Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
File: txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft (raw, json)
Hash identifier: pWj9GZyOmc4yWn2INL7polva7DCBrEs8X2D+Nl5gGSQ=
Subject key identifier: 76:E3:B7:A4:10:9A:E5:77:D2:00:79:C8:18:E4:EE:69:9B:F1:69:FC
Authority key identifier: B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE
Certificate issuer: /CN=b71758b085d10ef27cc3e168f490075d3e7c4efe
Certificate serial: 019D37894B5E6D075435B4B050E6817985F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 03:00:37 +0000
Manifest this update: Sun 29 Mar 2026 03:00:37 +0000
Manifest next update: Mon 30 Mar 2026 03:00:37 +0000
Files and hashes: 1: txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl (hash: s0wEZPfLiQNXE0ulQXEY57Gvw8Tvd6gD6lYaL8nLfkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:4b:5e:6d:07:54:35:b4:b0:50:e6:81:79:85:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71758b085d10ef27cc3e168f490075d3e7c4efe
Validity
Not Before: Mar 29 03:00:37 2026 GMT
Not After : Mar 30 03:00:37 2026 GMT
Subject: CN=76e3b7a4109ae577d20079c818e4ee699bf169fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:94:a2:49:cd:7f:62:93:61:ce:ee:69:75:
e0:aa:ea:47:8e:cf:39:dc:a6:c3:03:90:95:f4:eb:
80:35:0f:65:00:8f:c3:9a:ab:e6:28:c2:7b:00:53:
92:0d:93:d6:be:32:34:cc:b0:7a:ca:68:00:ba:42:
e7:f5:9a:e4:a6:7e:cb:b9:84:f3:9a:b4:e3:62:6c:
69:6f:95:e1:48:80:f8:0c:0d:d3:0c:fb:2b:ae:17:
05:cd:bd:ba:f9:ca:d1:e2:85:95:24:bf:79:ba:12:
66:b5:c0:bb:5c:3f:53:93:b2:5d:4e:91:7e:46:fa:
bf:51:52:48:27:2e:e6:a4:d5:36:10:cf:eb:39:91:
eb:d3:6f:3a:2b:f7:de:46:e6:0f:ad:61:d9:2d:da:
33:e5:63:9c:ac:fc:d0:fb:ef:16:af:eb:6e:78:a4:
5c:eb:cc:22:01:2b:a0:92:ce:33:93:59:ce:a6:e7:
ae:ad:1a:2f:5b:b6:bd:ff:42:81:53:0c:59:28:1e:
44:1f:da:35:a5:96:f9:76:c8:9d:30:d7:7c:7d:6f:
fb:96:52:57:9a:0e:34:b8:37:fb:c1:aa:57:2f:bc:
08:4b:ab:f1:91:96:91:57:ba:f9:36:82:e0:3f:83:
a3:4e:2e:34:a8:ba:40:1e:9b:7f:4a:05:be:4f:ae:
16:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E3:B7:A4:10:9A:E5:77:D2:00:79:C8:18:E4:EE:69:9B:F1:69:FC
X509v3 Authority Key Identifier:
keyid:B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:17:1b:8d:82:34:3f:bf:cb:17:7c:71:41:f4:a2:c7:de:40:
4b:38:c3:c8:8d:59:0e:10:b2:42:e1:fa:d5:34:fe:24:5f:09:
8b:09:15:de:b5:d5:63:0a:f2:3a:03:8b:ac:e5:66:c3:55:0e:
3f:b6:03:10:d9:93:90:2c:63:64:de:e9:86:5f:9e:18:ee:95:
61:7c:92:66:9d:b7:9a:04:23:5c:af:64:95:16:fa:a1:e1:29:
06:cf:da:42:89:30:06:d4:ae:ea:4b:da:75:b2:b2:fe:b3:b5:
e2:69:89:c0:59:c0:cc:e4:9a:bc:e9:6c:3d:23:18:f3:c8:d7:
f0:85:53:27:e1:e8:6d:30:48:2e:f1:04:ad:3c:92:6a:03:87:
05:a5:09:e7:cb:09:25:8b:71:9f:cf:cd:fb:ff:03:5d:fa:90:
a1:1d:88:16:b3:92:43:e1:6d:28:8e:77:7e:fb:5f:a7:67:7d:
16:b2:67:b3:76:63:4d:47:aa:84:50:a5:aa:ab:e0:71:a8:a4:
6f:b4:b3:47:16:1f:d5:ab:2a:ff:bc:9a:06:34:06:e2:2b:0a:
a1:05:e9:d5:24:97:c9:85:f6:3d:cd:8f:ec:9b:33:81:dd:0b:
da:ba:f8:6f:93:35:57:3f:40:bd:d9:3c:d3:35:e8:1f:02:b5:
dd:00:57:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:25 2026 by rpki-client