:f6:8c:63:f5:
fd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1D:46:6C:91:D8:DA:2D:C9:BE:CC:E0:48:99:84:FA:AD:A1:6F:5D
X509v3 Authority Key Identifier:
keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e9:e2:37:01:4f:48:7f:31:77:e2:ae:54:1a:f7:a1:fa:3e:
e2:61:bc:1e:f1:5e:1b:0d:da:ec:62:f5:df:28:af:d4:5a:c2:
9f:08:63:11:0c:f9:4e:6b:c3:98:8c:82:63:f2:bd:a8:79:61:
dd:89:dc:4a:5d:f4:6e:d7:34:4d:25:8e:1c:fe:a9:2f:57:ef:
bb:f9:9f:f8:1b:c0:91:8e:42:1b:a4:0e:a8:e7:8b:f9:88:c7:
a0:c1:37:af:ae:6b:da:20:f0:33:e2:63:6a:7e:81:11:e9:10:
fe:57:ea:4d:01:f0:97:3d:ab:ac:54:af:08:53:0a:5c:03:74:
c9:c6:e6:fb:0e:ce:09:d7:8b:51:a7:ae:87:2a:e1:6c:1e:b4:
d4:4b:54:76:d7:6a:53:1f:bb:4a:12:91:ee:6c:8e:7a:7c:69:
14:d3:10:86:64:62:9a:d6:e0:2a:40:be:10:ad:2b:84:27:3e:
29:79:8e:fb:4a:94:c1:42:d9:cf:be:a3:bf:f9:f1:df:9b:5b:
aa:d9:81:c2:e7:e0:29:44:1f:1f:a8:5e:38:67:c0:67:4c:76:
23:22:c2:e0:13:49:15:43:90:93:95:86:29:9f:cb:60:0e:d2:
b2:52:18:a4:24:1f:ff:14:5f:65:bd:20:2c:f8:20:dd:12:e6:
b4:4a:20:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:11 2026 by rpki-client