Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
File: T2L75L_BSBjG6c5mewVq1x_vKsM.mft (raw, json)
Hash identifier: l8A0epjLVI2hocbVkrxgKhnb5kkL8Pyo7CVBP5Pw52Y=
Subject key identifier: B1:0B:C1:52:12:EB:08:76:1E:9A:56:C8:9A:27:96:2E:41:CB:96:53
Authority key identifier: 4F:62:FB:E4:BF:C1:48:18:C6:E9:CE:66:7B:05:6A:D7:1F:EF:2A:C3
Certificate issuer: /CN=4f62fbe4bfc14818c6e9ce667b056ad71fef2ac3
Certificate serial: 019D37BFF7AC2E1A2C7CB15E820BCE9ED247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
Manifest number: 038C
Signing time: Sun 29 Mar 2026 04:00:20 +0000
Manifest this update: Sun 29 Mar 2026 04:00:20 +0000
Manifest next update: Mon 30 Mar 2026 04:00:20 +0000
Files and hashes: 1: T2L75L_BSBjG6c5mewVq1x_vKsM.crl (hash: 9UhjpeSzDH1z6l4vy/lmkteMXnBBXFdyOssOaav9LKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f7:ac:2e:1a:2c:7c:b1:5e:82:0b:ce:9e:d2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f62fbe4bfc14818c6e9ce667b056ad71fef2ac3
Validity
Not Before: Mar 29 04:00:20 2026 GMT
Not After : Mar 30 04:00:20 2026 GMT
Subject: CN=b10bc15212eb08761e9a56c89a27962e41cb9653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:d3:bf:46:bc:6b:8b:91:19:eb:87:85:75:
95:57:d4:5e:5f:c9:c6:70:ee:3a:50:18:cb:ae:37:
33:ce:21:07:ab:11:26:84:6e:20:40:69:78:5e:92:
8b:b4:10:69:19:79:1d:13:da:9f:86:3d:77:8e:27:
02:9f:7f:5e:9e:3f:3f:87:e4:25:dd:99:1b:1c:36:
98:33:01:61:91:a7:b8:44:16:5c:eb:1d:b5:f4:80:
4c:d5:12:19:c9:70:b5:de:4d:51:ef:6d:e5:5d:8d:
b7:07:42:6f:73:5f:d6:ac:a6:0b:9f:51:88:e3:59:
8c:43:c5:fa:31:98:8d:72:38:b5:02:79:20:98:70:
3f:59:c7:d8:84:7e:3e:11:73:4f:ea:62:df:0f:8f:
73:23:db:9c:7c:fa:04:88:2c:ba:2d:64:fd:a2:99:
cf:30:ac:81:b2:f6:c3:2a:cf:f2:63:ab:1d:20:c3:
6d:8d:03:60:2d:09:d8:e6:66:a5:a2:fd:96:71:81:
0b:97:4b:c1:ba:17:58:a6:3e:da:27:3d:85:1b:01:
4c:54:24:a1:08:6c:83:58:0f:65:a5:ed:0f:04:48:
fa:20:56:81:14:d0:69:03:01:76:c2:1a:f8:6a:ad:
ab:4e:b2:c8:6c:50:60:80:c2:8a:43:f3:74:26:36:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0B:C1:52:12:EB:08:76:1E:9A:56:C8:9A:27:96:2E:41:CB:96:53
X509v3 Authority Key Identifier:
keyid:4F:62:FB:E4:BF:C1:48:18:C6:E9:CE:66:7B:05:6A:D7:1F:EF:2A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:57:d2:dd:68:46:7c:2d:3e:93:9f:3c:92:df:02:f9:55:43:
69:8b:1b:74:24:ff:19:1f:3a:12:f1:b9:98:89:26:b7:6b:9b:
95:be:84:c4:23:48:b2:91:a6:0d:d3:76:53:52:47:02:93:ed:
e0:92:a2:91:24:c0:62:a0:20:7f:ea:44:65:46:17:71:e2:9d:
d1:0b:f8:ab:5e:40:46:49:5b:4d:e1:f3:2c:04:e8:40:ca:9d:
c8:1b:8a:47:9e:ba:24:be:54:07:37:ac:77:de:72:f8:70:5a:
e0:b5:ec:be:b8:7b:1e:10:ab:2b:96:eb:69:03:df:c4:de:69:
fb:b6:ee:ff:71:eb:bc:2b:57:65:65:41:a7:65:fd:04:e4:1a:
be:e9:9e:80:1f:63:e4:26:77:33:ee:22:8c:73:37:f3:0c:6e:
e1:74:39:4b:0e:84:7b:95:12:8e:f0:3b:8a:6c:ae:7b:a4:90:
6f:e6:fd:af:52:cb:31:e9:c7:54:28:f4:b2:a8:92:c6:98:6c:
58:05:f2:5d:a6:dc:28:6f:33:bf:65:14:76:e7:11:32:51:3d:
4d:bc:37:a5:cb:8f:bd:31:61:07:c1:a6:bb:9a:96:72:2e:2e:
36:03:4a:ab:fe:5b:87:f0:13:d1:26:53:e6:95:a6:ae:d5:5b:
e9:78:50:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:05 2026 by rpki-client