Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.mft
File: TON2ekBU9IaN4L2fsjpcx2kP_tU.mft (raw, json)
Hash identifier: 0HCKBGR8LDpEaFZpm6m0zIJamsVPMHMyuoKlhfd8O0E=
Subject key identifier: 5D:E2:5B:4A:A4:33:5E:1C:B7:AA:3C:35:84:38:67:A4:7D:B9:BE:86
Authority key identifier: 4C:E3:76:7A:40:54:F4:86:8D:E0:BD:9F:B2:3A:5C:C7:69:0F:FE:D5
Certificate issuer: /CN=4ce3767a4054f4868de0bd9fb23a5cc7690ffed5
Certificate serial: 019D37892457A78D1B531DAC7ED700D8C27F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON2ekBU9IaN4L2fsjpcx2kP_tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.mft
Manifest number: 102D
Signing time: Sun 29 Mar 2026 03:00:27 +0000
Manifest this update: Sun 29 Mar 2026 03:00:27 +0000
Manifest next update: Mon 30 Mar 2026 03:00:27 +0000
Files and hashes: 1: TON2ekBU9IaN4L2fsjpcx2kP_tU.crl (hash: DJsHygfq8Xh2PbvfXbs9pxnZLkw8LfZkqXSLUNPBqpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TON2ekBU9IaN4L2fsjpcx2kP_tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:24:57:a7:8d:1b:53:1d:ac:7e:d7:00:d8:c2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce3767a4054f4868de0bd9fb23a5cc7690ffed5
Validity
Not Before: Mar 29 03:00:27 2026 GMT
Not After : Mar 30 03:00:27 2026 GMT
Subject: CN=5de25b4aa4335e1cb7aa3c35843867a47db9be86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:02:2d:aa:7f:c4:03:39:44:96:13:0e:41:23:
24:a7:fc:08:c6:9f:de:c4:51:6d:74:eb:5d:9f:07:
08:be:95:18:ec:a8:d3:34:f6:7c:e2:a9:81:72:b4:
b5:ec:7e:27:93:96:bb:f6:5a:82:90:d0:99:55:08:
f1:ac:01:06:4d:bf:7b:9f:df:01:54:2b:9b:12:cf:
8c:a6:89:2f:8b:90:24:bd:52:22:8b:f8:ea:73:7d:
4d:2d:52:05:31:c4:e0:9a:dc:31:4b:e5:a2:be:a6:
d4:38:66:9d:65:3f:61:bb:41:55:d7:74:cd:3b:f3:
d4:26:2e:f4:51:30:c7:4a:3d:7a:74:bd:9f:d5:94:
68:23:8f:52:ec:e7:78:95:63:bd:79:ef:5d:7a:61:
62:5a:80:cd:12:83:d2:1a:bf:76:ab:33:cc:9e:f9:
0a:00:2e:78:6f:93:85:68:81:6c:4f:c1:d6:28:3f:
d9:8e:c4:1b:e3:ce:79:d1:a0:22:16:60:a5:1a:68:
85:91:4d:48:1a:cf:8a:af:2a:fd:98:6b:c1:dd:4b:
4c:8c:e3:31:05:97:8d:f5:44:d5:75:75:1e:d2:18:
41:58:9b:46:eb:0f:3a:e1:52:a8:df:a8:be:4f:6e:
a8:b2:5c:0a:ea:55:f6:96:ba:45:7a:53:20:08:f7:
54:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E2:5B:4A:A4:33:5E:1C:B7:AA:3C:35:84:38:67:A4:7D:B9:BE:86
X509v3 Authority Key Identifier:
keyid:4C:E3:76:7A:40:54:F4:86:8D:E0:BD:9F:B2:3A:5C:C7:69:0F:FE:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON2ekBU9IaN4L2fsjpcx2kP_tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a2:48:fa:ed:37:8b:0b:fe:40:d9:d9:36:ba:b3:5d:5c:45:
