Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier: l37Ve/3npbArqx7wfAkB4ydSbIwGp06etdlp3nk2HvE=
Subject key identifier: 6E:99:D9:4D:7B:A1:D8:13:58:D4:FD:36:19:24:88:B6:D5:B9:65:DF
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial: 019D08C34660D2C6C1BAEC2DA769B93949C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number: 1877
Signing time: Fri 20 Mar 2026 01:01:48 +0000
Manifest this update: Fri 20 Mar 2026 01:01:48 +0000
Manifest next update: Sat 21 Mar 2026 01:01:48 +0000
Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: s1Hc74XEMI7j1EysEJw7EAatVdIe4peqf1z3xka0FSM=)
2: owMZq8FjMrGcWydVPo2XzsNX_wE.roa (hash: oerV8Rk8gelATCf/K/1z5Pi6X6k6wK997b4CHySJpco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:c3:46:60:d2:c6:c1:ba:ec:2d:a7:69:b9:39:49:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Validity
Not Before: Mar 20 01:01:48 2026 GMT
Not After : Mar 21 01:01:48 2026 GMT
Subject: CN=6e99d94d7ba1d81358d4fd36192488b6d5b965df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:4e:1c:5b:9f:ad:6d:e5:f3:58:cd:2b:6e:
6b:a3:58:c9:c8:9e:3d:b2:68:43:2f:94:9b:48:45:
32:2f:f8:38:e1:80:d4:cf:29:25:dc:2e:ac:5d:39:
7e:c0:78:c0:3a:0b:0c:d4:46:fe:36:f8:d8:6f:ed:
1f:1d:cd:d4:37:63:34:c5:ae:1e:d9:c9:5a:85:26:
d5:09:14:28:46:ad:6c:c7:2e:4f:4b:c0:cb:69:5c:
d1:b6:e0:19:00:1d:4c:8f:02:12:fb:5a:2a:53:c5:
c1:5b:7c:f8:16:7b:3f:e0:fc:4a:17:26:5f:dc:0e:
4c:db:8a:f2:5c:f9:f1:69:66:0d:5b:9e:d5:61:24:
e5:6d:cc:67:83:7a:9f:8c:03:6c:54:2f:b1:2c:d7:
08:53:41:01:f0:d1:e3:0e:ac:d3:d0:89:8a:8e:7d:
30:b5:8e:f4:27:ef:3b:de:7e:a1:93:db:fc:f3:dd:
30:b9:62:bd:b0:f8:a5:05:aa:3e:4b:70:c4:fe:e5:
24:e9:e4:65:1e:ed:28:69:94:2c:c9:cd:63:a9:c6:
05:46:06:7d:d6:b0:f1:65:ef:a5:c2:5b:54:02:a4:
2d:82:8f:6f:ca:e5:ce:50:90:7b:f9:2a:ec:3a:4b:
34:0d:65:a0:db:36:05:97:a9:ef:09:51:e6:63:90:
c7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:99:D9:4D:7B:A1:D8:13:58:D4:FD:36:19:24:88:B6:D5:B9:65:DF
X509v3 Authority Key Identifier:
keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4c:ad:3c:ad:a5:56:a5:fd:0b:b6:2c:ef:2a:26:97:16:f2:
17:06:7b:90:4a:54:f6:36:91:6a:b2:ad:0a:f7:2d:dc:14:96:
0c:45:91:f0:e9:d5:24:94:b8:a0:0e:93:eb:d8:76:fc:ee:b5:
d0:0e:bb:ab:94:9f:9d:44:2f:aa:1b:5a:ab:e9:21:42:45:61:
89:c1:84:50:23:e8:8c:27:a6:b1:91:25:e8:4a:3c:95:b6:c8:
cb:4d:1f:94:43:d4:fd:0d:37:7b:c5:9f:87:44:7e:bc:e2:9b:
fd:2a:cb:c3:eb:f2:1c:5a:b0:af:f2:d0:59:45:8b:91:bb:6e:
98:29:b5:39:08:f2:55:b5:97:94:48:ab:49:c1:02:f8:d5:08:
bd:86:84:e7:17:4d:e2:74:9e:c5:29:72:04:2d:04:75:09:a3:
cd:07:48:f4:6a:54:d7:32:cd:36:bf:a9:f7:98:dc:71:53:22:
c3:e7:de:87:08:4b:72:a1:26:20:43:7e:82:08:96:01:4f:22:
e2:9f:c1:c4:66:9c:64:d3:90:33:d2:f4:67:67:d0:64:a0:7b:
cc:0b:dd:a3:09:b4:06:8a:ff:54:d8:a3:5d:dc:11:08:4c:82:
4c:7c:5d:6a:f2:95:e3:4b:eb:ee:39:69:40:a6:9a:24:fd:f0:
54:0b:30:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 04:04:25 2026 by rpki-client