Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
File: tT1dyv8VkDIr61fsPrrvYlBBKVU.mft (raw, json)
Hash identifier: pNwGqQGepAJlJB8DKs7coD/El+WD3WSwXZqqy8QJdVU=
Subject key identifier: 94:93:6C:D6:5D:B0:5F:02:9E:BB:AF:7C:D4:88:93:61:51:B7:08:8B
Authority key identifier: B5:3D:5D:CA:FF:15:90:32:2B:EB:57:EC:3E:BA:EF:62:50:41:29:55
Certificate issuer: /CN=b53d5dcaff1590322beb57ec3ebaef6250412955
Certificate serial: 019D3A542EC0DB2599B0E5D44FBEDA37B593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
Manifest number: 0B56
Signing time: Sun 29 Mar 2026 16:01:28 +0000
Manifest this update: Sun 29 Mar 2026 16:01:28 +0000
Manifest next update: Mon 30 Mar 2026 16:01:28 +0000
Files and hashes: 1: tT1dyv8VkDIr61fsPrrvYlBBKVU.crl (hash: 2PKeMfgqDEI1LR2IVG2bgcxEf4yFJZEWvTX3+WC0AkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:2e:c0:db:25:99:b0:e5:d4:4f:be:da:37:b5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53d5dcaff1590322beb57ec3ebaef6250412955
Validity
Not Before: Mar 29 16:01:28 2026 GMT
Not After : Mar 30 16:01:28 2026 GMT
Subject: CN=94936cd65db05f029ebbaf7cd488936151b7088b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:84:e4:88:97:b3:4c:95:e8:a3:2d:f2:79:d1:
0f:5e:a2:17:99:6d:69:87:20:3a:50:a7:bf:49:3b:
ec:69:10:7d:7a:39:4e:4d:a2:fd:09:94:a5:d6:8c:
d3:ea:e8:0b:ae:cf:23:18:5f:70:bc:13:0b:16:e8:
87:c8:d5:a6:62:a4:1f:29:3d:3f:4f:c0:72:e4:ef:
78:17:0f:85:ee:47:65:7a:56:ea:3e:4f:1f:e0:9e:
8c:ff:4f:e4:22:84:12:8f:e1:70:70:77:b6:53:82:
87:b8:38:66:fc:40:2e:a2:4b:3a:f6:97:00:b5:2a:
d2:6b:5d:6b:f1:75:b9:d2:4c:43:d3:6a:7a:cd:07:
8a:0c:2e:b2:e6:38:62:41:37:be:cf:2c:11:32:24:
b9:95:7a:bc:f1:42:ec:2e:b5:07:96:74:a0:cb:b3:
64:18:78:8d:5b:f3:d7:a6:df:68:48:37:76:66:a3:
5c:51:7a:2e:44:9a:92:56:44:c3:e0:21:1a:f9:ce:
a9:d9:c7:27:a6:30:18:40:09:14:eb:71:28:ae:73:
fd:0e:5c:2d:da:a8:63:72:81:b0:2f:73:29:2f:45:
7c:88:61:7c:85:e6:70:d1:18:f8:a2:83:c1:d5:c8:
05:fc:5d:a2:0a:19:74:00:49:30:7d:1d:08:ce:f9:
8b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:93:6C:D6:5D:B0:5F:02:9E:BB:AF:7C:D4:88:93:61:51:B7:08:8B
X509v3 Authority Key Identifier:
keyid:B5:3D:5D:CA:FF:15:90:32:2B:EB:57:EC:3E:BA:EF:62:50:41:29:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2a:b0:f1:d9:31:dd:04:a6:ca:68:4e:12:a9:3e:40:2f:58:
f0:bc:22:88:4b:63:12:a9:6c:9e:98:05:00:b8:14:d5:de:9d:
fd:1d:52:ea:44:cf:3f:b3:ca:87:7c:94:7d:f8:f0:34:91:c5:
86:c1:09:1f:a4:fd:3e:f7:1f:83:b9:68:5e:d8:0d:80:2d:ab:
2b:f2:45:8b:fb:04:2e:92:ec:56:bf:a9:46:dd:38:cb:b2:69:
98:88:2b:63:74:9a:2d:1a:cc:82:b3:4c:67:23:2d:67:47:80:
ce:fa:9a:5d:85:67:7f:0d:29:d2:ec:08:4f:2c:9f:67:b1:16:
c2:4c:a0:c6:15:8b:00:0e:37:11:da:40:11:39:d7:16:87:0c:
d1:7a:d3:e0:e5:3c:63:0a:2d:4e:43:ba:fa:c5:b5:8f:48:8f:
78:27:2b:c8:d2:04:a0:b7:21:50:84:65:2e:07:66:e0:5e:d1:
7d:6f:c8:9a:f4:a8:a3:dd:46:56:64:80:a5:0c:87:09:ae:3e:
46:e2:32:ed:f3:56:31:ba:06:f3:84:3b:b1:5b:9f:48:af:8e:
d0:8c:65:82:a0:5a:e5:b2:7b:4d:34:ef:8c:f8:9c:4e:e7:af:
eb:f2:ec:2b:04:1d:9f:44:6a:2a:29:cc:4a:c3:32:c1:65:31:
e5:b1:fc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:10 2026 by rpki-client