40:44:d5:e7:e2:ce:cc:ed:42:6e:af:48:39:d6:b4:eb:09:6e:
d5:5e:53:1c:2f:5b:05:e8:ad:65:d3:1e:84:98:8e:dc:a0:d6:
b4:36:9a:cc:fb:c2:df:b7:8d:ea:5d:f0:77:5f:80:af:88:4a:
75:de:4f:4a:8e:5f:2b:c3:c5:d9:85:76:0d:9c:6f:51:95:a0:
1c:88:e3:27:68:09:3d:f2:05:72:c5:fe:aa:a3:cb:0e:1d:b6:
a7:5d:ca:a2:37:68:82:c9:b9:71:38:5f:8e:42:2a:05:07:a3:
63:99:cd:7c:6a:70:ae:cc:32:0d:38:4d:0e:42:69:a6:78:4d:
46:eb:8e:ab:67:27:44:d0:14:ee:dd:ac:cc:57:3d:ac:20:cb:
23:16:00:bc:5d:6f:ad:e0:aa:b2:f8:d4:51:3b:3d:86:c9:53:
9c:9a:62:05:43:87:61:ad:f5:b7:6c:ab:86:14:ae:a9:8d:3b:
0b:80:dd:ea:d2:b2:1d:97:d1:2e:29:3c:00:b1:66:49:10:ca:
60:14:4c:7f:4e:52:24:50:9b:ff:b1:e0:db:9d:44:99:65:29:
97:51:b0:54:65:0e:cc:fd:c6:93:03:78:e6:48:38:17:af:79:
9e:d8:ea:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iSRXp40bUx2sftcA2MJ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTM3NjdhNDA1NGY0ODY4ZGUwYmQ5ZmIyM2E1Y2M3Njkw
ZmZlZDUwHhcNMjYwMzI5MDMwMDI3WhcNMjYwMzMwMDMwMDI3WjAzMTEwLwYDVQQD
Eyg1ZGUyNWI0YWE0MzM1ZTFjYjdhYTNjMzU4NDM4NjdhNDdkYjliZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQItqn/EAzlElhMOQSMkp/wIxp/e
xFFtdOtdnwcIvpUY7KjTNPZ84qmBcrS17H4nk5a79lqCkNCZVQjxrAEGTb97n98B
VCubEs+Mpokvi5AkvVIii/jqc31NLVIFMcTgmtwxS+WivqbUOGadZT9hu0FV13TN
O/PUJi70UTDHSj16dL2f1ZRoI49S7Od4lWO9ee9demFiWoDNEoPSGr92qzPMnvkK
AC54b5OFaIFsT8HWKD/ZjsQb48550aAiFmClGmiFkU1IGs+Kryr9mGvB3UtMjOMx
BZeN9UTVdXUe0hhBWJtG6w864VKo36i+T26oslwK6lX2lrpFelMgCPdUgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3iW0qkM14ct6o8NYQ4Z6R9ub6GMB8GA1UdIwQY
MBaAFEzjdnpAVPSGjeC9n7I6XMdpD/7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9OMmVrQlU5SWFONEwyZnNqcGN4MmtQX3RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mN2JhZjQtZDI2Ni00ZmU1LWE2ZmYt
YTAwNjY3ZjRjZjcxLzEvVE9OMmVrQlU5SWFONEwyZnNqcGN4MmtQX3RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9mN2JhZjQtZDI2Ni00ZmU1LWE2ZmYtYTAwNjY3ZjRjZjcx
LzEvVE9OMmVrQlU5SWFONEwyZnNqcGN4MmtQX3RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6JI+u03
iwv+QNnZNrqzXVxFQETV5+LOzO1Cbq9IOda06wlu1V5THC9bBeitZdMehJiO3KDW
tDaazPvC37eN6l3wd1+Ar4hKdd5PSo5fK8PF2YV2DZxvUZWgHIjjJ2gJPfIFcsX+
qqPLDh22p13Kojdogsm5cThfjkIqBQejY5nNfGpwrswyDThNDkJppnhNRuuOq2cn
RNAU7t2szFc9rCDLIxYAvF1vreCqsvjUUTs9hslTnJpiBUOHYa31t2yrhhSuqY07
C4Dd6tKyHZfRLik8ALFmSRDKYBRMf05SJFCb/7Hg251EmWUpl1GwVGUOzP3GkwN4
5kg4F695ntjqEQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:28 2026 by rpki-client