Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft
File: tme4cki-Ko4zew55BX2JQHmMd5o.mft (raw, json)
Hash identifier: MnhKpJF5xZ3bzp0jz2S7i2fG9JENfHoSducBVgjQOjg=
Subject key identifier: E7:20:98:42:70:E1:FA:8B:20:43:AA:47:12:6C:98:58:3D:6B:BA:16
Authority key identifier: B6:67:B8:72:48:BE:2A:8E:33:7B:0E:79:05:7D:89:40:79:8C:77:9A
Certificate issuer: /CN=b667b87248be2a8e337b0e79057d8940798c779a
Certificate serial: 019D3909F2B25AC9ACD25B6A8A67F4F5B80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tme4cki-Ko4zew55BX2JQHmMd5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft
Manifest number: 05BE
Signing time: Sun 29 Mar 2026 10:00:46 +0000
Manifest this update: Sun 29 Mar 2026 10:00:46 +0000
Manifest next update: Mon 30 Mar 2026 10:00:46 +0000
Files and hashes: 1: tme4cki-Ko4zew55BX2JQHmMd5o.crl (hash: lRi1sA2o/UEDO0+Kdj2XxAhjbWwcSW0fiAFwGMhzjRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/tme4cki-Ko4zew55BX2JQHmMd5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:f2:b2:5a:c9:ac:d2:5b:6a:8a:67:f4:f5:b8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b667b87248be2a8e337b0e79057d8940798c779a
Validity
Not Before: Mar 29 10:00:46 2026 GMT
Not After : Mar 30 10:00:46 2026 GMT
Subject: CN=e720984270e1fa8b2043aa47126c98583d6bba16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:69:9d:b2:75:fc:7c:92:33:a9:f5:b4:ac:0b:
3e:42:2d:01:bf:13:a9:b7:87:cd:f2:33:50:51:42:
32:51:c9:cb:78:f1:6a:e4:24:08:61:59:ae:0d:44:
47:11:1c:d8:0a:70:47:a0:e7:70:75:c3:67:8f:b4:
59:67:bc:b3:2b:74:fc:07:88:e0:9e:42:32:18:e3:
56:50:f2:f8:48:dc:fa:cd:a9:4f:21:34:73:c4:0a:
9e:63:87:27:b1:a7:d5:94:88:24:04:cf:10:f6:e4:
54:e9:e2:4b:1a:45:5a:9e:69:90:8f:3f:83:09:7b:
44:0c:0b:3a:e9:2d:cb:99:92:3d:04:9a:36:4b:f3:
01:34:8d:dc:a7:f7:0e:2e:4f:37:c6:e4:4f:0e:19:
9e:85:36:36:06:23:88:65:eb:db:4c:a5:dc:79:ab:
ff:6a:64:d8:ac:c7:cf:ea:d4:d3:a7:fe:88:27:7f:
3d:ba:f6:87:32:1a:01:2a:a5:cf:22:84:33:5d:6d:
46:b5:ae:d7:3a:e7:1d:cd:09:f4:5e:86:9e:53:4c:
ab:b5:40:ee:7a:ae:73:c5:16:e3:7a:e0:b7:66:e1:
5d:23:71:e8:14:3e:ef:39:5d:1d:8c:99:6a:90:cd:
b9:25:50:38:02:7a:24:24:6a:7f:0f:55:c8:72:d2:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:20:98:42:70:E1:FA:8B:20:43:AA:47:12:6C:98:58:3D:6B:BA:16
X509v3 Authority Key Identifier:
keyid:B6:67:B8:72:48:BE:2A:8E:33:7B:0E:79:05:7D:89:40:79:8C:77:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tme4cki-Ko4zew55BX2JQHmMd5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f1:6f:58:18:2a:25:46:f7:25:71:47:a8:9e:9e:92:58:82:
32:12:3d:1c:93:37:88:a5:2b:16:98:79:7a:40:83:6c:10:53:
c6:2d:c8:bb:12:b8:ff:57:43:f9:00:43:97:2c:c9:d5:f4:34:
dc:8f:bf:83:5b:21:ea:14:0a:64:c8:e5:db:6a:7d:94:0f:8f:
5e:1a:ab:b4:44:54:d3:54:59:b9:f5:b1:2d:a9:f1:f0:b7:36:
e8:45:93:ad:e4:2a:eb:82:51:f5:37:7b:fd:a4:a9:49:c0:ff:
34:a3:77:30:9a:03:fd:a2:9e:10:1c:6d:e1:f6:29:fa:c8:1d:
18:6b:d7:3e:ba:94:4b:35:e0:a2:ef:2d:e0:22:8e:79:fe:d0:
1a:c0:ce:0e:4f:28:8e:92:84:af:32:81:ff:5d:4c:7c:99:e1:
f9:b8:39:9b:39:de:96:5c:66:79:75:f5:42:17:0a:2a:93:9f:
85:48:4f:cd:e7:41:5f:2d:b1:94:3d:fa:16:40:3d:8d:81:f6:
38:0a:75:70:bc:e9:da:da:2d:58:03:5d:0a:dc:f6:64:c9:3b:
a6:e1:41:d9:da:62:b0:a5:12:52:0b:51:79:5f:df:a4:01:6f:
de:41:aa:d8:1c:71:87:12:ba:fd:89:51:f8:04:03:19:71:8a:
57:4b:0d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:35 2026 by rpki-client