Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
File: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft (raw, json)
Hash identifier: UgYGoVOsuLmIV3dUc+Az//UoNo+EhbHSIB+v/UQPXHc=
Subject key identifier: E2:D0:46:E9:A8:A0:E4:3E:47:79:00:BB:0C:AC:F3:F9:4A:91:55:38
Authority key identifier: 4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
Certificate issuer: /CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Certificate serial: 019D390A3310225917E49190CE3789C13CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 10:01:02 +0000
Manifest this update: Sun 29 Mar 2026 10:01:02 +0000
Manifest next update: Mon 30 Mar 2026 10:01:02 +0000
Files and hashes: 1: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl (hash: YehtEOwvkkOvPorTyI9zCx+T1qWgnhxZE9u5qkC2Mq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:33:10:22:59:17:e4:91:90:ce:37:89:c1:3c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Validity
Not Before: Mar 29 10:01:02 2026 GMT
Not After : Mar 30 10:01:02 2026 GMT
Subject: CN=e2d046e9a8a0e43e477900bb0cacf3f94a915538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:25:0b:a7:79:20:86:ba:81:f7:22:31:62:
0f:62:6b:2e:ce:4b:3b:ac:da:e3:a9:4f:d6:8b:50:
49:73:fa:c9:17:51:f9:f8:dd:71:4d:01:7c:8c:a3:
43:87:c9:a0:ca:ef:4b:37:0c:6b:80:39:9a:e3:4c:
7f:fb:d2:1b:f9:3d:c6:8f:6f:50:0a:27:72:e2:09:
7a:90:74:48:2e:3d:ad:da:f1:21:5b:db:ec:86:1d:
5c:3f:ed:86:ad:df:ca:b4:21:84:ab:c2:d9:6e:a2:
87:ec:a9:1a:85:92:71:c9:66:f6:c2:d6:e2:b2:c6:
cd:ac:01:db:14:84:f2:2c:38:82:d6:91:e0:dd:16:
96:06:b7:21:4b:5f:e0:18:71:dc:f5:d8:0b:1a:55:
9b:0f:c4:d1:d3:c9:33:d7:12:e5:51:07:ca:06:5a:
81:ae:f5:88:2e:05:80:11:8f:8d:a4:15:77:80:b8:
42:53:da:b3:da:1c:84:ac:65:8e:a3:07:cf:55:26:
bc:4c:c8:83:11:41:4b:4c:17:b3:a7:0d:fb:73:6a:
19:38:9d:78:b5:91:b6:08:41:5c:42:c6:4c:2c:26:
36:79:dc:e1:1b:95:f0:0f:2e:c3:30:de:43:28:b9:
22:34:d4:ea:69:eb:86:39:24:1b:cf:3b:91:ae:09:
be:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D0:46:E9:A8:A0:E4:3E:47:79:00:BB:0C:AC:F3:F9:4A:91:55:38
X509v3 Authority Key Identifier:
keyid:4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0a:a4:2a:32:a3:7b:65:95:6a:f7:76:0f:c7:01:0d:be:f7:
ca:20:a7:95:88:64:1a:f8:6e:91:d8:d4:94:6c:d2:19:cf:21:
4a:58:80:67:ab:d3:35:8f:2a:99:ef:11:53:e6:e2:c9:c5:e1:
00:59:b9:30:9f:c7:a8:2c:b4:72:94:de:d0:80:cc:29:ae:8d:
87:90:90:3f:0f:56:15:0c:1a:5a:84:63:9e:8e:b2:48:21:91:
a9:05:05:5e:c2:be:57:8e:d2:76:eb:93:b6:4a:9a:cd:7f:fe:
8d:e7:2b:1e:1a:1e:ae:dc:16:f5:4e:44:b6:29:0c:6f:d2:15:
01:37:e7:99:1e:22:80:81:9d:5b:70:bb:05:83:6d:26:c4:c7:
80:de:b6:8a:89:ae:54:f4:48:06:65:8e:b0:8d:22:1a:db:95:
e2:3f:dc:d0:83:b9:de:b7:9a:65:98:2d:81:e2:01:e5:4c:2b:
86:2e:a5:cc:62:fc:9b:12:67:e0:26:ed:94:22:f0:2b:4b:ac:
a7:47:d1:af:88:0e:d9:e5:9e:6c:73:b7:e1:46:d5:79:72:94:
67:e5:10:75:39:d0:e6:c1:01:d0:be:54:e0:85:5c:1f:0d:43:
06:e9:13:76:76:c6:e6:c8:50:4c:22:60:70:f5:b8:21:a4:e8:
5f:37:3a:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CjMQIlkX5JGQzjeJwTzFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkOGMwY2E5YzIxZmExOWRjMDU5MzJiZWZkOTA2MGIxNjBl
ZGM1YzEwHhcNMjYwMzI5MTAwMTAyWhcNMjYwMzMwMTAwMTAyWjAzMTEwLwYDVQQD
EyhlMmQwNDZlOWE4YTBlNDNlNDc3OTAwYmIwY2FjZjNmOTRhOTE1NTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurUlC6d5IIa6gfciMWIPYmsuzks7
rNrjqU/Wi1BJc/rJF1H5+N1xTQF8jKNDh8mgyu9LNwxrgDma40x/+9Ib+T3Gj29Q
Cidy4gl6kHRILj2t2vEhW9vshh1cP+2Grd/KtCGEq8LZbqKH7KkahZJxyWb2wtbi
ssbNrAHbFITyLDiC1pHg3RaWBrchS1/gGHHc9dgLGlWbD8TR08kz1xLlUQfKBlqB
rvWILgWAEY+NpBV3gLhCU9qz2hyErGWOowfPVSa8TMiDEUFLTBezpw37c2oZOJ14
tZG2CEFcQsZMLCY2edzhG5XwDy7DMN5DKLkiNNTqaeuGOSQbzzuRrgm+OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLQRumooOQ+R3kAuwys8/lKkVU4MB8GA1UdIwQY
MBaAFE2MDKnCH6GdwFkyvv2QYLFg7cXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFl3TXFjSWZvWjNBV1RLLV9aQmdzV0R0eGNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC83OTAwOTktMmY5MC00M2JjLWJmMGQt
NmQ1NDk2Y2IxYTQyLzEvVFl3TXFjSWZvWjNBV1RLLV9aQmdzV0R0eGNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC83OTAwOTktMmY5MC00M2JjLWJmMGQtNmQ1NDk2Y2IxYTQy
LzEvVFl3TXFjSWZvWjNBV1RLLV9aQmdzV0R0eGNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQqkKjKj
e2WVavd2D8cBDb73yiCnlYhkGvhukdjUlGzSGc8hSliAZ6vTNY8qme8RU+biycXh
AFm5MJ/HqCy0cpTe0IDMKa6Nh5CQPw9WFQwaWoRjno6ySCGRqQUFXsK+V47SduuT
tkqazX/+jecrHhoertwW9U5EtikMb9IVATfnmR4igIGdW3C7BYNtJsTHgN62iomu
VPRIBmWOsI0iGtuV4j/c0IO53reaZZgtgeIB5Uwrhi6lzGL8mxJn4CbtlCLwK0us
p0fRr4gO2eWebHO34UbVeXKUZ+UQdTnQ5sEB0L5U4IVcHw1DBukTdnbG5shQTCJg
cPW4IaToXzc6xQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:55 2026 by rpki-client