Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
File: tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft (raw, json)
Hash identifier: 2yCEDUCjOPHs0RHeix6GKxvV22FzPUy+9/h+yqNP60s=
Subject key identifier: CE:56:91:E9:73:B9:63:6C:EE:96:F9:47:B2:DC:AC:3D:39:10:50:EE
Authority key identifier: B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31
Certificate issuer: /CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31
Certificate serial: 019D3A544F780A246AC0FBE4C4B3A5E13902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 16:01:37 +0000
Manifest this update: Sun 29 Mar 2026 16:01:37 +0000
Manifest next update: Mon 30 Mar 2026 16:01:37 +0000
Files and hashes: 1: tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl (hash: ofqsi+htkd7yvX/t+TiJxryJ10aqb0xJIFtj+tjIwOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:4f:78:0a:24:6a:c0:fb:e4:c4:b3:a5:e1:39:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31
Validity
Not Before: Mar 29 16:01:37 2026 GMT
Not After : Mar 30 16:01:37 2026 GMT
Subject: CN=ce5691e973b9636cee96f947b2dcac3d391050ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9c:ed:42:59:58:64:62:43:7a:5a:79:00:e2:
0d:82:8b:65:55:bd:57:d0:f1:cb:1b:92:d1:e4:2a:
29:b9:c6:1d:98:7d:ba:c3:c4:9c:77:35:ed:a9:43:
19:02:25:21:21:44:77:2e:ec:13:3e:a7:73:ec:2a:
dc:74:6b:79:35:68:cb:7a:9c:4d:74:86:11:d6:c0:
0d:51:56:e7:7c:fa:56:1c:32:63:14:1f:19:cc:7f:
a2:11:75:2a:dd:0b:1d:ae:42:85:0d:c1:05:c9:92:
97:d8:93:fc:01:ed:c9:3b:a0:8b:6a:55:ab:76:da:
85:3e:5a:79:cc:58:50:94:6f:b3:03:9a:d9:46:0b:
44:7c:81:99:dc:cf:3e:b5:6d:f2:22:2e:54:0a:75:
b9:aa:34:9f:1f:66:63:1c:79:66:1c:8e:86:39:0e:
91:e1:75:c1:4e:db:31:ee:62:fa:3d:5a:3d:d9:68:
9c:1c:2e:a0:ef:25:60:b5:fc:81:a8:b8:cd:8d:08:
b0:1b:16:9c:ed:24:9b:a1:ec:80:19:a7:8a:d2:98:
01:10:ba:60:26:d0:b4:e8:6d:16:aa:79:7b:31:cb:
eb:30:6e:9a:9e:c3:29:bf:96:10:55:cc:a9:68:e4:
1a:62:33:46:12:41:2d:d2:ff:ef:e6:05:a3:e6:8f:
7e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:56:91:E9:73:B9:63:6C:EE:96:F9:47:B2:DC:AC:3D:39:10:50:EE
X509v3 Authority Key Identifier:
keyid:B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ed:71:56:2b:8e:d7:b2:d9:a9:05:11:d2:b4:ef:29:00:71:
6e:df:95:e8:52:74:b3:af:f5:71:bb:b6:e7:d3:5a:18:e1:4c:
a3:57:5f:e8:63:56:d3:d9:8c:4c:4f:7e:a4:65:9b:3c:10:c7:
6a:4b:31:95:5a:52:c5:71:b3:a6:05:d7:be:aa:ca:fa:8a:69:
2b:61:4f:65:85:a0:02:e8:3f:54:51:b9:d2:32:ee:f0:37:8a:
6f:f8:6e:60:17:a7:54:a8:bb:c9:b2:46:d5:1a:db:6f:3b:75:
85:d5:c2:99:32:ce:da:90:14:8c:a3:f9:6f:eb:80:73:63:08:
1a:25:8c:a3:4c:6f:28:75:dd:0d:e5:ff:0b:8c:bb:9a:6d:9b:
91:e4:6f:79:bf:1e:f8:93:71:3d:dd:5e:64:8b:2c:49:98:c7:
bd:ee:f3:29:77:45:fc:4c:17:2a:7d:e3:ec:b3:ab:0a:6a:dc:
0d:32:e5:93:24:0e:d8:78:d6:95:62:8f:00:5a:25:6a:bf:2c:
14:be:4b:f1:f6:63:bb:f2:56:34:c7:23:69:ae:3c:9e:df:e1:
20:a6:3b:58:e9:74:b8:f7:7a:82:af:95:27:70:38:28:da:6a:
cd:35:bb:44:65:50:f1:aa:76:89:1a:6d:54:a1:19:5b:29:6e:
56:e7:86:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:08 2026 by rpki-client